last executing test programs:

42.670939459s ago: executing program 1 (id=265):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
write$char_usb(r0, &(0x7f00000008c0)='-0', 0x2) (async)
mknodat$null(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r1, &(0x7f000000af00)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0x0, r2, {0x7, 0x9}}, 0x50) (async, rerun: 64)
r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) (rerun: 64)
mq_timedreceive(r3, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980))
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

42.598965168s ago: executing program 1 (id=268):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x10004001)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x5f0204eaabe03e2f, r1})
r2 = gettid()
process_vm_readv(r2, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r3, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x2000, 0xfffffffc, r4, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0x0, 0x0, 0x8, {0x4004, 0x8, 0xfffffffffffffffd, 0x2, 0x1, 0x0, 0x5, 0x4, 0x4, 0x2000, 0xff, r6, r7, 0x3, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
inotify_init()
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0xffffffffffffffff}, 0x6)
r9 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r11, 0x80049370, &(0x7f0000002e40))
sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r11, 0x0, 0x484, &(0x7f0000000900)={0x16, @rand_addr=0x64010102, 0x4e24, 0x1, 'none\x00', 0x10, 0x2, 0x6}, 0x2c)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x200, 0x70bd2b, 0x25dfdbfd, {0x2, 0x18, 0x80, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x1ff}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendmmsg$inet(r9, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000)

42.597494002s ago: executing program 1 (id=272):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000fdffffff0000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64b76600000c0002000800010006"], 0x3c}}, 0x20008084) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000400012800b00010067656e65766500003000028005000c000000000005000c00010000000500090001000000140007000000000000000000000000000000000108000a00bdbb0c1732dc49edc491ff0e940eac7302c82f93f14d7124612520f0e5c38315b648016832638778240bab801c5b6ec4a2cdd4e6b0d429d3a44c080c113e9a0b6d2f3a7051b3c58fe8f91962da8baae31023efa04b68aad18aff914877ee35b31c14", @ANYRES32=r2, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

42.489993106s ago: executing program 1 (id=274):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={<r0=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @multicast2}]}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES8=<r2=>r0])
syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x2000000000000005, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000, {0x2, 0xd0a, 0x3, 0x4, 0x0, 0xfffffffffffffffe, 0x47, 0x0, 0x126, 0x6000, 0x10000, 0x0, 0x0, 0x902, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES8=r2, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030005ac0f000500090001"], 0x58}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80202, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40086602, &(0x7f0000000000))
symlinkat(&(0x7f0000000200)='./file0/file0\x00', r7, &(0x7f0000000240)='./file0\x00')
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0)
r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TIOCGWINSZ(r8, 0x5413, &(0x7f0000000200))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

42.320273047s ago: executing program 1 (id=278):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x3a1002)
write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x71)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/50)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)

42.021191026s ago: executing program 1 (id=284):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0000eb1e2f315b0000ffffffffff000000000000d283b0c98995b4f9bee08de1d6ef20cee5a295136e76daa7ffd7cf3914d75a42c6be4abd1d925c9692372b865c0e62ec47ef575788d69baa27bbd8fef6f6250bd05cc5d55091961ba4e4f23b", @ANYBLOB="ffd3a15b749e4a7497d9621000d8bc0f5dd6a59e9a0f42ead051950064738187d14506c5f9174578a9f8caffe925846e7c728516d6a5cf2de44cdfd7ee1fca5467"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r5, &(0x7f0000000280)}, 0x20)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0xfffffffc}}, 0x48)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000002380))
socket$kcm(0x10, 0x2, 0x10)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TCXONC(r9, 0x540a, 0x2)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r12 = syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$x86(r12, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_RUN(r13, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x20000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@delqdisc={0x104, 0x25, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf, 0x4}, {0xfff3, 0xffff}, {0xffff, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2b}, @TCA_RATE={0x6, 0x5, {0xff, 0xe3}}, @qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x400}, @TCA_TBF_PBURST={0x8, 0x7, 0xebf}, @TCA_TBF_PRATE64={0xc, 0x5, 0x5235e3ce7a42a683}, @TCA_TBF_PRATE64={0xc, 0x5, 0x8410105427fb5d3d}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xf, 0x7f, 0x3, 0x0, 0x1ff, 0x3, 0x3}}, {0xa, 0x2, [0xa, 0x9, 0x7ff]}}, {{0x1c, 0x1, {0x6, 0x8, 0x8, 0xfff, 0x2, 0x0, 0x1, 0x1}}, {0x6, 0x2, [0xfffe]}}, {{0x1c, 0x1, {0x6, 0x16, 0x8, 0x7, 0x0, 0x9, 0x3, 0x9}}, {0x16, 0x2, [0x5b, 0x6, 0x4, 0x3, 0x0, 0xa5, 0x3, 0x97, 0x9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}]}, 0x104}, 0x1, 0x0, 0x0, 0x4001}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_emit_ethernet(0x6f, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0)

41.98451284s ago: executing program 32 (id=284):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0000eb1e2f315b0000ffffffffff000000000000d283b0c98995b4f9bee08de1d6ef20cee5a295136e76daa7ffd7cf3914d75a42c6be4abd1d925c9692372b865c0e62ec47ef575788d69baa27bbd8fef6f6250bd05cc5d55091961ba4e4f23b", @ANYBLOB="ffd3a15b749e4a7497d9621000d8bc0f5dd6a59e9a0f42ead051950064738187d14506c5f9174578a9f8caffe925846e7c728516d6a5cf2de44cdfd7ee1fca5467"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r5, &(0x7f0000000280)}, 0x20)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0xfffffffc}}, 0x48)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000002380))
socket$kcm(0x10, 0x2, 0x10)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TCXONC(r9, 0x540a, 0x2)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r12 = syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil)
r13 = syz_kvm_add_vcpu$x86(r12, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_RUN(r13, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x20000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@delqdisc={0x104, 0x25, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf, 0x4}, {0xfff3, 0xffff}, {0xffff, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2b}, @TCA_RATE={0x6, 0x5, {0xff, 0xe3}}, @qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x400}, @TCA_TBF_PBURST={0x8, 0x7, 0xebf}, @TCA_TBF_PRATE64={0xc, 0x5, 0x5235e3ce7a42a683}, @TCA_TBF_PRATE64={0xc, 0x5, 0x8410105427fb5d3d}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xf, 0x7f, 0x3, 0x0, 0x1ff, 0x3, 0x3}}, {0xa, 0x2, [0xa, 0x9, 0x7ff]}}, {{0x1c, 0x1, {0x6, 0x8, 0x8, 0xfff, 0x2, 0x0, 0x1, 0x1}}, {0x6, 0x2, [0xfffe]}}, {{0x1c, 0x1, {0x6, 0x16, 0x8, 0x7, 0x0, 0x9, 0x3, 0x9}}, {0x16, 0x2, [0x5b, 0x6, 0x4, 0x3, 0x0, 0xa5, 0x3, 0x97, 0x9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}]}, 0x104}, 0x1, 0x0, 0x0, 0x4001}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_emit_ethernet(0x6f, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffff07bcbbbbbbbbbb8100000086dd60fec00000353a00fc000000000000000000000000000000ff02000000000000000000006e38d2ed220000000102009078000000006018b08800000000fe8000000000000000000000000000aafe8000000000000000000000000000aafafb17c1338b3d1e586b2a58f01cfc847b14876a9a8aaaf92d7bfc2a77331ffb23b729d8544b03be5b87f51dc448213313a922720d0fd7ce41e598c57e00cf815cd032d6f6ebe72cbd1fef7cc97d97b2ed88b980cb4f3092af2e8a49d8c07946e2aff3a574482d13e2377b465a9086c309b31171befe529c95efc6ee4091e5ed3c530fc328ffaa6d9cebb2b0526f47f5cd9f8f5ed50fc76c6eb57f2e4c182e4ffbfc691b5e607dd8050bb2778a8ef5171503e434460ba6b8c928926630f5edb45b3a08e0bea0b310d211d8b215ce8481b157e2dabf26209959a05534caa491d29c42586822d254652c2b999d38bc7c88c26aac3dffdc83994938010000001d31051496"], 0x0)

37.680705649s ago: executing program 3 (id=321):
r0 = io_uring_setup(0x718c, &(0x7f0000000180)={0x0, 0x0, 0x2})
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6)
fcntl$addseals(r3, 0x409, 0xc)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x800})
ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000001780)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x15)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
io_uring_register$IORING_UNREGISTER_NAPI(r5, 0x1c, &(0x7f0000000080), 0x1)
ioctl$DVD_WRITE_STRUCT(r5, 0x5390, &(0x7f0000000140)=@bca={0x3, 0xbc, "b81893547e4c88a750f534989db873d3d0177b532d70dc00d3d059cec99c6c4c013f3db848ff8a7e8618004e468b27dff75a6090c007433b5bfe951d68128cbd709eb56b26e179b0da5d556e85a6e63335e637e2da983a2a8dd60a05933e9de1d14c08bcb8ee3837931ce7116db83753b0a81348804f501007f03d3ec5225cf5da71706e6fde06b61c16041cb74f61e8d3511a8fc788a2544febd08eff63df8bbf268a04477377cbba723244df5dcb285063b1f0ee565ad24888c83b"})

37.619488153s ago: executing program 3 (id=322):
r0 = syz_io_uring_setup(0x889, &(0x7f00000000c0)={0x0, 0xaee2, 0x0, 0x82, 0xbfdffffc}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000003000), 0x201, 0x0)
fstat(r4, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x8})
io_uring_enter(r0, 0x47f6, 0x1a93, 0x0, 0x0, 0x0)

37.510667235s ago: executing program 3 (id=325):
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000003c0)=0x5, 0x4)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0xfffffffffffffd1a)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r5 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x800098, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140))
sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000000000fec7454005755273", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000200000000000000000100"/24], 0x48}, 0x300}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r0], 0x38}, 0x300}, 0x8040)
r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x41656df3e1b7f6b8, 0x0) (async)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x41656df3e1b7f6b8, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r9}, 0x18)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
ioctl$EVIOCGSW(r8, 0x80404531, 0x0)

37.460782173s ago: executing program 3 (id=326):
r0 = socket$inet(0xa, 0x801, 0x84)
r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
fsetxattr$security_ima(r1, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x16}, 0xfe49, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
listen(r4, 0x9)
accept4(r0, 0x0, 0x0, 0x0)

37.460539436s ago: executing program 3 (id=327):
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

37.249285395s ago: executing program 3 (id=330):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
modify_ldt$read(0x1100, 0x0, 0xfffffffffffffe5e)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]})
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000300)='./bus/file0\x00', 0x0) (async)
mkdirat(r1, &(0x7f0000000300)='./bus/file0\x00', 0x0)
r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x60)
mkdirat(r2, &(0x7f00000004c0)='./bus/file0\x00', 0x2)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000180)=0xffff0018) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000180)=0xffff0018)
read$dsp(r3, &(0x7f0000000080)=""/203, 0xcb)
renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2)
write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1304000065ffffffffffff0600395032303030"], 0x13)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000580)="75aca0cb4e28622550723301b5119a33c3ac1acd56b0c7fd292927c7ef3d106c4978a6c896f6f8e6a68559597592b7011e0261e6e41f06f39062af4496827224fbc2a477adb5ca504b3e0831fcc705bb4be34ebc5c002ff37538b67b5aa969e8932600cf271169167d6beb38a5656b3ba2e7e3b97b92806baa058cff5f6785af8fc4969e6442c68a3045d900"/169, 0xa9}], 0x2)
ioctl$HIDIOCGPHYS(r4, 0x80404812, &(0x7f0000000000))

37.142291712s ago: executing program 33 (id=330):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
modify_ldt$read(0x1100, 0x0, 0xfffffffffffffe5e)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]})
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000300)='./bus/file0\x00', 0x0) (async)
mkdirat(r1, &(0x7f0000000300)='./bus/file0\x00', 0x0)
r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x60)
mkdirat(r2, &(0x7f00000004c0)='./bus/file0\x00', 0x2)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000180)=0xffff0018) (async)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000180)=0xffff0018)
read$dsp(r3, &(0x7f0000000080)=""/203, 0xcb)
renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2)
write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1304000065ffffffffffff0600395032303030"], 0x13)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000580)="75aca0cb4e28622550723301b5119a33c3ac1acd56b0c7fd292927c7ef3d106c4978a6c896f6f8e6a68559597592b7011e0261e6e41f06f39062af4496827224fbc2a477adb5ca504b3e0831fcc705bb4be34ebc5c002ff37538b67b5aa969e8932600cf271169167d6beb38a5656b3ba2e7e3b97b92806baa058cff5f6785af8fc4969e6442c68a3045d900"/169, 0xa9}], 0x2)
ioctl$HIDIOCGPHYS(r4, 0x80404812, &(0x7f0000000000))

23.410600017s ago: executing program 4 (id=508):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f)
close(r2)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x404000, 0x0)
ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000380))
sendmmsg$inet(r3, &(0x7f0000003b00), 0x0, 0x50)

23.330037266s ago: executing program 4 (id=509):
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x0, 0x6, 0x5, 0x4c05b3c4, 0x6, 0x1})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000001800), 0x4)
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0)
ioctl$CDROMSTART(r2, 0x5308)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x20100000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x3}, 0x1c)
syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9)

23.251310407s ago: executing program 4 (id=514):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x90)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}]})

23.190283197s ago: executing program 4 (id=517):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004880)=@polexpire={0xc0, 0x28, 0xffffffffffffffff, 0x0, 0x0, {{{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0x4}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x0, 0x2}, 0x6a}}, 0xc0}}, 0x4000000)
syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0x0)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r3, 0x0)
keyctl$describe(0x6, r3, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004880)=@polexpire={0xc0, 0x28, 0xffffffffffffffff, 0x0, 0x0, {{{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0x4}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x0, 0x2}, 0x6a}}, 0xc0}}, 0x4000000) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) (async)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async)
ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0x0) (async)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async)
keyctl$setperm(0x5, r3, 0x0) (async)
keyctl$describe(0x6, r3, 0x0, 0x0) (async)

22.079135827s ago: executing program 4 (id=542):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
syz_clone3(&(0x7f0000000080)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) (async)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) (async)
r3 = fsopen(&(0x7f0000000000)='udf\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='u\xebd', &(0x7f0000001100)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\\hd\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7o=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc+ 9\x90O\x94>\xa7\xed\x06\x8d\x9dC\t\xf9\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\xe0\xcd\x8d\xbe\x82\xb4\x9du\xe2\x19\xfeG\x12\x13\x0e|&\xa1\n\r?\x92({\x13\x8fX%22\x8d\x9d\xe7\x00&\xced\x96\x85\x04\xa0\x9f\xe5\t~L\x88\xd4\x95\x9a\x88[S', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r2, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8})
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) (async)
sendmsg$sock(r6, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x417, @mcast1, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xffff0000}}], 0x18}, 0x80)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000100)={{0x87, @empty, 0x4e20, 0x2, 'sed\x00', 0x1c, 0x4, 0x32}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2000, 0x6, 0x73a, 0x4}}, 0x44)
r7 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000010c0)={0x8, &(0x7f0000001080)=[{0x7, 0x3, 0x40, 0x5}, {0x9, 0x0, 0x6, 0x320}, {0x3ff, 0xd, 0x9, 0x240c}, {0x6, 0x1, 0xad}, {0x1, 0xc, 0x3, 0x2502}, {0x3, 0xb4, 0x8, 0x101}, {0x4f, 0x7f, 0x48, 0x200}, {0x1, 0x80, 0x6, 0x100}]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x0, [0x2], [0x80ffff], [0x0, 0x0, 0x0, 0x40], [0x6]}) (async, rerun: 64)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r10, 0x0, 0x10001, 0x0, 0x6, 0x18e65, 0x35aef3}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r10, 0x0, 0x10001, 0x0, 0x3, 0xd6fe2, 0x357eb6, 0x20000})

21.930165925s ago: executing program 4 (id=549):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0xffffffff}, 0x1c)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "ddf25593ffae0bf40e7754133362d0a39a8dbc65142c5054", "c405968aed4992ff694925ad88a35b0c83f2d6dbe95e6146618571abafe50e82"}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000000)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{0x7ff, 0x1080}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

12.317528513s ago: executing program 2 (id=632):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}]}, 0x148}}, 0x0)
read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020)

12.317028805s ago: executing program 2 (id=633):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af"})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={<r4=>0x0}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000280)={r4}, &(0x7f00000002c0)=0x8)
sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (async)
rt_sigqueueinfo(0x0, 0x3, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb})
sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbd, 0x4080}, 0x20000010)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) (async)
r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "688d33f2"}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e22, @broadcast}, 0x91, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)='nr0\x00', 0x10, 0xfff, 0x5}) (async)
connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x10) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) (async)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
r7 = openat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x80040, 0x80}, 0x18)
ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000380)={0x1, 0xe5, 0xe0, 0x80000})

12.260745585s ago: executing program 2 (id=634):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000)='affs\x00', 0x1a0fc00, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00')
mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./bus\x00', 0x200, 0x1)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d)
chdir(&(0x7f0000000140)='./bus\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00')
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
r3 = mq_open(&(0x7f0000000680)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05|\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7jo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2\x1e\xd8\xdfJ\xcc\xd7\x9b\xfa\xf0\x0f\x05\xf1\xc4 \xde@\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xec\x87\x1b\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x99$\xfb(\x9b5\xcbF4?O\x1d\xd7\x01*\xc9\xd6L\x86 \x1b\xab9\x1b\x12k\xf9\xec\xd8\x16E\x11-\xfd\x10\x89\x8d\xccbP\x14\x89w\xef\x90\x1d\xc9\x02\xeb\x01V\xfbm\x86\x8a\xc1.m\xd0\xa2\xa4\xc9\a;(\n\xc0\"\x1f\xe4\x1d\x85\xb3\x95\xec\xbb\x9b\x01\x85\xffx\xf2\a\f=\xd1\xcf\xec\xb8!\v\x958\xbf\x15b-\x92\xd6\xb5\xbf\xe2\x92\xc2\xa3}\xd0;\xd1\x96\x86\x8a\x1b\xe1w\xf9\xb0\xd2\xab\xc9\x8a\x19\n\xc5o\x1e\x13/\xe4\x91\x7f\xa5\xf1\xddW\xdb\x98\xcd\x94\xfc\x90\xa0\x05*', 0x6e93ebbbcc0884f2, 0x15b, 0x0)
mq_getsetattr(r3, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r0, 0x0, 0x0) (async)
fchdir(r1) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000)='affs\x00', 0x1a0fc00, 0x0) (async)
chroot(&(0x7f0000000100)='./file0\x00') (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async)
pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') (async)
mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./bus\x00', 0x200, 0x1) (async)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30d) (async)
chdir(&(0x7f0000000140)='./bus\x00') (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async)
link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) (async)
mq_open(&(0x7f0000000680)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05|\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7jo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2\x1e\xd8\xdfJ\xcc\xd7\x9b\xfa\xf0\x0f\x05\xf1\xc4 \xde@\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xec\x87\x1b\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x99$\xfb(\x9b5\xcbF4?O\x1d\xd7\x01*\xc9\xd6L\x86 \x1b\xab9\x1b\x12k\xf9\xec\xd8\x16E\x11-\xfd\x10\x89\x8d\xccbP\x14\x89w\xef\x90\x1d\xc9\x02\xeb\x01V\xfbm\x86\x8a\xc1.m\xd0\xa2\xa4\xc9\a;(\n\xc0\"\x1f\xe4\x1d\x85\xb3\x95\xec\xbb\x9b\x01\x85\xffx\xf2\a\f=\xd1\xcf\xec\xb8!\v\x958\xbf\x15b-\x92\xd6\xb5\xbf\xe2\x92\xc2\xa3}\xd0;\xd1\x96\x86\x8a\x1b\xe1w\xf9\xb0\xd2\xab\xc9\x8a\x19\n\xc5o\x1e\x13/\xe4\x91\x7f\xa5\xf1\xddW\xdb\x98\xcd\x94\xfc\x90\xa0\x05*', 0x6e93ebbbcc0884f2, 0x15b, 0x0) (async)
mq_getsetattr(r3, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async)

12.260256287s ago: executing program 2 (id=635):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)='/proc/sys/\xff\xff\x00n=c_\xa2\x8c\x00\xd1l,\x00'/42}, 0x30)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000001c0)=0x10, 0x4)
read$sequencer(r0, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000040), &(0x7f00000000c0)=""/255, &(0x7f00000001c0), &(0x7f0000000380), 0x6}, 0x38)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0xcc, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x58a5a960}, {0x6, 0x11, 0x3193}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x9}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000001100))

12.110444524s ago: executing program 2 (id=636):
r0 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_flags=0x1000}) (async)
ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_flags=0x1000})

11.929843315s ago: executing program 2 (id=641):
r0 = syz_io_uring_complete(0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f4, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42f6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6c5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x74}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf48}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x72c1}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf1ad}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3e1c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x54)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x14, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0)

11.850946047s ago: executing program 34 (id=641):
r0 = syz_io_uring_complete(0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f4, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42f6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6c5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x74}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf48}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x72c1}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf1ad}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3e1c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x54)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x14, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0)

6.770612685s ago: executing program 35 (id=549):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0xffffffff}, 0x1c)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "ddf25593ffae0bf40e7754133362d0a39a8dbc65142c5054", "c405968aed4992ff694925ad88a35b0c83f2d6dbe95e6146618571abafe50e82"}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000000)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{0x7ff, 0x1080}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.432212926s ago: executing program 5 (id=790):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0xfff1, 0xffff}, {0x10, 0xfff2}}}, 0x24}}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x746, 0x5d, 0xfc, 0x3ff}, {0x1ea, 0x9, 0x2}]}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100003e7ff0000000000040000000000", @ANYRES32=r5, @ANYBLOB="0000000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000180)=0x2, 0x4)

1.520088012s ago: executing program 5 (id=804):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x20, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x4, 0xa}, {0x7, 0x78, 0xfffc, 0xff, 0x40}}}}, 0x17)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001f80)=@flushpolicy={0x11a8, 0x1d, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0x2b}, 0xa, @in6=@private0, 0x0, 0x4, 0x0, 0x8, 0x401, 0x9, 0x6}, {{@in=@multicast2, 0x4d6, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x9}, 0x3501, 0x4, 0x2, 0x2, 0x1a6a, 0x1, 0xcbe2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x4d2, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3503, 0x1, 0x3, 0xd, 0x4, 0x7f, 0x4}]}, @coaddr={0x14, 0xe, @in=@rand_addr=0x64010102}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd26, 0x50}}, @proto={0x5, 0x19, 0x32}, @algo_comp={0x1048, 0x3, {{'lzs\x00'}, 0x8000, "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"}}, @algo_crypt={0x55, 0x2, {{'cryptd(chacha20-arm)\x00'}, 0x68, "81c062e809dd3816402e9b32d5"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x11a8}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048410)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r4, 0x1, 0x10000000, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x2, 0x800, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x9004)
sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

1.518640219s ago: executing program 5 (id=806):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000000)=0x8, 0x4) (async)
read$usbmon(r1, 0x0, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) (async)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0)

1.300850047s ago: executing program 5 (id=812):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [<r4=>0x0, 0x0, 0x0, <r5=>0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={r3, 0xae, 0x2000, 0x34325241, 0x2, [r4, r4, 0x0, r5], [0x2b8, 0x7, 0x6, 0x2], [0x0, 0x0, 0x0, 0x619], [0x1]})

1.300146445s ago: executing program 5 (id=813):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18)
r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2801, 0x11c)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x1)
r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000180)=0x1)
write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz0\x00', {0x2, 0x3, 0xda0c, 0x6}, 0x24, [0xa, 0x1, 0x81, 0x6, 0x212, 0x7fff, 0x400, 0x6, 0x9, 0x9, 0xffff7fff, 0x400, 0x6, 0xffffc582, 0xe88, 0xff4, 0xe, 0xfffffffd, 0x8, 0x2, 0xb4, 0xf8000000, 0xfffffffd, 0x9, 0x1000, 0xc4, 0xffff, 0xde, 0x0, 0x9543, 0x8, 0x8, 0x200, 0x6, 0xe7, 0x5, 0x0, 0x80000000, 0x8, 0x400, 0x9, 0xffffffff, 0xc3, 0xb8, 0xc8, 0x8, 0x1, 0x4b, 0x1, 0x9, 0x4, 0x6, 0xa6, 0x5, 0xd7, 0x7, 0xf5e, 0x5, 0xfffff1e1, 0x7, 0x8, 0x7ff, 0x200, 0x6], [0x6, 0x0, 0x2, 0x10, 0xffffffff, 0xfffffffe, 0x200, 0x3, 0x4, 0x3, 0x0, 0x6163, 0x7, 0x3, 0x40, 0x7, 0x10, 0x1a, 0xf5cf, 0x3, 0x101, 0x9, 0x7, 0x1, 0x0, 0x4, 0xa6, 0x6, 0x9, 0x4, 0xcc9, 0xc9, 0xfffffffd, 0x4, 0xb14f, 0xf, 0x10, 0x0, 0x2da, 0x1, 0x7fff, 0x0, 0x6108, 0x530, 0xffffffff, 0x8, 0x7, 0x7eb, 0xfffff001, 0x2, 0x4, 0x4, 0xc75, 0xffff, 0x401, 0x1e, 0x5, 0xf, 0x1ff, 0x1, 0xffff, 0xffffffa8, 0x5, 0x1], [0x7fffffff, 0x52, 0x6, 0x80000001, 0x81, 0x40, 0x6c, 0xffff, 0x3, 0x4, 0x3, 0xe1, 0x4, 0x8, 0x0, 0x94c, 0xc62, 0x43, 0xfff, 0x9, 0x5, 0x8, 0x900, 0x7fffffff, 0x3, 0x80000000, 0x9, 0x2, 0x4, 0x100, 0x4, 0x62cf, 0x200, 0x5, 0x0, 0x3, 0x97, 0x54, 0x9a, 0x5, 0x9b73, 0xffffffc5, 0x10, 0x9, 0x5, 0x4, 0x0, 0x5c7, 0x5, 0x7414, 0x8, 0x7, 0x300, 0xff, 0x4, 0x8, 0xc, 0x8, 0xfffffff1, 0x8, 0x4, 0x6, 0x1, 0x6], [0x6, 0x5, 0x0, 0x9, 0x30f, 0x4, 0x6e5d, 0xfffffffe, 0x6, 0x6, 0x0, 0x200, 0x2, 0x0, 0x7, 0xff, 0x7fffffff, 0x80, 0x4, 0xfffffffe, 0x2, 0x10, 0x7, 0x4, 0x8, 0x8, 0x0, 0xa, 0x6, 0x2, 0x200000, 0x9, 0x40, 0x5348, 0x0, 0x1ff, 0x1, 0x6, 0x4, 0xfffffff2, 0x7ff, 0x7, 0x0, 0xd, 0x5, 0x0, 0x5, 0x8, 0x1cfb, 0x8, 0x2, 0x101, 0x5, 0x5, 0x2, 0x4, 0x3, 0xfeb, 0x4, 0x2, 0x5, 0x1, 0x5, 0x5]}, 0x45c)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000640)={0xcc, 0x0, 0xa5})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r3, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf8e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4092}, 0x48805)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x24040800)
shutdown(r1, 0x1)
write$uinput_user_dev(r1, &(0x7f0000000940)={'syz1\x00', {0x3, 0xe, 0x5, 0xfff9}, 0x1b, [0x400, 0x7, 0x7, 0x177, 0x20, 0x4, 0x512b, 0x6, 0x40000, 0xd, 0x59, 0x9, 0x4, 0x1, 0x2, 0x0, 0xf3, 0x3ff, 0x0, 0x7ff, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff7db2, 0x3, 0x9, 0x4, 0x2, 0x7c3, 0x100000, 0xc, 0x5, 0x4, 0x0, 0x96, 0x9729, 0x3, 0xa, 0x6, 0x2, 0x90000000, 0xf30, 0xbda, 0x5, 0x8, 0x5, 0x3ff, 0x3, 0x580, 0x887, 0xa3b, 0x100, 0x6, 0x8, 0x3ff, 0x6, 0x3, 0x10000, 0x364b, 0x3, 0x7, 0x7ff], [0x101, 0x5, 0x8, 0x90, 0xb7, 0xc66, 0x9, 0x4, 0x0, 0x5, 0x7ff, 0x2, 0x37, 0x5, 0x4, 0x6, 0x3563e9fe, 0x3, 0x6, 0x4, 0x6, 0x12b, 0x200, 0x9, 0x1, 0x3, 0x2, 0x5, 0x4, 0x3e, 0x1, 0x7ff, 0x2, 0x0, 0x3, 0x8, 0x1, 0x2, 0x7fffffff, 0x3, 0x200, 0x0, 0x0, 0x8, 0xf06, 0xffff97b6, 0x2, 0xffffffcf, 0x8, 0x3, 0xf, 0x4, 0x3f4, 0x2, 0xff, 0x0, 0x1414, 0x2, 0xfffff691, 0x91, 0x3, 0x3, 0x1ff, 0xfe1e], [0xfff, 0x9, 0x2, 0x7, 0x7, 0x3, 0x2d096317, 0x1, 0x0, 0x6, 0x3, 0x2, 0x0, 0x3, 0x5, 0x3, 0x4, 0x1, 0xad, 0x6a, 0x0, 0x9, 0x0, 0x400, 0xc, 0x1, 0x5, 0x7, 0xfffffff8, 0x3, 0x7, 0x9, 0x4, 0x9, 0x9dd3, 0x5, 0x81, 0x8, 0x100, 0x8, 0x9794d784, 0x3, 0xd3, 0x2, 0x101, 0x7, 0xfffffff6, 0x3, 0xf62, 0x0, 0x1ff, 0x0, 0xb0e9, 0x9, 0xfffffff8, 0x0, 0x0, 0x5, 0x7, 0x3, 0xfffff9ba, 0x40, 0x4], [0x2, 0x3, 0x0, 0x1548, 0x614, 0x101, 0x9, 0xffff8001, 0x1ff, 0xd, 0x10af, 0x0, 0x2, 0x5, 0x0, 0x4, 0x9, 0x7, 0x5, 0x8001, 0x70000, 0xb79, 0xfffffff8, 0x3, 0x0, 0x2, 0x1, 0x8, 0x8, 0x5, 0x71, 0x1ff, 0xe3f, 0x3, 0x9, 0x637, 0x9e3c, 0x48, 0x7, 0x5, 0x7, 0x6, 0x5, 0x8, 0x7, 0x3, 0xa06, 0x7, 0x3, 0x5, 0x7fffffff, 0x9, 0x31, 0x9, 0x44, 0x8, 0x3, 0x9, 0x7, 0x1ff, 0x9ee, 0x759, 0x6f4, 0x9]}, 0x45c)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000dc0)=r1, 0x4)
process_vm_readv(0xffffffffffffffff, &(0x7f0000001100)=[{&(0x7f0000000e00)=""/7, 0x7}, {&(0x7f0000000e40)=""/150, 0x96}, {&(0x7f0000000f00)=""/144, 0x90}, {&(0x7f0000000fc0)=""/196, 0xc4}, {&(0x7f00000010c0)=""/55, 0x37}], 0x5, &(0x7f00000012c0)=[{&(0x7f0000001180)=""/18, 0x12}, {&(0x7f00000011c0)=""/49, 0x31}, {&(0x7f0000001200)=""/40, 0x28}, {&(0x7f0000001240)=""/109, 0x6d}], 0x4, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000001300))
openat$sysctl(0xffffffffffffff9c, &(0x7f0000001340)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r1)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000013c0), 0xa600, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000001400))
syz_open_dev$sndmidi(&(0x7f0000001440), 0x4, 0x40000)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x84, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x878}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4001018}, 0x4000000)
ioctl$KVM_CAP_SYNC_REGS(r6, 0x4068aea3, &(0x7f0000001600))
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r1, 0x4068aea3, &(0x7f0000001680))
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001740), r1)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20c540}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40080)

1.211086156s ago: executing program 7 (id=814):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) (async)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={<r2=>r1}) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', <r4=>0x0})
bind$xdp(r2, &(0x7f00000005c0)={0x2d, 0x0, r4, 0xc}, 0x10)
close(r0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) (async)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) (async)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) (async)
r8 = dup3(r7, r6, 0x0) (async)
r9 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000480)="922109d0faa56757e88e23bb8fadefb1868a23c66d1b7d599ea0fb5b6f01c6d12f9eaf2eb4fc058ae7f31abe932a85f4b2a982a429cf1c10654ea5ac987698dfafdf50d0015fee8d0108cbabd4f0a94301736fbc3a5ca83f17e4608ad2658c177fbd063e9f68adc740c0901042b62a4ac57ed9", 0x73}, {&(0x7f0000000500)="69931a2b29068a1d18627a83fcc6d4ba163380c89abf679bb36383766b8028dcf76eb26fca5cf484f7f2e50514648b86bafb28e2ebb7dfd3604eab597567edcef3c55079205cd0b85c272ba633", 0x4d}, {&(0x7f0000000240)="41101f1cd4ceaf279995b692bc2f881665d01e44aba1271b56128add7c8fde50dbe39f439e767e05b789b9c129e5bff6ca353bdc6eedad901269df00", 0x3c}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000640)=[@ip_retopts={{0x30, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0x17, 0xff, [@private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @loopback}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@rr={0x7, 0x7, 0xbb, [@rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x2c, 0xc6, 0x1, 0x6, [{@rand_addr=0x64010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x939}, {@remote}, {@loopback, 0x9}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6fa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010100, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}], 0x108}, 0x20040000) (async)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, r8, 0x37, 0x0, @void}, 0x10) (async)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4627, 0xfdfffffd, @local, 0x2}, 0x1c) (async)
sendmmsg$inet6(r5, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000001780)="9c435a7de4c0ff7c4563", 0xa}], 0x1}}], 0x1, 0x4001c00) (async)
r10 = socket$netlink(0x10, 0x3, 0x0) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1f, 0x4, 0x4, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x0, 0x1, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x1, 0x1}})

1.147684778s ago: executing program 7 (id=816):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/69, 0x328000, 0x1800, 0x3, 0x3}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000640)={0x0, 0x1, 0xbf74})
r2 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0x10}, {0x16}]}, 0x10)
sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)

1.146947196s ago: executing program 7 (id=818):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8000000000000)
r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000000a, 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000673000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x12, 0x1, 0x0, "c175f0b781eddc96e6d941c3a7f9582753f9ffff8cbae2850c67ea00"})
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000001c0000004d564b"])

986.987878ms ago: executing program 0 (id=825):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r5, 0x25, 0x2, @val=@netkit={@void, @value=r3}}, 0x1c)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r6, &(0x7f0000000400), &(0x7f0000000440)=""/203}, 0x20) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x17) (async)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000080)={0x84, @loopback, 0x0, 0x0, 'sh\x00', 0x0, 0xffffffff, 0x1e}, 0x2c) (async)
r12 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r12, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000003c0)="00140a000000000000001d1e01e8e51f", 0x10}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r13=>0x0}) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, 0x0, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r13, @ANYBLOB="05005b"], 0x24}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010000ddff00000000000800000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

939.868904ms ago: executing program 0 (id=826):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x7616, 0x4)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x200600, 0x100)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x2eb2, 0x0, 0x1, 0xc, 0x4}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000100)={0xef39, 0xdd17, 0x0, 0x6}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180), 0x10)
close(r1)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={<r4=>0x0, 0x7fff800}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={r4, 0xf}, &(0x7f0000000280)=0xc)
r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x92)
sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, 0x13, 0x8, 0x70bd2b, 0x25dfdbff, {0x2b, 0x2a, 0x7f, 0x2, {0x4e21, 0x4e20, [0x9, 0x4, 0x80000001, 0x7], [0xd6ee, 0x800, 0x5, 0x19bc], r2, [0x6, 0x5]}, 0x101}, [@INET_DIAG_REQ_BYTECODE={0x64, 0x1, "6fbd4e8305dc4e17cf407edb9a4c718814a07ee6b582475a72dd4982079ca4eee1e3a8fcd18d4f1d19fb1d656e47c1ca4a0764c4c640dda9f14c1c0bd60afdda10b545db125b2ce8a9b4680f5d05d993ce52454fb223fc16344323c022a45dbd"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x84}, 0x4040001)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480), 0x101100, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000004c0)={0x0, 0x2, 0x9, 0x8})
socket$can_j1939(0x1d, 0x2, 0x7)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0xfffffffd, 0x1, 0x40000, r5, 0x0, '\x00', r2, r1, 0x3, 0x0, 0x1, 0xa}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x18, 0xffff, 0xf06e, 0xffff, 0x0, r7, 0x18000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50)
r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x1810c0, 0x0)
ioctl$SNDCTL_DSP_NONBLOCK(r8, 0x500e, 0x0)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0xc, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040880}, 0x4c001)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x17)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r5)
sendmsg$IPVS_CMD_NEW_DEST(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r9, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe9d3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x77bea732228e0356)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r5)
sendmsg$NL80211_CMD_SET_WOWLAN(r10, &(0x7f0000001b80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b40)={&(0x7f0000000940)={0x11f0, r11, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x11d4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xcc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x4e, 0xa, "c11f4cb62e7484ce3a81af6258bc3311ea623cfb623cd03408fbf9b547a7378773e16fb007dc1a4165f3b88d8ad3cc560a0a01416cf856fdc566b26f6b19814e7c0051cd9a66172fff0c"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x1}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x5, 0x2, 0x25b20a48}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x30, 0x8, {0x7, 0x6, "010847129f3032e7e8d86e799ad1549b4cf5b4fa0dd023efdc7a8abe66afcc395e9b6a35"}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x101}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x9, 0x3ff, 0x6}}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x18, 0xb, "81e2dcd7f6ab1436c999cf25391f68e19e277688"}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x10f8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x52, 0xb, "8d9ad6c2f6a0eb7ea0fe001f63af7def82351561bbee9ab0e0bd1b8d40ad9d382b542b090f1b6baa1c19b6275ca18bab810eef04c949bdee4350d9162348ddcebcbfe9774571443fdf86a1843d6f"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x6c, 0xa, "4c8f0cca8c1c159b4401b40f49428e9afb9890195fc47de0067b2b0eca044ed026cf08bf6889fa8e34e2a14342dc24f631e9d24199271fa975a1003047e8d9c6117a5f7a7f02cbab2a4d40b314dbedc9a65021c12b4912eda8556fb8f77ccd614e12afd39f169b0b"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x100c, 0x8, {0x36f82ebd, 0x7, "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"}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @remote}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x8, 0x3, 0x2}}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x4080}, 0x81)
sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x28, r11, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7fffffff, 0x101}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040818}, 0x20)
ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000001cc0)=0x2)

939.478023ms ago: executing program 0 (id=827):
rt_sigaction(0xd, &(0x7f00000000c0)={&(0x7f0000000040)="c4e189f4adfeefffffc442f9337c8e5dc4c60166400fe2def3bd46c7045300101000f00fc02bc422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r1], 0x2c}}, 0x20008000)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)=0x1)
rt_sigaction(0xd, &(0x7f00000000c0)={&(0x7f0000000040)="c4e189f4adfeefffffc442f9337c8e5dc4c60166400fe2def3bd46c7045300101000f00fc02bc422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x40000) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r1], 0x2c}}, 0x20008000) (async)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)=0x1) (async)

871.309214ms ago: executing program 0 (id=828):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close(0x3)
socket$inet_smc(0x2b, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000001d00), 0xa0a80)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r6, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000002100)=""/4096, 0x1000}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="64d8db0f08263e0f01c2ba4000ecba200066ed0fc75900f30f012e0058c4e3a54475cf003e0f01cb0f30", 0x2a}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000000240)={{0x1, 0x0, 0x80, {0x100000, 0x80af000}}, "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", "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"})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r8 = socket(0x2a, 0x2, 0x5)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r8, 0x6612)

370.130442ms ago: executing program 7 (id=829):
mkdir(&(0x7f0000000040)='./file0\x00', 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x9, "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"})
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
setsockopt$inet_buf(r3, 0x0, 0x1, 0x0, 0x0)
write$P9_RVERSION(r2, &(0x7f00000001c0)=ANY=[], 0x15) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r4], 0x25c}}, 0x2040480) (async, rerun: 64)
r6 = dup(r2) (rerun: 64)
write$FUSE_BMAP(r6, &(0x7f0000004780)={0x18, 0x0, 0x0, {0x6}}, 0x18)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) (async, rerun: 64)
write$FUSE_DIRENTPLUS(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) (async, rerun: 64)
write$FUSE_INTERRUPT(r6, &(0x7f0000000000)={0x10}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',privport,access=', @ANYRESDEC])
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x3a9) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

369.619773ms ago: executing program 5 (id=830):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=<r3=>r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c0000000000f38f78000000000000000000144e2100089078dd1d96d0a10295bcc150b24b1e418eaa2c1e86a7e28d7eba006994ae67debea35ee5ca9d0ab1542ec143e05f3fc5cb3039aca2c1f792ca1b27bb521e5d89d54c77669eb2acf8bde397987685db2ca63738ac9de3c982e7b6edfcdb343269740bd43291648ea72f8159f3cc"], 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd<a\xbe\xbeZ\r\xce\x9f\x835W\x87\xea\xe4e\xbdD\xc7\xb2', 0x40, 0x1a2, 0x0)
mq_notify(r6, &(0x7f0000000000)={0x110c230000, 0x2c, 0x2})
dup3(r6, r5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
dup3(r5, r6, 0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r4}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000900)={'syztnl0\x00', <r7=>0x0, 0x1, 0x8, 0x6, 0x1, {{0x3c, 0x4, 0x3, 0x1, 0xf0, 0x66, 0x0, 0x0, 0x29, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x14, 0x27, 0x1, 0x6, [{@multicast2, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfe}]}, @ssrr={0x89, 0x7, 0x81, [@dev={0xac, 0x14, 0x14, 0x2f}]}, @cipso={0x86, 0x16, 0x3, [{0x6, 0x10, "887da1561c0e2564a38f8ec7a213"}]}, @cipso={0x86, 0x4c, 0x3, [{0x0, 0x10, "5713d8a951fc47ae5ce719b2f788"}, {0x2, 0x5, "1c1b12"}, {0x5, 0x8, "5f8d72316c60"}, {0x2, 0x4, "ae32"}, {0x1, 0xd, "94c8eeaca54f18e57ab69b"}, {0x2, 0xa, "d9017d4b69d255e9"}, {0x1, 0x3, 's'}, {0x0, 0x6, "d022c2be"}, {0x4, 0x5, "245fe1"}]}, @generic={0x94, 0x3, "e3"}, @rr={0x7, 0xf, 0x7b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010102]}, @end, @noop, @cipso={0x86, 0x48, 0x3, [{0x1, 0x12, "d818964a378a75f3ee01267bb89575c4"}, {0x2, 0x6, "284d1817"}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0xe, "5d8adb7cdb2f261124bd6c94"}, {0x6, 0xe, "560ee691dc5174f3b7b97505"}, {0x0, 0x3, "f4"}, {0x4, 0x7, "94310a9d2e"}]}]}}}}})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r4, @ANYRES64=r1, @ANYRESOCT=r4, @ANYRESDEC=r6, @ANYRES32=r3, @ANYRESDEC=r2, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r8}, 0x10)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="efc39abbc900"/28], 0x48)
close(r9)
mount(&(0x7f0000000180)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x4, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000)
socket$tipc(0x1e, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)

367.104051ms ago: executing program 0 (id=832):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [<r4=>0x0, 0x0, 0x0, <r5=>0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={r3, 0xae, 0x3ff, 0x34325241, 0x2, [r4, r4, 0x0, r5], [0x2b8, 0x7, 0x6, 0x2], [0x2000000, 0x0, 0x0, 0x619], [0x1]})

366.89023ms ago: executing program 7 (id=833):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)

281.021661ms ago: executing program 0 (id=834):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x5, 0x70bd28, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
socket(0x1e, 0x805, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
pselect6(0x40, &(0x7f0000000180)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0)
syz_usb_disconnect(r5)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000602916f8ac8e447bcbce98d08d80d50bca6f4a2d440f702775018f2749c28566e9576c12e7270f5679", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a8ffff0500070007000000"], 0x44}}, 0x4008080)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0xfffffffffffffdc6, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

280.795375ms ago: executing program 7 (id=835):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = msgget$private(0x0, 0x1ba)
msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x401, 0x0)
msgsnd(r1, &(0x7f0000000180)={0x2}, 0x8, 0x0)
msgsnd(r1, 0x0, 0x401, 0x0)
msgrcv(r1, 0x0, 0x0, 0x0, 0x2000)
msgrcv(r1, &(0x7f0000000080)={0x0, ""/83}, 0x5b, 0x2, 0x1800)
r2 = fsmount(r0, 0x0, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0xf31, 0xf7fffffb, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0x0, 0xffff}, {0x9, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendfile(r3, r3, 0x0, 0x7fffffffffffffff)
r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x300, 0x0)
ioctl$CDROMSUBCHNL(r8, 0x530b, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x2, 0x7, 0x8, @lba=0x4, @msf={0x65, 0x8, 0x8}})

140.835898ms ago: executing program 6 (id=839):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x100010, r0, 0x453e000)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30"], 0x1f4}}, 0x0)

60.828331ms ago: executing program 6 (id=840):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x24, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x2}})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_bond\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x26, 0x3, 0x2, 0x0, 0x9, 0xffff, 0x8, 0xa8, 0x435}})
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', 'all'})

60.286128ms ago: executing program 6 (id=841):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0)
sendfile(r0, r0, 0x0, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000)
read$alg(r0, &(0x7f0000000000)=""/73, 0x49)

59.902453ms ago: executing program 6 (id=842):
r0 = syz_open_dev$video(&(0x7f00000005c0), 0x20000000005, 0x8100)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='gid_map\x00') (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x8000)
write$cgroup_int(r1, 0x0, 0x0)
ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000000)={0x0, "c582a91e7521c40aae1a8f6403f6a61dd63d0cc3eb51cf00a2df96e73d5eff39", 0x1, 0x3ff, 0x5, 0x200, 0x420, 0x4})

631.223µs ago: executing program 6 (id=843):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000180)=@ethtool_cmd={0x48, 0x7, 0x0, 0x9, 0x7d, 0x5, 0x81, 0x87, 0xda, 0xf3, 0xa, 0x31, 0x6, 0x4, 0x0, 0x8001f76, [0x7fff, 0x7b0]}})
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000180)=@ethtool_cmd={0x48, 0x7, 0x0, 0x9, 0x7d, 0x5, 0x81, 0x87, 0xda, 0xf3, 0xa, 0x31, 0x6, 0x4, 0x0, 0x8001f76, [0x7fff, 0x7b0]}}) (async)

0s ago: executing program 6 (id=844):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000800000000000003000000d90bed6600000047eb347bf7295bb0799e6c1d086eff04ee74dbb516c7ff9fa0f4426c668218b351ad134aa6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x90}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080080004608f0ff76000000bf9810000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r5 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1})
r6 = io_uring_setup(0x162a, &(0x7f0000000180)={0x0, 0x2b6c, 0x2, 0x80000002, 0x2ae, 0x0, r5})
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r6, 0x1e, &(0x7f0000000100)={r5}, 0x1) (async)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async)
r7 = socket(0x11, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'ip_vti0\x00', <r9=>0x0})
bind$packet(r7, &(0x7f0000000180)={0x11, 0x3, r9, 0x1, 0x0, 0x6, @dev}, 0x14) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newchain={0x44, 0x64, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff2, 0x80f59055fe48f491}, {0xb, 0x5}, {0xb, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x5}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @TCA_RATE={0x6, 0x5, {0x3, 0xf8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
getpeername$inet(r4, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000340)=0x10) (async, rerun: 32)
recvmmsg(r4, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0xc9}], 0x2, 0x100, 0x0) (rerun: 32)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
r12 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x2, 0x1}) (async)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x18, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r12, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async, rerun: 32)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) (async, rerun: 32)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r12, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20)
setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x8, 0x3, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}, 0x10)

0s ago: executing program 6 (id=845):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x0, 0x7, 0x9})
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x3, 0x0, 0x0, 0x100000000, 0x0, 0x0})
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x605}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x6}]}}}]}, 0x3c}}, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006)
r6 = syz_io_uring_setup(0x323c, &(0x7f0000000500)={0x0, 0x5bc2, 0x0, 0x5, 0xc}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000240)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}})
io_uring_enter(r6, 0x47bc, 0x2, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r2, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r2, r2, r2, r2, 0xffffffffffffffff, r2], 0x0, 0x10, 0xfffffffe}, 0xc3)

kernel console output (not intermixed with test programs):

9][ T7041] chnl_net:caif_netlink_parms(): no params data found
[   75.051628][ T7048] vhci_hcd: connection closed
[   75.054331][ T1151] vhci_hcd: stop threads
[   75.065344][ T1151] vhci_hcd: release socket
[   75.067405][ T1151] vhci_hcd: disconnect device
[   75.069046][ T1151] vhci_hcd: stop threads
[   75.070388][ T1151] vhci_hcd: release socket
[   75.071903][ T1151] vhci_hcd: disconnect device
[   75.074461][ T1151] vhci_hcd: stop threads
[   75.075230][ T1147] bridge_slave_1: left allmulticast mode
[   75.075802][ T1151] vhci_hcd: release socket
[   75.075902][ T1151] vhci_hcd: disconnect device
[   75.078076][ T1147] bridge_slave_1: left promiscuous mode
[   75.078812][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.079905][ T1151] vhci_hcd: stop threads
[   75.088308][ T1151] vhci_hcd: release socket
[   75.089957][ T1151] vhci_hcd: disconnect device
[   75.090615][ T1147] bridge_slave_0: left allmulticast mode
[   75.093785][ T1151] vhci_hcd: stop threads
[   75.095235][ T1151] vhci_hcd: release socket
[   75.095463][ T1147] bridge_slave_0: left promiscuous mode
[   75.098725][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.101171][ T1151] vhci_hcd: disconnect device
[   75.103498][ T1151] vhci_hcd: stop threads
[   75.104887][ T1151] vhci_hcd: release socket
[   75.107519][ T1151] vhci_hcd: disconnect device
[   75.107771][ T1147] bond1: left allmulticast mode
[   75.109174][ T1151] vhci_hcd: stop threads
[   75.110694][ T1147] bridge2: port 1(bond1) entered disabled state
[   75.111969][ T1151] vhci_hcd: release socket
[   75.115640][ T1151] vhci_hcd: disconnect device
[   75.118498][ T1147] batman_adv: batadv0: Interface deactivated: gretap1
[   75.123093][   T67] vhci_hcd: vhci_device speed not set
[   75.152938][ T7079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.155570][ T7079] IPv6: NLM_F_CREATE should be set when creating new route
[   75.157884][ T7079] IPv6: NLM_F_CREATE should be set when creating new route
[   75.228127][ T1147] batman_adv: batadv0: Removing interface: gretap1
[   75.604577][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.612356][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.621946][ T1147] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[   75.626761][ T1147] veth1_vlan: left allmulticast mode
[   75.630444][ T1147] bond0 (unregistering): Released all slaves
[   75.641927][ T1147] bond1 (unregistering): Released all slaves
[   75.806439][ T7041] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.809116][ T7041] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.811914][ T7041] bridge_slave_0: entered allmulticast mode
[   75.815350][ T7041] bridge_slave_0: entered promiscuous mode
[   75.819283][ T7104] tipc: Started in network mode
[   75.821005][ T7104] tipc: Node identity 2, cluster identity 4711
[   75.822834][ T5986] Bluetooth: hci2: command 0x0406 tx timeout
[   75.824074][   T63] Bluetooth: hci1: command 0x0c1a tx timeout
[   75.825686][ T7104] tipc: Node number set to 2
[   75.829609][ T7041] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.831922][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.836534][ T7041] bridge_slave_1: entered allmulticast mode
[   75.839278][ T7041] bridge_slave_1: entered promiscuous mode
[   75.872197][ T7041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.886625][ T7041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.940805][ T7041] team0: Port device team_slave_0 added
[   75.946261][ T7041] team0: Port device team_slave_1 added
[   76.001251][ T7041] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.003627][ T7041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.011583][ T7041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.015744][ T7041] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.017873][ T7041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.025774][ T7041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.110591][ T7041] hsr_slave_0: entered promiscuous mode
[   76.112935][ T7041] hsr_slave_1: entered promiscuous mode
[   76.115290][ T7041] debugfs: 'hsr0' already exists in 'hsr'
[   76.117113][ T7041] Cannot create hsr debugfs directory
[   76.127485][ T1147] hsr_slave_0: left promiscuous mode
[   76.130047][ T1147] hsr_slave_1: left promiscuous mode
[   76.132225][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.135442][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.138990][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.141736][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.166971][ T1147] veth1_macvtap: left promiscuous mode
[   76.168843][ T1147] veth0_macvtap: left promiscuous mode
[   76.171395][ T1147] veth1_vlan: left promiscuous mode
[   76.173283][ T1147] veth0_vlan: left promiscuous mode
[   76.642929][ T1147] team0 (unregistering): Port device team_slave_1 removed
[   76.691973][   T40] kauditd_printk_skb: 16 callbacks suppressed
[   76.691983][   T40] audit: type=1400 audit(2000000267.307:428): avc:  denied  { name_bind } for  pid=7113 comm="syz.0.296" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   76.701307][   T40] audit: type=1400 audit(2000000267.307:429): avc:  denied  { name_bind } for  pid=7113 comm="syz.0.296" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   76.712996][ T1147] team0 (unregistering): Port device team_slave_0 removed
[   76.794758][   T63] Bluetooth: hci3: command tx timeout
[   76.998548][ T7121] netlink: 'syz.0.298': attribute type 2 has an invalid length.
[   77.001812][ T7121] netlink: 'syz.0.298': attribute type 1 has an invalid length.
[   77.007489][ T7122] nfs4: Unknown parameter '00000000000000000000004'
[   77.082936][ T7126] openvswitch: netlink: Flow key attribute not present in set flow.
[   77.102777][   T63] Bluetooth: hci0: command 0x0419 tx timeout
[   77.206307][ T7133] __nla_validate_parse: 4 callbacks suppressed
[   77.206324][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'.
[   77.216159][ T7133] netlink: 88 bytes leftover after parsing attributes in process `syz.0.302'.
[   77.219716][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'.
[   77.355610][   T40] audit: type=1400 audit(2000000267.977:430): avc:  denied  { module_request } for  pid=7143 comm="syz.3.304" kmod="net-pf-2-proto-127-type-8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   77.360127][ T7041] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   77.373880][ T7041] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   77.380541][ T7041] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   77.391472][ T7041] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   77.476474][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.490723][ T7041] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.504437][ T7041] 8021q: adding VLAN 0 to HW filter on device team0
[   77.511264][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.512792][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.514312][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.527363][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.530419][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.652813][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.652911][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.658309][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.661037][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.663847][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.667810][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.670559][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.672871][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.678700][ T7041] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.874878][ T7041] veth0_vlan: entered promiscuous mode
[   77.880932][ T7041] veth1_vlan: entered promiscuous mode
[   77.901141][ T7041] veth0_macvtap: entered promiscuous mode
[   77.902812][   T63] Bluetooth: hci2: command 0x0406 tx timeout
[   77.911067][ T7041] veth1_macvtap: entered promiscuous mode
[   77.913563][   T63] Bluetooth: hci1: command 0x0c1a tx timeout
[   77.969157][ T7041] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.006523][ T7041] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.015522][ T1236] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.019399][ T1236] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.025745][ T1236] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.029426][ T1236] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.067885][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.071992][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.088810][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.092205][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.101611][   T40] audit: type=1400 audit(2000000268.717:431): avc:  denied  { mounton } for  pid=7041 comm="syz-executor" path="/syzkaller.RdGWX7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   78.146710][ T7187] syz_tun: entered allmulticast mode
[   78.151398][   T40] audit: type=1400 audit(2000000268.767:432): avc:  denied  { create } for  pid=7186 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   78.160547][   T40] audit: type=1400 audit(2000000268.777:433): avc:  denied  { write } for  pid=7186 comm="syz.4.285" path="socket:[16921]" dev="sockfs" ino=16921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   78.182096][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'.
[   78.187836][ T7187] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[   78.225226][ T7187] netlink: 'syz.4.285': attribute type 10 has an invalid length.
[   78.229583][ T7187] hsr_slave_0: left promiscuous mode
[   78.232130][ T7187] hsr_slave_1: left promiscuous mode
[   78.331658][   T40] audit: type=1400 audit(2000000268.947:434): avc:  denied  { mounton } for  pid=7189 comm="syz.0.308" path="/93/file0" dev="9p" ino=35913865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   78.508078][   T40] audit: type=1400 audit(2000000269.127:435): avc:  denied  { create } for  pid=7196 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[   78.518918][ T7197] fuse: Bad value for 'user_id'
[   78.521123][ T7197] fuse: Bad value for 'user_id'
[   78.596112][   T40] audit: type=1400 audit(2000000269.217:436): avc:  denied  { ioctl } for  pid=7200 comm="syz.3.312" path="socket:[17599]" dev="sockfs" ino=17599 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   78.649791][ T7207] syzkaller0: entered promiscuous mode
[   78.652013][ T7207] syzkaller0: entered allmulticast mode
[   78.696505][ T7212] netlink: 277 bytes leftover after parsing attributes in process `syz.3.315'.
[   78.706589][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'.
[   78.708898][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'.
[   78.744245][   T40] audit: type=1400 audit(2000000269.367:437): avc:  denied  { create } for  pid=7214 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   78.780678][ T7219] CUSE: unknown device info ""
[   78.784346][ T7219] CUSE: zero length info key specified
[   78.845355][ T7224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7224 comm=syz.3.319
[   78.862833][   T63] Bluetooth: hci3: command tx timeout
[   78.979822][ T7186] syz_tun: left allmulticast mode
[   79.341732][ T1148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.346583][ T1148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.446843][ T1148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.451272][ T1148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.533836][ T1148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.537289][ T1148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.554677][ T5986] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.558390][ T5986] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.562241][ T5986] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.562808][  T861] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   79.567214][ T5986] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.571161][ T5986] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.590003][ T7253] vxcan1 speed is unknown, defaulting to 1000
[   79.602797][ T1148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.606062][ T1148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.735936][  T861] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   79.738649][  T861] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   79.741883][  T861] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[   79.745579][  T861] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   79.749055][  T861] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   79.754808][  T861] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   79.758117][  T861] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   79.760628][  T861] usb 7-1: Product: syz
[   79.761996][  T861] usb 7-1: Manufacturer: syz
[   79.781476][  T861] cdc_wdm 7-1:1.0: skipping garbage
[   79.783252][  T861] cdc_wdm 7-1:1.0: skipping garbage
[   79.786359][ T1148] dummy0: left allmulticast mode
[   79.789420][  T861] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[   79.789452][ T1148] bridge0: port 3(dummy0) entered disabled state
[   79.791294][  T861] cdc_wdm 7-1:1.0: Unknown control protocol
[   79.801328][ T1148] bridge_slave_1: left allmulticast mode
[   79.803820][ T1148] bridge_slave_1: left promiscuous mode
[   79.806418][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.813629][ T1148] bridge_slave_0: left allmulticast mode
[   79.816026][ T1148] bridge_slave_0: left promiscuous mode
[   79.818553][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.826701][ T1148] batman_adv: batadv0: Interface deactivated: gretap1
[   79.935715][ T1148] batman_adv: batadv0: Removing interface: gretap1
[   79.986001][   T63] Bluetooth: hci1: command 0x0c1a tx timeout
[   79.988517][   T63] Bluetooth: hci2: command 0x0406 tx timeout
[   80.010372][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.335'.
[   80.039669][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   80.039991][ T1028] usb 7-1: USB disconnect, device number 5
[   80.041871][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   80.046293][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   80.095959][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.105043][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.109082][ T1148] bond0 (unregistering): Released all slaves
[   80.115794][ T1148] bond1 (unregistering): Released all slaves
[   80.127951][ T7253] chnl_net:caif_netlink_parms(): no params data found
[   80.245397][ T7251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.329'.
[   80.254169][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'.
[   80.260552][ T1148] tipc: Left network mode
[   80.269552][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.272040][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.274895][ T7253] bridge_slave_0: entered allmulticast mode
[   80.278773][ T7253] bridge_slave_0: entered promiscuous mode
[   80.293857][ T7288] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   80.300954][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.301057][ T7251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.303370][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.308789][ T7253] bridge_slave_1: entered allmulticast mode
[   80.311378][ T7253] bridge_slave_1: entered promiscuous mode
[   80.342788][ T6056] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   80.351921][ T7253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.362039][ T7253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.404198][ T7294] netlink: 'syz.0.342': attribute type 12 has an invalid length.
[   80.423250][ T7253] team0: Port device team_slave_0 added
[   80.427114][ T7253] team0: Port device team_slave_1 added
[   80.469826][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.472297][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.481299][ T7253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.489820][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.492156][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.500867][ T7253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.502721][ T6056] usb 9-1: Using ep0 maxpacket: 32
[   80.517360][ T6056] usb 9-1: config index 0 descriptor too short (expected 35577, got 27)
[   80.520889][ T6056] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   80.525451][ T6056] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92
[   80.528198][ T6056] usb 9-1: config 1 has no interface number 0
[   80.530138][ T6056] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   80.535853][ T6056] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   80.539870][ T6056] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   80.543850][ T6056] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.580644][ T6056] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found
[   80.613516][ T7253] hsr_slave_0: entered promiscuous mode
[   80.615882][ T7253] hsr_slave_1: entered promiscuous mode
[   80.618020][ T7253] debugfs: 'hsr0' already exists in 'hsr'
[   80.619859][ T7253] Cannot create hsr debugfs directory
[   80.624963][ T1148] hsr_slave_0: left promiscuous mode
[   80.627586][ T1148] hsr_slave_1: left promiscuous mode
[   80.629671][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.632490][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.636054][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.638313][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.646255][ T1148] veth1_macvtap: left promiscuous mode
[   80.647950][ T1148] veth0_macvtap: left promiscuous mode
[   80.649693][ T1148] veth1_vlan: left promiscuous mode
[   80.651318][ T1148] veth0_vlan: left promiscuous mode
[   80.782738][   T67] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   80.932747][   T67] usb 5-1: Using ep0 maxpacket: 32
[   80.937082][   T67] usb 5-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config
[   80.941392][   T67] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   80.942737][ T5986] Bluetooth: hci3: command tx timeout
[   80.946019][   T67] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   80.951980][   T67] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[   80.957521][   T67] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   80.961313][   T67] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.967377][   T67] usb 5-1: config 0 descriptor??
[   81.138713][ T5986] Bluetooth: hci1: unexpected event 0x03 length: 4 < 11
[   81.193262][ T1148] team0 (unregistering): Port device team_slave_1 removed
[   81.254624][ T1148] team0 (unregistering): Port device team_slave_0 removed
[   81.513935][   T34] cfg80211: failed to load regulatory.db
[   81.595107][ T5986] Bluetooth: hci0: command tx timeout
[   81.839762][ T7253] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   81.846626][ T7253] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   81.851748][ T7253] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   81.859266][ T7253] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   81.903263][ T7253] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.912077][ T7253] 8021q: adding VLAN 0 to HW filter on device team0
[   81.917077][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.919827][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.926524][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.928807][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.962813][ T7338] vxcan1 speed is unknown, defaulting to 1000
[   82.064573][ T5986] Bluetooth: hci2: command 0x0406 tx timeout
[   82.143295][ T7253] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.278080][   T40] kauditd_printk_skb: 13 callbacks suppressed
[   82.278098][   T40] audit: type=1400 audit(2000000272.897:451): avc:  denied  { append } for  pid=7353 comm="syz.2.348" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   82.334537][ T7253] veth0_vlan: entered promiscuous mode
[   82.341492][ T7253] veth1_vlan: entered promiscuous mode
[   82.368650][ T7253] veth0_macvtap: entered promiscuous mode
[   82.374750][ T7253] veth1_macvtap: entered promiscuous mode
[   82.389591][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.398469][ T7253] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.409807][ T1154] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.413312][ T1154] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.417874][ T1154] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.420728][ T1154] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.466135][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.469530][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.490432][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.494094][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.541719][ T7376] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[   82.546127][ T7376] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[   82.585071][ T7379] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.632409][ T7381] input: syz0 as /devices/virtual/input/input7
[   82.639196][   T40] audit: type=1400 audit(2000000273.257:452): avc:  denied  { read } for  pid=5369 comm="acpid" name="event4" dev="devtmpfs" ino=2938 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   82.649462][   T40] audit: type=1400 audit(2000000273.257:453): avc:  denied  { open } for  pid=5369 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2938 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   82.656772][   T40] audit: type=1400 audit(2000000273.257:454): avc:  denied  { ioctl } for  pid=5369 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2938 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   82.665799][   T40] audit: type=1400 audit(2000000273.257:455): avc:  denied  { read } for  pid=7380 comm="syz.5.351" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   82.672879][   T40] audit: type=1400 audit(2000000273.257:456): avc:  denied  { map } for  pid=7380 comm="syz.5.351" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   83.023011][ T5986] Bluetooth: hci3: command tx timeout
[   83.046717][ T6056] snd_usb_pod 9-1:1.1: set_interface failed
[   83.049418][ T6056] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected
[   83.052440][ T6056] snd_usb_pod 9-1:1.1: probe with driver snd_usb_pod failed with error -71
[   83.056518][ T6056] usb 9-1: USB disconnect, device number 2
[   83.073900][   T40] audit: type=1400 audit(2000000273.697:457): avc:  denied  { nlmsg_write } for  pid=7391 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   83.167005][   T40] audit: type=1400 audit(2000000273.787:458): avc:  denied  { write } for  pid=7395 comm="syz.4.356" lport=51271 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   83.175833][   T40] audit: type=1400 audit(2000000273.787:459): avc:  denied  { setopt } for  pid=7395 comm="syz.4.356" lport=51271 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   83.177549][ T7397] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   83.188855][ T7397] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   83.194558][ T7397] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[   83.197770][   T40] audit: type=1400 audit(2000000273.807:460): avc:  denied  { firmware_load } for  pid=7395 comm="syz.4.356" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   83.294772][ T7408] __nla_validate_parse: 2 callbacks suppressed
[   83.294788][ T7408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'.
[   83.554098][ T6171] usb 5-1: USB disconnect, device number 5
[   83.671823][ T7427] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.365'.
[   83.672949][ T5986] Bluetooth: hci0: command tx timeout
[   83.695113][ T7427] vxcan1 speed is unknown, defaulting to 1000
[   84.223801][ T7444] team_slave_0: entered promiscuous mode
[   84.225669][ T7444] team_slave_0: entered allmulticast mode
[   84.262585][ T7457] mkiss: ax0: crc mode is auto.
[   84.419429][ T7460] could not allocate digest TFM handle crct10dif-arm64-neon
[   84.494878][ T7479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.380'.
[   84.566554][ T1147] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.569902][ T1147] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.573049][ T1147] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.575834][ T1147] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.712045][ T7487] netlink: 52 bytes leftover after parsing attributes in process `syz.0.382'.
[   84.717063][ T7487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.382'.
[   84.726007][ T7487] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   84.771226][ T7491] netlink: 'syz.0.384': attribute type 1 has an invalid length.
[   84.785564][ T7493] dlm: no local IP address has been set
[   84.787778][ T7493] dlm: cannot start dlm midcomms -107
[   84.956507][ T7501] fanotify: failed to encode fid (type=0, len=0, err=-2)
[   85.498757][ T7509] Bluetooth: MGMT ver 1.23
[   85.563665][ T7511] netlink: 24 bytes leftover after parsing attributes in process `syz.5.390'.
[   85.665880][ T7521] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[   85.742825][ T5986] Bluetooth: hci0: command tx timeout
[   85.833017][ T7531] netlink: 'syz.5.396': attribute type 21 has an invalid length.
[   86.024702][ T6326] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   86.174231][ T6326] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   86.176974][ T6326] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   86.180197][ T6326] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[   86.184374][ T6326] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   86.187890][ T6326] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   86.193835][ T6326] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   86.197031][ T6326] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   86.199582][ T6326] usb 7-1: Product: syz
[   86.200919][ T6326] usb 7-1: Manufacturer: syz
[   86.205792][ T6326] cdc_wdm 7-1:1.0: skipping garbage
[   86.207507][ T6326] cdc_wdm 7-1:1.0: skipping garbage
[   86.210607][ T6326] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[   86.212797][ T6326] cdc_wdm 7-1:1.0: Unknown control protocol
[   86.262783][ T6171] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   86.422729][ T6171] usb 10-1: Using ep0 maxpacket: 8
[   86.426644][ T6171] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[   86.429915][ T6171] usb 10-1: config 0 has no interface number 0
[   86.432368][ T6171] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   86.436759][ T6171] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   86.441483][ T6171] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   86.445466][ T6171] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   86.450261][ T6171] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   86.454015][ T6171] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.459096][ T6171] usb 10-1: config 0 descriptor??
[   86.459190][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   86.460157][ T6056] usb 7-1: USB disconnect, device number 6
[   86.466306][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   86.467304][ T6171] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   86.468879][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   86.544666][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.547690][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.615978][ T7548] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.627753][ T7548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.660533][ T7529] netlink: 36 bytes leftover after parsing attributes in process `syz.2.395'.
[   86.693873][ T7548] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[   86.718884][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.724017][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.733143][ T7550] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.747832][ T1182] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.751733][ T1182] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.756193][ T1182] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.758106][ T6326] usb 10-1: USB disconnect, device number 2
[   86.760033][    C2] ldusb 10-1:0.55: usb_submit_urb failed (-19)
[   86.762796][ T7529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.777257][ T7554] bridge0: entered allmulticast mode
[   86.780308][ T6326] ldusb 10-1:0.55: LD USB Device #0 now disconnected
[   86.788809][ T7554] pim6reg: entered allmulticast mode
[   86.898941][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'.
[   87.088702][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'.
[   87.298988][ T7578] kvm: emulating exchange as write
[   87.612726][ T6056] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   87.636054][   T40] kauditd_printk_skb: 10 callbacks suppressed
[   87.636066][   T40] audit: type=1400 audit(2000000278.257:471): avc:  denied  { ioctl } for  pid=7608 comm="syz.5.418" path="socket:[19727]" dev="sockfs" ino=19727 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   87.782867][ T6056] usb 7-1: Using ep0 maxpacket: 8
[   87.786769][ T6056] usb 7-1: config 0 interface 0 has no altsetting 0
[   87.789527][ T6056] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   87.794620][ T6056] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.804146][ T6056] usb 7-1: config 0 descriptor??
[   87.833271][ T5986] Bluetooth: hci0: command tx timeout
[   88.048318][   T40] audit: type=1400 audit(2000000278.667:472): avc:  denied  { read } for  pid=7616 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   88.214961][ T6056] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[   88.416628][ T6326] usb 7-1: USB disconnect, device number 7
[   89.071541][ T7656] macvtap1: entered allmulticast mode
[   89.073610][ T7656] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode
[   89.076947][ T7656] mac80211_hwsim hwsim11 wlan0: left allmulticast mode
[   89.300085][ T7677] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.430'.
[   89.303419][ T7677] openvswitch: netlink: Flow key attr not present in new flow.
[   89.533678][   T40] audit: type=1400 audit(2000000280.157:473): avc:  denied  { read } for  pid=7688 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   89.601389][   T40] audit: type=1400 audit(2000000280.217:474): avc:  denied  { execmod } for  pid=7691 comm="syz.5.435" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   89.617487][   T40] audit: type=1400 audit(2000000280.217:475): avc:  denied  { execute } for  pid=7691 comm="syz.5.435" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   89.767919][   T40] audit: type=1400 audit(2000000280.387:476): avc:  denied  { append } for  pid=7718 comm="syz.0.441" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   89.966062][ T7727] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13)
[   89.968167][ T7727] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   89.970574][ T7727] vhci_hcd vhci_hcd.0: Device attached
[   90.094079][   T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   90.134202][ T7733] usb usb9: usbfs: process 7733 (syz.2.445) did not claim interface 0 before use
[   90.232846][ T6171] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[   90.233260][   T73] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   90.252920][   T24] usb 10-1: Using ep0 maxpacket: 8
[   90.256164][   T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   90.259998][   T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   90.263299][   T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[   90.266895][   T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   90.270080][   T24] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   90.275713][   T24] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   90.279017][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.337490][   T40] audit: type=1400 audit(2000000280.957:477): avc:  denied  { append } for  pid=7737 comm="syz.2.447" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   90.372987][   T73] usb 5-1: device descriptor read/64, error -71
[   90.409537][ T7742] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   90.414523][ T7742] FAT-fs (loop4): unable to read boot sector
[   90.450480][ T5986] Bluetooth: hci3: unexpected cc 0x204b length: 9 > 3
[   90.486959][   T24] usb 10-1: GET_CAPABILITIES returned 0
[   90.489501][   T24] usbtmc 10-1:16.0: can't read capabilities
[   90.622755][   T73] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   90.691038][    C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.696543][    C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.700565][    C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.704348][    C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.707343][    C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.710213][    C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.713111][    C2] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.718364][    C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.721908][    C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.724852][    C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.727714][    C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.731870][    C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.735308][    C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.738626][    C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.741918][    C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.745226][    C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[   90.751452][   T24] usb 10-1: USB disconnect, device number 3
[   90.762904][   T73] usb 5-1: device descriptor read/64, error -71
[   90.873017][   T73] usb usb5-port1: attempt power cycle
[   91.102751][ T5986] Bluetooth: hci0: command tx timeout
[   91.222752][   T73] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   91.243931][   T73] usb 5-1: device descriptor read/8, error -71
[   91.328530][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'.
[   91.418188][   T40] audit: type=1400 audit(2000000282.037:478): avc:  denied  { append } for  pid=7766 comm="syz.5.459" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   91.489754][   T40] audit: type=1400 audit(2000000282.107:479): avc:  denied  { create } for  pid=7771 comm="syz.5.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   91.493977][   T73] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   91.497964][   T40] audit: type=1400 audit(2000000282.117:480): avc:  denied  { ioctl } for  pid=7771 comm="syz.5.461" path="socket:[22585]" dev="sockfs" ino=22585 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   91.513803][   T73] usb 5-1: device descriptor read/8, error -71
[   91.597421][ T1154] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.601517][ T1154] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.605950][ T1154] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.609539][ T1154] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.632917][   T73] usb usb5-port1: unable to enumerate USB device
[   91.738832][ T7787] new mount options do not match the existing superblock, will be ignored
[   91.849691][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.5.469'.
[   91.876184][ T7795] macvlan2: entered promiscuous mode
[   91.878369][ T7795] macvlan2: entered allmulticast mode
[   91.883304][ T7795] bond1: entered promiscuous mode
[   91.885300][ T7795] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   91.889880][ T7795] bond1: left promiscuous mode
[   92.349448][ T7843] all: renamed from lo (while UP)
[   92.355031][ T7843] netlink: 'syz.5.482': attribute type 5 has an invalid length.
[   92.385519][ T7847] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[   92.390656][ T7847] No control pipe specified
[   92.404387][ T7847] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   92.408830][ T7847] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   92.417500][ T7847] overlayfs: overlapping lowerdir path
[   92.471914][ T7857] netlink: 'syz.2.483': attribute type 13 has an invalid length.
[   92.475531][ T7857] netlink: 'syz.2.483': attribute type 17 has an invalid length.
[   92.481422][ T7857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.535067][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.486'.
[   92.670784][   T40] kauditd_printk_skb: 24 callbacks suppressed
[   92.670796][   T40] audit: type=1400 audit(2000000283.287:505): avc:  denied  { read write } for  pid=7880 comm="syz.2.492" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   92.682475][   T40] audit: type=1400 audit(2000000283.287:506): avc:  denied  { open } for  pid=7880 comm="syz.2.492" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   92.827144][ T7904] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   92.831827][ T5986] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1
[   92.902213][ T7728] vhci_hcd: connection reset by peer
[   92.908239][ T1151] vhci_hcd: stop threads
[   92.909951][ T1151] vhci_hcd: release socket
[   92.911394][ T1151] vhci_hcd: disconnect device
[   92.934497][ T7910] random: crng reseeded on system resumption
[   92.945186][ T7910] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   92.968441][   T40] audit: type=1400 audit(2000000283.587:507): avc:  denied  { mount } for  pid=7914 comm="syz.4.501" name="/" dev="ramfs" ino=20175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   92.976536][   T40] audit: type=1400 audit(2000000283.597:508): avc:  denied  { mounton } for  pid=7914 comm="syz.4.501" path="/bus" dev="ramfs" ino=22788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   92.978344][ T7915] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   92.986203][ T7915] overlayfs: failed to set xattr on upper
[   92.987986][ T7915] overlayfs: ...falling back to redirect_dir=nofollow.
[   92.990182][   T40] audit: type=1400 audit(2000000283.607:509): avc:  denied  { read write } for  pid=7916 comm="syz.2.502" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   92.990267][ T7915] overlayfs: ...falling back to metacopy=off.
[   92.998474][   T40] audit: type=1400 audit(2000000283.607:510): avc:  denied  { open } for  pid=7916 comm="syz.2.502" path="/143/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   92.999532][ T7915] overlayfs: ...falling back to index=off.
[   93.009243][ T7915] overlayfs: ...falling back to uuid=null.
[   93.011724][ T7915] overlayfs: conflicting lowerdir path
[   93.046509][   T40] audit: type=1400 audit(2000000283.667:511): avc:  denied  { ioctl } for  pid=7918 comm="syz.0.504" path="socket:[22800]" dev="sockfs" ino=22800 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   93.055735][   T40] audit: type=1400 audit(2000000283.667:512): avc:  denied  { create } for  pid=7920 comm="syz.4.505" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   93.063015][   T40] audit: type=1400 audit(2000000283.677:513): avc:  denied  { read } for  pid=7920 comm="syz.4.505" name="file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   93.075785][   T40] audit: type=1400 audit(2000000283.677:514): avc:  denied  { open } for  pid=7920 comm="syz.4.505" path="/30/file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   93.105381][ T7926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'.
[   93.111721][ T7926] 8021q: VLANs not supported on sit0
[   93.127263][ T7930] syz_tun: entered allmulticast mode
[   93.130237][ T7929] syz_tun: left allmulticast mode
[   93.213631][ T7926] nbd0: detected capacity change from 0 to 127
[   93.220052][ T5986] block nbd0: Receive control failed (result -104)
[   93.261148][ T7937] block nbd2: Attempted send on invalid socket
[   93.263684][ T7937] I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[   93.267486][ T7937] gfs2: error -5 reading superblock
[   93.319879][ T7953] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   93.322841][ T7953] overlayfs: missing 'lowerdir'
[   93.354876][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'.
[   93.358693][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'.
[   93.438748][ T7968] binder: 7967:7968 ioctl c0306201 200000000080 returned -14
[   93.474246][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'.
[   93.477565][ T7937] nbd: illegal input index 1879048192
[   93.495858][ T7974] binder: 7967:7974 ioctl c0306201 200000000180 returned -14
[   93.592766][  T861] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   93.656384][ T7989] syz.0.521 (7989): /proc/7988/oom_adj is deprecated, please use /proc/7988/oom_score_adj instead.
[   93.741662][ T7991] netlink: 'syz.0.522': attribute type 29 has an invalid length.
[   93.747223][  T861] usb 9-1: Using ep0 maxpacket: 32
[   93.750383][  T861] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.757431][  T861] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.763185][  T861] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   93.766664][  T861] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.770569][  T861] usb 9-1: config 0 descriptor??
[   93.912256][ T8009] syz.2.528: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   93.921312][ T8009] CPU: 1 UID: 0 PID: 8009 Comm: syz.2.528 Not tainted syzkaller #0 PREEMPT(full) 
[   93.921326][ T8009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   93.921333][ T8009] Call Trace:
[   93.921336][ T8009]  <TASK>
[   93.921341][ T8009]  dump_stack_lvl+0x16c/0x1f0
[   93.921359][ T8009]  warn_alloc+0x248/0x3a0
[   93.921390][ T8009]  ? __pfx_warn_alloc+0x10/0x10
[   93.921416][ T8009]  ? xskq_create+0xfb/0x1d0
[   93.921429][ T8009]  ? __vmalloc_node_noprof+0xad/0xf0
[   93.921448][ T8009]  __vmalloc_node_range_noprof+0x101b/0x14b0
[   93.921472][ T8009]  ? xskq_create+0xfb/0x1d0
[   93.921486][ T8009]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   93.921506][ T8009]  ? xskq_create+0xfb/0x1d0
[   93.921517][ T8009]  vmalloc_user_noprof+0x9e/0xe0
[   93.921532][ T8009]  ? xskq_create+0xfb/0x1d0
[   93.921543][ T8009]  xskq_create+0xfb/0x1d0
[   93.921555][ T8009]  xsk_setsockopt+0x792/0x9a0
[   93.921566][ T8009]  ? __pfx_xsk_setsockopt+0x10/0x10
[   93.921576][ T8009]  ? find_held_lock+0x2b/0x80
[   93.921592][ T8009]  ? selinux_socket_setsockopt+0x6a/0x80
[   93.921607][ T8009]  ? __pfx_xsk_setsockopt+0x10/0x10
[   93.921618][ T8009]  do_sock_setsockopt+0xf3/0x1d0
[   93.921636][ T8009]  __sys_setsockopt+0x1a0/0x230
[   93.921651][ T8009]  __x64_sys_setsockopt+0xbd/0x160
[   93.921662][ T8009]  ? do_syscall_64+0x91/0x4e0
[   93.921682][ T8009]  ? lockdep_hardirqs_on+0x7c/0x110
[   93.921695][ T8009]  do_syscall_64+0xcd/0x4e0
[   93.921709][ T8009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.921720][ T8009] RIP: 0033:0x7f3ab818eba9
[   93.921728][ T8009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.921739][ T8009] RSP: 002b:00007f3ab90b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   93.921750][ T8009] RAX: ffffffffffffffda RBX: 00007f3ab83d5fa0 RCX: 00007f3ab818eba9
[   93.921756][ T8009] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007
[   93.921762][ T8009] RBP: 00007f3ab8211e19 R08: 0000000000000004 R09: 0000000000000000
[   93.921768][ T8009] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   93.921774][ T8009] R13: 00007f3ab83d6038 R14: 00007f3ab83d5fa0 R15: 00007ffd03205248
[   93.921787][ T8009]  </TASK>
[   93.921921][ T8009] Mem-Info:
[   94.018377][ T8009] active_anon:10266 inactive_anon:0 isolated_anon:0
[   94.018377][ T8009]  active_file:2897 inactive_file:51385 isolated_file:0
[   94.018377][ T8009]  unevictable:1769 dirty:150 writeback:0
[   94.018377][ T8009]  slab_reclaimable:12478 slab_unreclaimable:89373
[   94.018377][ T8009]  mapped:24937 shmem:2403 pagetables:1404
[   94.018377][ T8009]  sec_pagetables:307 bounce:0
[   94.018377][ T8009]  kernel_misc_reclaimable:0
[   94.018377][ T8009]  free:421429 free_pcp:19284 free_cma:0
[   94.038282][ T8009] Node 0 active_anon:41064kB inactive_anon:0kB active_file:11588kB inactive_file:205344kB unevictable:3540kB isolated(anon):0kB isolated(file):0kB mapped:99748kB dirty:580kB writeback:0kB shmem:6076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13552kB pagetables:5400kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB
[   94.052358][ T8009] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   94.065559][ T8009] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   94.077274][ T8009] lowmem_reserve[]: 0 1233 1233 1233 1233
[   94.079665][ T8009] Node 0 DMA32 free:71848kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41064kB inactive_anon:0kB active_file:11588kB inactive_file:205344kB unevictable:3540kB writepending:580kB present:2080628kB managed:1263436kB mlocked:4kB bounce:0kB free_pcp:61040kB local_pcp:14008kB free_cma:0kB
[   94.092964][ T8009] lowmem_reserve[]: 0 0 0 0 0
[   94.095048][ T8009] Node 1 Normal free:1598508kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB writepending:20kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:15888kB local_pcp:6016kB free_cma:0kB
[   94.107982][ T8009] lowmem_reserve[]: 0 0 0 0 0
[   94.110024][ T8009] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   94.116358][ T8009] Node 0 DMA32: 47*4kB (UME) 5*8kB (UM) 42*16kB (UM) 108*32kB (UME) 51*64kB (UME) 38*128kB (UME) 18*256kB (UM) 15*512kB (UM) 22*1024kB (UM) 10*2048kB (UME) 1*4096kB (U) = 71876kB
[   94.123609][ T8009] Node 1 Normal: 5*4kB (UME) 21*8kB (UME) 39*16kB (UME) 48*32kB (UME) 20*64kB (UME) 8*128kB (UME) 6*256kB (UE) 8*512kB (UME) 1*1024kB (E) 1*2048kB (M) 387*4096kB (M) = 1598508kB
[   94.131583][ T8009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   94.136215][ T8009] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   94.140431][ T8009] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   94.146922][ T8009] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   94.151159][ T8009] 56681 total pagecache pages
[   94.153318][ T8009] 0 pages in swap cache
[   94.155175][ T8009] Free swap  = 124996kB
[   94.157014][ T8009] Total swap = 124996kB
[   94.158750][ T8009] 1048443 pages RAM
[   94.160390][ T8009] 0 pages HighMem/MovableOnly
[   94.162704][ T8009] 283271 pages reserved
[   94.164186][ T8009] 0 pages cma reserved
[   94.179770][ T7959] netlink: 172 bytes leftover after parsing attributes in process `syz.4.517'.
[   94.187187][ T8021] netlink: 224 bytes leftover after parsing attributes in process `syz.0.530'.
[   94.204957][  T861] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[   94.221942][ T8025] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   94.262101][ T7968] binder: 7967:7968 ioctl c0306201 2000000003c0 returned -14
[   94.284828][ T8033] netlink: 'syz.2.533': attribute type 5 has an invalid length.
[   94.286209][ T8035] random: crng reseeded on system resumption
[   94.405106][ T8045] nft_compat: unsupported protocol 0
[   94.431604][ T8053] program syz.5.538 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.462234][   T54] usb 9-1: USB disconnect, device number 3
[   94.615441][ T8091] kernel profiling enabled (shift: 63)
[   94.617333][ T8091] profiling shift: 63 too large
[   94.631801][ T8099] netlink: 'syz.2.551': attribute type 4 has an invalid length.
[   94.754835][ T8112] __nla_validate_parse: 1 callbacks suppressed
[   94.754845][ T8112] netlink: 76 bytes leftover after parsing attributes in process `syz.5.555'.
[   95.043437][   T73] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[   95.196270][   T73] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   95.199752][   T73] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   95.203539][   T73] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[   95.206346][   T73] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   95.209802][   T73] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   95.214937][   T73] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   95.218086][   T73] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   95.221120][   T73] usb 10-1: Product: syz
[   95.222558][   T73] usb 10-1: Manufacturer: syz
[   95.235464][   T73] cdc_wdm 10-1:1.0: skipping garbage
[   95.237285][   T73] cdc_wdm 10-1:1.0: skipping garbage
[   95.242984][   T73] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[   95.244922][   T73] cdc_wdm 10-1:1.0: Unknown control protocol
[   95.332752][ T6171] vhci_hcd: vhci_device speed not set
[   95.490865][    C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[   95.491427][   T60] usb 10-1: USB disconnect, device number 4
[   95.493334][    C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[   95.493346][    C2] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   95.520856][ T8135] openvswitch: netlink: IPv6 tunnel dst address is zero
[   95.696960][ T8115] netlink: 36 bytes leftover after parsing attributes in process `syz.5.556'.
[   95.702460][ T8115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.806655][ T8144] vivid-000: disconnect
[   95.808722][ T8144] usb usb8: usbfs: process 8144 (syz.2.565) did not claim interface 0 before use
[   95.819415][ T8144] vivid-000: reconnect
[   95.914652][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.566'.
[   95.918255][ T8147] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   96.249903][ T5986] Bluetooth: hci0: hcon ffff888031974000 sent 1 < count 6
[   96.253850][ T5986] Bluetooth: hci0: hcon ffff888026934000 sent 1 < count 6
[   96.257015][ T5986] Bluetooth: hci0: hcon ffff888026934000 sent 0 < count 198
[   96.259885][ T5986] Bluetooth: hci0: hcon ffff888026934000 sent 0 < count 8
[   96.897359][ T8175] kvm: pic: non byte read
[   96.900817][ T8175] kvm: pic: level sensitive irq not supported
[   96.901172][ T8175] kvm: pic: non byte read
[   96.906856][ T8175] kvm: pic: single mode not supported
[   96.906870][ T8175] kvm: pic: level sensitive irq not supported
[   96.909784][ T8175] kvm: pic: non byte read
[   96.915760][ T8175] kvm: pic: non byte read
[   96.919186][ T8175] kvm: pic: non byte read
[   96.924304][ T8175] kvm: pic: non byte read
[   96.927609][ T8175] kvm: pic: non byte read
[   96.930558][ T8175] kvm: pic: single mode not supported
[   96.930869][ T8175] kvm: pic: non byte read
[   96.936404][ T8175] kvm: pic: single mode not supported
[   96.936713][ T8175] kvm: pic: non byte read
[   96.956354][ T8175] 8021q: adding VLAN 0 to HW filter on device bond2
[   97.118764][ T8181] overlayfs: statfs failed on './file0'
[   97.295315][ T8188] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   97.503828][ T8209] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.507259][ T8209] syzkaller0: entered promiscuous mode
[   97.509602][ T8209] syzkaller0: entered allmulticast mode
[   97.526618][ T8212] tipc: Resetting bearer <eth:syzkaller0>
[   97.536988][ T8212] tipc: Disabling bearer <eth:syzkaller0>
[   97.692841][   T54] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[   97.863320][   T54] usb 10-1: too many configurations: 9, using maximum allowed: 8
[   97.874691][   T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.877707][   T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.881697][   T54] usb 10-1: config 0 interface 0 has no altsetting 0
[   97.887705][   T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.890986][   T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.894838][   T54] usb 10-1: config 0 interface 0 has no altsetting 0
[   97.898881][   T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.902474][   T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.906467][   T54] usb 10-1: config 0 interface 0 has no altsetting 0
[   97.910284][   T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.914170][   T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.918492][   T54] usb 10-1: config 0 interface 0 has no altsetting 0
[   97.922434][   T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.925852][   T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.929130][   T54] usb 10-1: config 0 interface 0 has no altsetting 0
[   97.932386][   T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.935647][   T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.938884][   T54] usb 10-1: config 0 interface 0 has no altsetting 0
[   97.941733][   T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.945065][   T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.948547][   T54] usb 10-1: config 0 interface 0 has no altsetting 0
[   97.951403][   T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[   97.955196][   T54] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   97.959350][   T54] usb 10-1: config 0 interface 0 has no altsetting 0
[   97.963584][   T54] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   97.963761][ T8222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.590'.
[   97.966688][   T54] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   97.971713][   T54] usb 10-1: Product: syz
[   97.973721][   T54] usb 10-1: Manufacturer: syz
[   97.975245][   T54] usb 10-1: SerialNumber: syz
[   97.978204][   T54] usb 10-1: config 0 descriptor??
[   97.986973][   T54] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0
[   98.004931][ T8227] netlink: 'syz.0.591': attribute type 1 has an invalid length.
[   98.008245][ T8227] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.591'.
[   98.182906][   T54] usb 10-1: USB disconnect, device number 5
[   98.187029][   T54] yurex 10-1:0.0: USB YUREX #0 now disconnected
[   98.259476][ T8239] overlay: Bad value for 'workdir'
[   98.261099][   T24] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0
[   98.265974][   T24] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0
[   98.267577][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.594'.
[   98.268370][   T24] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0
[   98.272146][ T8239] openvswitch: netlink: Unknown nsh attribute 0
[   98.274417][   T24] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0
[   98.277023][ T8239] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.279295][   T24] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0
[   98.285706][   T24] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0
[   98.288108][   T24] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0
[   98.290509][   T24] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0
[   98.293054][   T24] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0
[   98.295376][   T24] hid-generic 000C:0007:000C.0004: unknown main item tag 0x0
[   98.304107][   T24] hid-generic 000C:0007:000C.0004: hidraw1: <UNKNOWN> HID v14.24 Device [syz1] on syz0
[   98.336401][ T8240] fido_id[8240]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   98.348823][ T8242] vim2m vim2m.0: vidioc_s_fmt queue busy
[   98.547683][ T8250] 9pnet: Found fid 0 not clunked
[   98.922857][   T54] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   99.097702][   T54] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   99.101320][   T54] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   99.105660][   T54] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[   99.109441][   T54] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   99.114768][   T54] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   99.121151][   T54] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   99.126256][   T54] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   99.129539][   T54] usb 7-1: Product: syz
[   99.131306][   T54] usb 7-1: Manufacturer: syz
[   99.139004][   T54] cdc_wdm 7-1:1.0: skipping garbage
[   99.141338][   T54] cdc_wdm 7-1:1.0: skipping garbage
[   99.147560][   T54] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[   99.150453][   T54] cdc_wdm 7-1:1.0: Unknown control protocol
[   99.394932][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   99.397725][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   99.400417][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   99.403113][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   99.405847][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   99.408542][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   99.411404][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   99.414103][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   99.418030][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   99.420694][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   99.423355][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   99.425577][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   99.427669][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   99.430210][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   99.433147][   T53] usb 7-1: USB disconnect, device number 8
[   99.436545][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[   99.439052][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[   99.441315][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   99.504966][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'.
[   99.597467][ T8252] netlink: 36 bytes leftover after parsing attributes in process `syz.2.598'.
[   99.603956][ T8252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.043814][   T54] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  100.073044][   T68] block nbd0: Connection timed out, retrying (0/1 alive)
[  100.076071][   T68] block nbd0: Connection timed out, retrying (0/1 alive)
[  100.078901][   T68] block nbd0: Connection timed out, retrying (0/1 alive)
[  100.081291][   T68] block nbd0: Connection timed out, retrying (0/1 alive)
[  100.085532][   T68] block nbd0: Dead connection, failed to find a fallback
[  100.088007][   T68] block nbd0: shutting down sockets
[  100.090147][   T68] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.094119][   T68] Buffer I/O error on dev nbd0, logical block 3, async page read
[  100.097160][   T68] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.100346][   T68] Buffer I/O error on dev nbd0, logical block 2, async page read
[  100.103271][   T68] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.106498][   T68] Buffer I/O error on dev nbd0, logical block 1, async page read
[  100.109192][   T68] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.112590][   T68] Buffer I/O error on dev nbd0, logical block 0, async page read
[  100.116677][ T5987] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.121011][ T5987] Buffer I/O error on dev nbd0, logical block 0, async page read
[  100.124450][ T5987] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.127514][ T5987] Buffer I/O error on dev nbd0, logical block 1, async page read
[  100.130175][ T5987] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.133333][ T5987] Buffer I/O error on dev nbd0, logical block 2, async page read
[  100.135963][ T5987] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.138914][ T5987] Buffer I/O error on dev nbd0, logical block 3, async page read
[  100.141583][ T5987] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.144667][ T5987] Buffer I/O error on dev nbd0, logical block 0, async page read
[  100.147431][ T5987] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.150491][ T5987] Buffer I/O error on dev nbd0, logical block 1, async page read
[  100.154411][ T5987] ldm_validate_partition_table(): Disk read failed.
[  100.157793][ T5987] Dev nbd0: unable to read RDB block 0
[  100.160041][   T40] kauditd_printk_skb: 27 callbacks suppressed
[  100.160050][   T40] audit: type=1400 audit(2000000546.775:542): avc:  denied  { setopt } for  pid=8265 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  100.161424][ T5987]  nbd0: unable to read partition table
[  100.163510][ T8266] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[  100.178336][ T5987] ldm_validate_partition_table(): Disk read failed.
[  100.181490][ T5987] Dev nbd0: unable to read RDB block 0
[  100.182448][ T8266] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[  100.182770][   T54] usb 5-1: device descriptor read/64, error -71
[  100.185607][ T5987]  nbd0: unable to read partition table
[  100.186630][ T8266] netlink: 160 bytes leftover after parsing attributes in process `syz.2.604'.
[  100.195729][ T8266] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[  100.198490][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'.
[  100.203724][   T40] audit: type=1400 audit(2000000546.825:543): avc:  denied  { write } for  pid=8265 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  100.350599][   T40] audit: type=1400 audit(2000000546.965:544): avc:  denied  { connect } for  pid=8267 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  100.358454][ T8268] input: syz1 as /devices/virtual/input/input8
[  100.412712][   T54] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  100.501161][ T8274] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.608'.
[  100.542733][   T54] usb 5-1: device descriptor read/64, error -71
[  100.653006][   T54] usb usb5-port1: attempt power cycle
[  100.992708][   T54] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  101.013143][   T54] usb 5-1: device descriptor read/8, error -71
[  101.252862][   T54] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  101.273908][   T54] usb 5-1: device descriptor read/8, error -71
[  101.383130][   T54] usb usb5-port1: unable to enumerate USB device
[  101.412947][   T73] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  101.564014][   T73] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  101.566768][   T73] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  101.569905][   T73] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  101.572798][   T73] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  101.576177][   T73] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  101.581301][   T73] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  101.584216][   T73] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  101.586722][   T73] usb 7-1: Product: syz
[  101.588054][   T73] usb 7-1: Manufacturer: syz
[  101.592254][   T73] cdc_wdm 7-1:1.0: skipping garbage
[  101.593971][   T73] cdc_wdm 7-1:1.0: skipping garbage
[  101.596485][   T73] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  101.598405][   T73] cdc_wdm 7-1:1.0: Unknown control protocol
[  101.845446][    C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  101.845739][   T54] usb 7-1: USB disconnect, device number 9
[  101.848153][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  101.848170][    C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  101.989295][ T8289] binder: 8288:8289 ioctl c0306201 200000000080 returned -14
[  101.993423][   T40] audit: type=1400 audit(2000000548.615:545): avc:  denied  { call } for  pid=8288 comm="syz.5.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  102.050914][ T8284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.612'.
[  102.058715][ T8284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.092549][ T8295] netlink: 'syz.5.617': attribute type 3 has an invalid length.
[  102.096508][ T8295] netlink: 'syz.5.617': attribute type 1 has an invalid length.
[  102.099780][ T8295] netlink: 220 bytes leftover after parsing attributes in process `syz.5.617'.
[  102.619008][   T40] audit: type=1400 audit(2000000549.235:546): avc:  denied  { mounton } for  pid=8318 comm="syz.2.619" path="/196/bus" dev="tmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  102.620670][ T8320] FAT-fs (nullb0): bogus number of reserved sectors
[  102.631338][ T8320] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  102.767030][   T40] audit: type=1400 audit(2000000549.385:547): avc:  denied  { bind } for  pid=8330 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  102.774148][   T40] audit: type=1400 audit(2000000549.385:548): avc:  denied  { name_bind } for  pid=8330 comm="syz.2.620" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  102.780978][   T40] audit: type=1400 audit(2000000549.385:549): avc:  denied  { node_bind } for  pid=8330 comm="syz.2.620" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  102.787349][   T40] audit: type=1400 audit(2000000549.395:550): avc:  denied  { write } for  pid=8330 comm="syz.2.620" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  102.994164][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'.
[  103.063810][ T8372] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  103.067577][ T8372] overlayfs: overlapping lowerdir path
[  103.342937][ T6055] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  103.412772][   T54] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  103.504733][ T6055] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  103.508433][ T6055] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  103.512390][ T6055] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  103.515347][ T6055] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  103.519478][ T6055] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  103.525515][ T6055] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  103.528659][ T6055] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  103.531409][ T6055] usb 5-1: Product: syz
[  103.533542][ T6055] usb 5-1: Manufacturer: syz
[  103.546612][ T6055] cdc_wdm 5-1:1.0: skipping garbage
[  103.548823][ T6055] cdc_wdm 5-1:1.0: skipping garbage
[  103.552115][ T6055] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  103.554137][ T6055] cdc_wdm 5-1:1.0: Unknown control protocol
[  103.573033][   T54] usb 10-1: Using ep0 maxpacket: 8
[  103.579999][   T54] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  103.585328][   T54] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  103.589298][   T54] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  103.593844][   T54] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  103.599057][   T54] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  103.604778][   T54] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.799939][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  103.800389][  T861] usb 5-1: USB disconnect, device number 14
[  103.802092][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  103.806459][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  103.814689][   T54] usb 10-1: GET_CAPABILITIES returned 0
[  103.817081][   T54] usbtmc 10-1:16.0: can't read capabilities
[  104.005105][ T8375] netlink: 36 bytes leftover after parsing attributes in process `syz.0.627'.
[  104.009956][ T8375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.019260][ T8381] devtmpfs: Unknown parameter '/dev/hpet'
[  104.023365][   T54] usb 10-1: USB disconnect, device number 6
[  104.030693][   T40] audit: type=1400 audit(2000000550.635:551): avc:  denied  { remount } for  pid=8380 comm="syz.5.629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  104.316467][ T8409] dlm: non-version read from control device 0
[  104.351852][ T8409] syz.2.635 uses old SIOCAX25GETINFO
[  104.568759][ T8415] syz_tun: entered allmulticast mode
[  104.571511][ T8415] comedi comedi2: multiq3: I/O port conflict (0xfffffffffffffffd,16)
[  104.575917][ T8414] syz_tun: left allmulticast mode
[  104.661144][ T8419] netlink: 'syz.0.639': attribute type 11 has an invalid length.
[  104.740751][ T8426] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  104.742954][ T8429] netlink: 32 bytes leftover after parsing attributes in process `syz.5.645'.
[  104.747188][ T8429] netlink: 32 bytes leftover after parsing attributes in process `syz.5.645'.
[  104.750068][ T8430] netlink: 32 bytes leftover after parsing attributes in process `syz.5.645'.
[  104.857680][ T8440] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  104.857850][   T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  104.859889][ T8440] overlayfs: failed to set xattr on upper
[  104.859896][ T8440] overlayfs: ...falling back to redirect_dir=nofollow.
[  104.863576][   T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  104.864674][ T8440] overlayfs: ...falling back to index=off.
[  104.867692][   T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  104.868927][ T8440] overlayfs: ...falling back to uuid=null.
[  104.879508][   T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  104.880945][ T8440] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  104.882158][   T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  104.911797][ T8438] vxcan1 speed is unknown, defaulting to 1000
[  104.913228][ T8444] vlan0: entered promiscuous mode
[  105.097923][ T8438] chnl_net:caif_netlink_parms(): no params data found
[  105.169993][   T40] kauditd_printk_skb: 7 callbacks suppressed
[  105.170003][   T40] audit: type=1400 audit(2000000551.785:559): avc:  denied  { watch watch_reads } for  pid=8457 comm="syz.0.652" path="/" dev="ramfs" ino=23330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  105.193045][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.195584][ T8438] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.197845][ T8438] bridge_slave_0: entered allmulticast mode
[  105.200430][ T8438] bridge_slave_0: entered promiscuous mode
[  105.204651][ T8438] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.206942][ T8438] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.209221][ T8438] bridge_slave_1: entered allmulticast mode
[  105.211784][ T8438] bridge_slave_1: entered promiscuous mode
[  105.259911][ T8438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.267967][ T8438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.279432][   T40] audit: type=1400 audit(2000000551.895:560): avc:  denied  { kexec_image_load } for  pid=8462 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  105.307159][ T8438] team0: Port device team_slave_0 added
[  105.310395][ T8438] team0: Port device team_slave_1 added
[  105.340082][ T8438] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.342296][ T8438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.350741][ T8438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.355813][ T8438] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.358001][ T8438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.367344][ T8438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.403220][ T8438] hsr_slave_0: entered promiscuous mode
[  105.405469][ T8438] hsr_slave_1: entered promiscuous mode
[  105.407525][ T8438] debugfs: 'hsr0' already exists in 'hsr'
[  105.409358][ T8438] Cannot create hsr debugfs directory
[  105.573409][ T8438] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  105.580097][ T8438] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  105.587498][ T8438] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  105.593607][ T8438] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  105.639604][ T8438] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.650440][ T8438] 8021q: adding VLAN 0 to HW filter on device team0
[  105.655735][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.658004][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.671584][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.673994][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.861266][ T8438] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.011994][   T40] audit: type=1400 audit(2000000552.625:561): avc:  denied  { ioctl } for  pid=8490 comm="syz.5.659" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  106.074668][   T40] audit: type=1400 audit(2000000552.695:562): avc:  denied  { mounton } for  pid=8492 comm="syz.5.660" path="/proc/248/cgroup" dev="proc" ino=25531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  106.247516][ T8438] veth0_vlan: entered promiscuous mode
[  106.257087][ T8438] veth1_vlan: entered promiscuous mode
[  106.289278][ T8438] veth0_macvtap: entered promiscuous mode
[  106.293263][ T8438] veth1_macvtap: entered promiscuous mode
[  106.301026][ T8438] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.305437][ T8438] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.318850][ T1147] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.323035][ T1147] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.326362][ T1147] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.332799][ T1182] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.346743][   T40] audit: type=1400 audit(2000000552.965:563): avc:  denied  { append } for  pid=8503 comm="syz.5.663" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  106.453465][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.457349][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.464987][ T8510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.467565][ T8510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.485645][   T40] audit: type=1400 audit(2000000553.105:564): avc:  denied  { mounton } for  pid=8438 comm="syz-executor" path="/syzkaller.Lvpw8y/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  106.501088][ T8528] netlink: 'syz.5.664': attribute type 11 has an invalid length.
[  106.501987][   T40] audit: type=1400 audit(2000000553.115:565): avc:  denied  { mounton } for  pid=8438 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  106.563553][ T8502] kvm: kvm [8501]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x41b
[  106.567677][ T8502] kvm: kvm [8501]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x1f1f
[  106.605966][ T8542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  106.608341][ T8542] IPv6: NLM_F_CREATE should be set when creating new route
[  106.610687][ T8542] IPv6: NLM_F_CREATE should be set when creating new route
[  106.658946][ T8502] kvm: kvm [8501]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x6825
[  106.663501][ T8502] kvm: kvm [8501]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc1) = 0x44c
[  106.667121][ T8502] kvm: kvm [8501]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x4850
[  106.670706][ T8502] kvm: kvm [8501]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x48d
[  106.693757][ T8540] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  106.696795][ T8540] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  106.704224][ T8548] Invalid logical block size (257)
[  106.731164][ T8502] kvm: kvm [8501]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x2b9
[  106.735805][ T8502] kvm: kvm [8501]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc1) = 0x790
[  106.739622][ T8502] kvm: kvm [8501]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x9794
[  106.743544][ T8502] kvm: kvm [8501]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x811
[  106.890539][ T8564] __nla_validate_parse: 1 callbacks suppressed
[  106.890554][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.673'.
[  106.899685][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.673'.
[  106.938029][   T40] audit: type=1400 audit(2000000553.555:566): avc:  denied  { ioctl } for  pid=8567 comm="syz.5.675" path="socket:[26778]" dev="sockfs" ino=26778 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  106.951286][   T63] Bluetooth: hci1: command tx timeout
[  107.027600][ T8577] netlink: 'syz.6.678': attribute type 4 has an invalid length.
[  107.038353][ T8577] netlink: 'syz.6.678': attribute type 4 has an invalid length.
[  107.043209][ T8580] netlink: 'syz.5.679': attribute type 21 has an invalid length.
[  107.046618][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.679'.
[  107.064384][ T8580] netlink: 'syz.5.679': attribute type 21 has an invalid length.
[  107.064434][ T1236] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.067424][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.679'.
[  107.074322][ T1236] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.077391][ T1236] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.080246][ T1236] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.152420][ T8588] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  107.194408][   T40] audit: type=1400 audit(2000000553.815:567): avc:  denied  { connect } for  pid=8598 comm="syz.6.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  107.221881][   T40] audit: type=1400 audit(2000000553.835:568): avc:  denied  { create } for  pid=8601 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  107.562698][ T6055] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  107.714273][ T6055] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  107.718052][ T6055] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  107.721349][ T6055] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  107.726331][ T6055] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  107.729724][ T6055] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  107.743889][ T6055] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  107.747408][ T6055] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  107.750471][ T6055] usb 5-1: Product: syz
[  107.752106][ T6055] usb 5-1: Manufacturer: syz
[  107.760937][ T6055] cdc_wdm 5-1:1.0: skipping garbage
[  107.761453][ T8629] fuse: Bad value for 'user_id'
[  107.763148][ T6055] cdc_wdm 5-1:1.0: skipping garbage
[  107.765174][ T8629] fuse: Bad value for 'user_id'
[  107.774275][ T6055] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  107.776613][ T6055] cdc_wdm 5-1:1.0: Unknown control protocol
[  108.016544][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  108.016787][ T6055] usb 5-1: USB disconnect, device number 15
[  108.018698][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  108.022567][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  108.223032][ T8607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.688'.
[  108.229878][ T8607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.542787][ T6055] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  108.692753][ T6055] usb 10-1: Using ep0 maxpacket: 8
[  108.695813][ T8646] fuse: Bad value for 'rootmode'
[  108.697324][ T6055] usb 10-1: config 6 has an invalid interface number: 38 but max is 2
[  108.700945][ T6055] usb 10-1: config 6 has an invalid interface number: 30 but max is 2
[  108.706205][ T6055] usb 10-1: config 6 has an invalid interface number: 90 but max is 2
[  108.709375][ T6055] usb 10-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[  108.713287][ T6055] usb 10-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[  108.716924][ T6055] usb 10-1: config 6 has an invalid interface number: 116 but max is 2
[  108.720178][ T6055] usb 10-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[  108.723864][ T6055] usb 10-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  108.727927][ T6055] usb 10-1: config 6 has 5 interfaces, different from the descriptor's value: 3
[  108.731475][ T6055] usb 10-1: config 6 has no interface number 0
[  108.735072][ T6055] usb 10-1: config 6 has no interface number 1
[  108.737514][ T6055] usb 10-1: config 6 has no interface number 3
[  108.739968][ T6055] usb 10-1: config 6 has no interface number 4
[  108.742778][ T6055] usb 10-1: config 6 interface 38 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[  108.747842][ T6055] usb 10-1: too many endpoints for config 6 interface 30 altsetting 167: 126, using maximum allowed: 30
[  108.752165][ T6055] usb 10-1: config 6 interface 30 altsetting 167 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  108.756697][ T6055] usb 10-1: config 6 interface 30 altsetting 167 has 5 endpoint descriptors, different from the interface descriptor's value: 126
[  108.762161][ T6055] usb 10-1: config 6 interface 90 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  108.767466][ T6055] usb 10-1: config 6 interface 90 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[  108.770803][ T6055] usb 10-1: config 6 interface 90 altsetting 1 has a duplicate endpoint with address 0xA, skipping
[  108.774159][ T6055] usb 10-1: config 6 interface 90 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  108.777637][ T6055] usb 10-1: config 6 interface 90 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  108.781980][ T6055] usb 10-1: config 6 interface 90 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[  108.785977][ T6055] usb 10-1: config 6 interface 90 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  108.789470][ T6055] usb 10-1: config 6 interface 90 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  108.794970][ T6055] usb 10-1: config 6 interface 90 altsetting 1 has a duplicate endpoint with address 0x3, skipping
[  108.798234][ T6055] usb 10-1: config 6 interface 90 altsetting 1 has a duplicate endpoint with address 0x3, skipping
[  108.802205][ T6055] usb 10-1: config 6 interface 90 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[  108.806666][ T6055] usb 10-1: config 6 interface 90 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[  108.811040][ T6055] usb 10-1: config 6 interface 90 altsetting 1 has a duplicate endpoint with address 0x3, skipping
[  108.815562][ T6055] usb 10-1: config 6 interface 90 altsetting 1 has 15 endpoint descriptors, different from the interface descriptor's value: 14
[  108.820547][ T6055] usb 10-1: config 6 interface 116 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[  108.824917][ T6055] usb 10-1: too many endpoints for config 6 interface 2 altsetting 8: 150, using maximum allowed: 30
[  108.829353][ T6055] usb 10-1: config 6 interface 2 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 150
[  108.834890][ T6055] usb 10-1: config 6 interface 38 has no altsetting 0
[  108.837699][ T6055] usb 10-1: config 6 interface 30 has no altsetting 0
[  108.840544][ T6055] usb 10-1: config 6 interface 90 has no altsetting 0
[  108.843626][ T6055] usb 10-1: config 6 interface 116 has no altsetting 0
[  108.846629][ T6055] usb 10-1: config 6 interface 2 has no altsetting 0
[  108.851236][ T6055] usb 10-1: Dual-Role OTG device on HNP port
[  108.854172][ T6055] usb 10-1: New USB device found, idVendor=12d1, idProduct=1c23, bcdDevice=82.0d
[  108.857644][ T6055] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.860764][ T6055] usb 10-1: Product: ⠊
[  108.862446][ T6055] usb 10-1: Manufacturer: ည
[  108.865075][ T6055] usb 10-1: SerialNumber: ஹ킢ᝍ쬆ꍓ氥ﾼ꣫챑㤥⻖ර툒쒜卬炕駱䔦ꐺ衎乹㳾턏‹貝酀龟焾샀䫫聵庝벏䝃䚽㡈毵왯皖웺═斏ⅳ᭤掆緽䍜腿埡區㾗ꬫ勒ཁ㠗ｅ沖ꣴ埛䔫籗乳暤ꖿ㼂굯ﱒ埈읒䎽
[  108.938692][ T8654] netlink: 24 bytes leftover after parsing attributes in process `syz.6.703'.
[  109.022736][   T63] Bluetooth: hci1: command tx timeout
[  109.031501][ T8663] netlink: 'syz.6.706': attribute type 1 has an invalid length.
[  109.032567][ T8662] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.704'.
[  109.034222][ T8663] netlink: 212 bytes leftover after parsing attributes in process `syz.6.706'.
[  109.034233][ T8663] netlink: 'syz.6.706': attribute type 1 has an invalid length.
[  109.059001][ T8663] No control pipe specified
[  109.312389][ T6055] rndis_host 10-1:6.38: skipping garbage
[  109.315166][ T6055] usb 10-1: bad CDC descriptors
[  109.317417][ T6055] option 10-1:6.38: GSM modem (1-port) converter detected
[  109.333567][ T6055] usb 10-1: USB disconnect, device number 7
[  109.336897][ T6055] option 10-1:6.38: device disconnected
[  109.342827][   T60] usb 11-1: new low-speed USB device number 2 using dummy_hcd
[  109.505569][   T60] usb 11-1: config 0 has an invalid interface number: 55 but max is 0
[  109.509033][   T60] usb 11-1: config 0 has no interface number 0
[  109.510995][   T60] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  109.514502][   T60] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  109.517802][   T60] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  109.521459][   T60] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 4216, setting to 8
[  109.524971][   T60] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  109.529097][   T60] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  109.531989][   T60] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.540330][   T60] usb 11-1: config 0 descriptor??
[  109.543012][ T8665] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  109.545407][ T8665] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  109.551622][   T60] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  109.822609][ T8672] macvtap1: entered allmulticast mode
[  109.826081][ T8672] veth0_macvtap: entered allmulticast mode
[  109.905716][ T5986] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  109.906660][ T8675] netlink: 'syz.5.711': attribute type 1 has an invalid length.
[  109.909357][ T5986] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  109.911518][ T8675] netlink: 224 bytes leftover after parsing attributes in process `syz.5.711'.
[  109.914688][ T5986] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  109.923118][ T5986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  109.925803][ T5986] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  109.971910][ T8676] vxcan1 speed is unknown, defaulting to 1000
[  109.986981][ T6055] usb 11-1: USB disconnect, device number 2
[  109.994982][ T6055] ldusb 11-1:0.55: LD USB Device #0 now disconnected
[  110.030538][ T8684] netlink: 'syz.0.713': attribute type 11 has an invalid length.
[  110.211120][ T8676] chnl_net:caif_netlink_parms(): no params data found
[  110.221768][ T8708] binder: 8707:8708 ioctl c0046209 9999999999999999 returned -22
[  110.226530][ T8708] xt_policy: neither incoming nor outgoing policy selected
[  110.280367][ T8718] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  110.300263][   T54] libceph: connect (1)[c::]:6789 error -22
[  110.304426][   T54] libceph: mon0 (1)[c::]:6789 connect error
[  110.307807][   T54] libceph: connect (1)[c::]:6789 error -22
[  110.309789][   T54] libceph: mon0 (1)[c::]:6789 connect error
[  110.324594][ T8676] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.326915][ T8676] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.329392][ T8676] bridge_slave_0: entered allmulticast mode
[  110.332395][ T8676] bridge_slave_0: entered promiscuous mode
[  110.341522][ T8722] ceph: No mds server is up or the cluster is laggy
[  110.358175][ T8676] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.360920][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.363443][ T8676] bridge_slave_1: entered allmulticast mode
[  110.366213][ T8676] bridge_slave_1: entered promiscuous mode
[  110.410430][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.726'.
[  110.413231][ T8676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.417828][ T8676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.475799][ T8676] team0: Port device team_slave_0 added
[  110.480247][ T8676] team0: Port device team_slave_1 added
[  110.529461][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.531689][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.539716][ T8676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.545591][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.547941][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.556415][ T8676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.645004][ T8754] overlayfs: invalid origin (0000)
[  110.668176][ T8676] hsr_slave_0: entered promiscuous mode
[  110.670333][ T8676] hsr_slave_1: entered promiscuous mode
[  110.672400][ T8676] debugfs: 'hsr0' already exists in 'hsr'
[  110.674544][ T8676] Cannot create hsr debugfs directory
[  110.696091][ T1236] bridge_slave_1: left allmulticast mode
[  110.698272][ T1236] bridge_slave_1: left promiscuous mode
[  110.700508][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.705694][ T1236] bridge_slave_0: left allmulticast mode
[  110.708132][ T1236] bridge_slave_0: left promiscuous mode
[  110.711904][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.716901][ T8761] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  110.726283][ T8761] CIFS: Unable to determine destination address
[  110.883248][ T1236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.887670][ T1236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.890882][ T1236] bond0 (unregistering): Released all slaves
[  111.059175][ T8778] fuse: Bad value for 'group_id'
[  111.059902][ T8776] mkiss: ax0: crc mode is auto.
[  111.060965][ T8778] fuse: Bad value for 'group_id'
[  111.067042][ T8676] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  111.076453][ T8676] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  111.080601][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  111.080610][   T40] audit: type=1400 audit(2000000557.695:575): avc:  denied  { unmount } for  pid=5979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  111.081989][ T8676] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  111.095625][ T8676] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  111.112863][   T63] Bluetooth: hci1: command tx timeout
[  111.183174][   T24] usb 10-1: new low-speed USB device number 8 using dummy_hcd
[  111.216966][ T8676] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.238700][ T8676] 8021q: adding VLAN 0 to HW filter on device team0
[  111.249212][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.252204][ T6175] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.276223][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.279199][ T6175] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.366938][   T24] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[  111.370045][   T24] usb 10-1: config 0 has no interface number 0
[  111.372033][   T24] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  111.392824][   T24] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  111.397492][   T24] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  111.399675][ T8819] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request
[  111.408673][   T24] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 4216, setting to 8
[  111.412046][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.417470][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.421601][   T24] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  111.430012][   T24] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  111.433787][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.444356][   T24] usb 10-1: config 0 descriptor??
[  111.447155][ T8770] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  111.449703][ T8770] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  111.459214][   T24] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  111.527019][   T40] audit: type=1400 audit(2000000558.145:576): avc:  denied  { create } for  pid=8830 comm="syz.6.749" name="#21" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  111.533480][   T40] audit: type=1400 audit(2000000558.145:577): avc:  denied  { link } for  pid=8830 comm="syz.6.749" name="#21" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  111.540141][   T40] audit: type=1400 audit(2000000558.145:578): avc:  denied  { rename } for  pid=8830 comm="syz.6.749" name="#22" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  111.548145][   T40] audit: type=1400 audit(2000000558.165:579): avc:  denied  { create } for  pid=8832 comm="syz.0.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  111.554958][   T40] audit: type=1400 audit(2000000558.165:580): avc:  denied  { ioctl } for  pid=8832 comm="syz.0.750" path="socket:[28050]" dev="sockfs" ino=28050 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  111.562367][   T40] audit: type=1400 audit(2000000558.165:581): avc:  denied  { bind } for  pid=8832 comm="syz.0.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  111.600809][ T8838] binder: 8837:8838 ioctl c0306201 200000000080 returned -14
[  111.614200][ T8838] binder: BINDER_SET_CONTEXT_MGR already set
[  111.616519][ T8838] binder: 8837:8838 ioctl 4018620d 200000000040 returned -16
[  111.671548][   T24] usb 10-1: USB disconnect, device number 8
[  111.677276][   T24] ldusb 10-1:0.55: LD USB Device #0 now disconnected
[  111.680532][   T40] audit: type=1400 audit(2000000558.305:582): avc:  denied  { read } for  pid=8837 comm="syz.0.752" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  111.688670][   T40] audit: type=1400 audit(2000000558.305:583): avc:  denied  { open } for  pid=8837 comm="syz.0.752" path="/215/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  111.696599][   T40] audit: type=1400 audit(2000000558.305:584): avc:  denied  { ioctl } for  pid=8837 comm="syz.0.752" path="/215/file0/file0" dev="fuse" ino=64 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  111.705211][ T8838] binder: 8837:8838 ioctl c0286405 200000000040 returned -22
[  111.781114][ T8846] netlink: 'syz.0.754': attribute type 1 has an invalid length.
[  111.983983][   T63] Bluetooth: hci4: command tx timeout
[  112.107746][ T1236] team0 (unregistering): Port device team_slave_1 removed
[  112.176522][ T1236] team0 (unregistering): Port device team_slave_0 removed
[  112.670421][ T8846] bond1: entered promiscuous mode
[  112.672241][ T8846] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.727860][ T8676] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.849034][ T8873] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.898209][ T8881] __nla_validate_parse: 4 callbacks suppressed
[  112.898221][ T8881] netlink: 16 bytes leftover after parsing attributes in process `syz.6.760'.
[  112.913671][ T8884] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  112.925388][ T8873] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.944854][ T8676] veth0_vlan: entered promiscuous mode
[  112.949376][ T8676] veth1_vlan: entered promiscuous mode
[  112.968515][ T8676] veth0_macvtap: entered promiscuous mode
[  112.977746][ T8508] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  112.981333][ T8508] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  112.989365][ T8676] veth1_macvtap: entered promiscuous mode
[  112.999606][ T8676] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.003036][ T6042] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.007431][ T8890] netlink: 20 bytes leftover after parsing attributes in process `syz.6.760'.
[  113.015141][ T8676] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.021170][ T6175] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.024183][ T6175] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.032339][ T8873] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.041746][ T6175] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.045389][ T6175] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.085334][ T8508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.088213][ T8508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.107312][ T8523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.110319][ T8523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.144016][ T8873] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.182757][   T63] Bluetooth: hci1: command tx timeout
[  113.190738][ T8904] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  113.231074][ T8515] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.240312][ T8523] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.255202][ T8523] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.262468][ T8508] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.354799][ T8922] openvswitch: netlink: IP tunnel dst address not specified
[  113.355203][ T8923] FAULT_INJECTION: forcing a failure.
[  113.355203][ T8923] name failslab, interval 1, probability 0, space 0, times 0
[  113.362346][ T8923] CPU: 3 UID: 0 PID: 8923 Comm: syz.7.768 Not tainted syzkaller #0 PREEMPT(full) 
[  113.362360][ T8923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  113.362367][ T8923] Call Trace:
[  113.362371][ T8923]  <TASK>
[  113.362375][ T8923]  dump_stack_lvl+0x16c/0x1f0
[  113.362411][ T8923]  should_fail_ex+0x512/0x640
[  113.362429][ T8923]  ? fs_reclaim_acquire+0xae/0x150
[  113.362444][ T8923]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  113.362461][ T8923]  should_failslab+0xc2/0x120
[  113.362473][ T8923]  __kmalloc_noprof+0xd2/0x510
[  113.362488][ T8923]  tomoyo_realpath_from_path+0xc2/0x6e0
[  113.362505][ T8923]  ? tomoyo_profile+0x47/0x60
[  113.362517][ T8923]  tomoyo_path_number_perm+0x245/0x580
[  113.362530][ T8923]  ? tomoyo_path_number_perm+0x237/0x580
[  113.362545][ T8923]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  113.362559][ T8923]  ? find_held_lock+0x2b/0x80
[  113.362584][ T8923]  ? find_held_lock+0x2b/0x80
[  113.362596][ T8923]  ? hook_file_ioctl_common+0x145/0x410
[  113.362610][ T8923]  ? __fget_files+0x20e/0x3c0
[  113.362638][ T8923]  security_file_ioctl+0x9b/0x240
[  113.362654][ T8923]  __x64_sys_ioctl+0xb7/0x210
[  113.362671][ T8923]  do_syscall_64+0xcd/0x4e0
[  113.362693][ T8923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.362703][ T8923] RIP: 0033:0x7f42a898eba9
[  113.362712][ T8923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.362722][ T8923] RSP: 002b:00007f42a98fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  113.362732][ T8923] RAX: ffffffffffffffda RBX: 00007f42a8bd5fa0 RCX: 00007f42a898eba9
[  113.362739][ T8923] RDX: 00002000000001c0 RSI: 00000000c06864b8 RDI: 0000000000000003
[  113.362745][ T8923] RBP: 00007f42a98fe090 R08: 0000000000000000 R09: 0000000000000000
[  113.362751][ T8923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.362757][ T8923] R13: 00007f42a8bd6038 R14: 00007f42a8bd5fa0 R15: 00007ffeb8aae888
[  113.362770][ T8923]  </TASK>
[  113.434407][ T8923] ERROR: Out of memory at tomoyo_realpath_from_path.
[  113.456188][ T8937] syz_tun: entered allmulticast mode
[  113.467552][ T8937] dvmrp8: entered allmulticast mode
[  113.476258][ T8936] syz_tun: left allmulticast mode
[  113.484438][ T8942] netlink: 56 bytes leftover after parsing attributes in process `syz.7.774'.
[  113.528035][ T8954] �������[SR��W: renamed from lo (while UP)
[  113.664790][ T8967] syz.0.780 (8967) used obsolete PPPIOCDETACH ioctl
[  113.668290][ T8968] FAULT_INJECTION: forcing a failure.
[  113.668290][ T8968] name failslab, interval 1, probability 0, space 0, times 0
[  113.674152][ T8968] CPU: 0 UID: 0 PID: 8968 Comm: syz.5.783 Not tainted syzkaller #0 PREEMPT(full) 
[  113.674173][ T8968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  113.674182][ T8968] Call Trace:
[  113.674189][ T8968]  <TASK>
[  113.674196][ T8968]  dump_stack_lvl+0x16c/0x1f0
[  113.674224][ T8968]  should_fail_ex+0x512/0x640
[  113.674245][ T8968]  ? fs_reclaim_acquire+0xae/0x150
[  113.674275][ T8968]  ? tomoyo_encode2+0x100/0x3e0
[  113.674301][ T8968]  should_failslab+0xc2/0x120
[  113.674321][ T8968]  __kmalloc_noprof+0xd2/0x510
[  113.674338][ T8968]  ? d_absolute_path+0x136/0x1a0
[  113.674367][ T8968]  tomoyo_encode2+0x100/0x3e0
[  113.674396][ T8968]  tomoyo_encode+0x29/0x50
[  113.674435][ T8968]  tomoyo_realpath_from_path+0x18f/0x6e0
[  113.674469][ T8968]  tomoyo_path_number_perm+0x245/0x580
[  113.674488][ T8968]  ? tomoyo_path_number_perm+0x237/0x580
[  113.674511][ T8968]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  113.674535][ T8968]  ? find_held_lock+0x2b/0x80
[  113.674577][ T8968]  ? find_held_lock+0x2b/0x80
[  113.674598][ T8968]  ? hook_file_ioctl_common+0x145/0x410
[  113.674623][ T8968]  ? __fget_files+0x20e/0x3c0
[  113.674648][ T8968]  security_file_ioctl+0x9b/0x240
[  113.674675][ T8968]  __x64_sys_ioctl+0xb7/0x210
[  113.674702][ T8968]  do_syscall_64+0xcd/0x4e0
[  113.674727][ T8968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.674744][ T8968] RIP: 0033:0x7fb247d8eba9
[  113.674758][ T8968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.674775][ T8968] RSP: 002b:00007fb248c8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  113.674791][ T8968] RAX: ffffffffffffffda RBX: 00007fb247fd5fa0 RCX: 00007fb247d8eba9
[  113.674803][ T8968] RDX: 00002000000001c0 RSI: 00000000c06864b8 RDI: 0000000000000003
[  113.674814][ T8968] RBP: 00007fb248c8a090 R08: 0000000000000000 R09: 0000000000000000
[  113.674824][ T8968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.674833][ T8968] R13: 00007fb247fd6038 R14: 00007fb247fd5fa0 R15: 00007fff69715d08
[  113.674856][ T8968]  </TASK>
[  113.674951][ T8968] ERROR: Out of memory at tomoyo_realpath_from_path.
[  113.753302][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.885321][ T8984] netlink: 'syz.6.789': attribute type 4 has an invalid length.
[  113.903222][   T54] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.943978][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.6.789'.
[  114.062952][ T5986] Bluetooth: hci4: command tx timeout
[  114.160868][ T8990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=8990 comm=syz.5.790
[  114.166375][ T8990] openvswitch: netlink: Tunnel attr 16370 out of range max 16
[  114.650218][ T9010] macsec0: entered promiscuous mode
[  114.652231][ T9010] macsec0: entered allmulticast mode
[  114.654352][ T9010] veth1_macvtap: entered allmulticast mode
[  114.696717][ T9016] FAULT_INJECTION: forcing a failure.
[  114.696717][ T9016] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  114.701681][ T9016] CPU: 3 UID: 0 PID: 9016 Comm: syz.7.798 Not tainted syzkaller #0 PREEMPT(full) 
[  114.701702][ T9016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  114.701711][ T9016] Call Trace:
[  114.701717][ T9016]  <TASK>
[  114.701723][ T9016]  dump_stack_lvl+0x16c/0x1f0
[  114.701748][ T9016]  should_fail_ex+0x512/0x640
[  114.701772][ T9016]  _copy_to_user+0x32/0xd0
[  114.701793][ T9016]  drm_ioctl+0x5eb/0xc30
[  114.701819][ T9016]  ? __pfx_drm_mode_addfb2_ioctl+0x10/0x10
[  114.701837][ T9016]  ? __pfx_drm_ioctl+0x10/0x10
[  114.701868][ T9016]  ? selinux_file_ioctl+0x180/0x270
[  114.701889][ T9016]  ? selinux_file_ioctl+0xb4/0x270
[  114.701911][ T9016]  ? __pfx_drm_ioctl+0x10/0x10
[  114.701933][ T9016]  __x64_sys_ioctl+0x18e/0x210
[  114.701958][ T9016]  do_syscall_64+0xcd/0x4e0
[  114.701980][ T9016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.701995][ T9016] RIP: 0033:0x7f42a898eba9
[  114.702008][ T9016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.702020][ T9016] RSP: 002b:00007f42a98fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  114.702038][ T9016] RAX: ffffffffffffffda RBX: 00007f42a8bd5fa0 RCX: 00007f42a898eba9
[  114.702048][ T9016] RDX: 00002000000001c0 RSI: 00000000c06864b8 RDI: 0000000000000003
[  114.702058][ T9016] RBP: 00007f42a98fe090 R08: 0000000000000000 R09: 0000000000000000
[  114.702067][ T9016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.702076][ T9016] R13: 00007f42a8bd6038 R14: 00007f42a8bd5fa0 R15: 00007ffeb8aae888
[  114.702098][ T9016]  </TASK>
[  114.765567][ T9013] ubi31: attaching mtd0
[  114.768934][ T9013] ubi31: scanning is finished
[  114.770477][ T9013] ubi31: empty MTD device detected
[  114.851572][ T9013] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  114.854640][ T9013] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  114.857657][ T9013] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  114.862051][ T9013] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  114.865383][ T9013] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  114.868208][ T9013] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  114.872247][ T9013] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 265471797
[  114.875364][ T9013] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  114.880391][ T9022] ubi31: background thread "ubi_bgt31d" started, PID 9022
[  115.073405][ T9044] FAULT_INJECTION: forcing a failure.
[  115.073405][ T9044] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  115.077494][ T9044] CPU: 1 UID: 0 PID: 9044 Comm: syz.0.807 Not tainted syzkaller #0 PREEMPT(full) 
[  115.077508][ T9044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  115.077514][ T9044] Call Trace:
[  115.077518][ T9044]  <TASK>
[  115.077523][ T9044]  dump_stack_lvl+0x16c/0x1f0
[  115.077539][ T9044]  should_fail_ex+0x512/0x640
[  115.077555][ T9044]  _copy_to_user+0x32/0xd0
[  115.077571][ T9044]  simple_read_from_buffer+0xcb/0x170
[  115.077584][ T9044]  proc_fail_nth_read+0x197/0x240
[  115.077597][ T9044]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  115.077610][ T9044]  ? rw_verify_area+0xcf/0x6c0
[  115.077626][ T9044]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  115.077638][ T9044]  vfs_read+0x1e4/0xcf0
[  115.077650][ T9044]  ? __pfx___mutex_lock+0x10/0x10
[  115.077664][ T9044]  ? __pfx_vfs_read+0x10/0x10
[  115.077678][ T9044]  ? __fget_files+0x20e/0x3c0
[  115.077693][ T9044]  ksys_read+0x12a/0x250
[  115.077703][ T9044]  ? __pfx_ksys_read+0x10/0x10
[  115.077713][ T9044]  ? fput+0x9b/0xd0
[  115.077729][ T9044]  do_syscall_64+0xcd/0x4e0
[  115.077744][ T9044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.077755][ T9044] RIP: 0033:0x7fc210d8d5bc
[  115.077763][ T9044] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  115.077773][ T9044] RSP: 002b:00007fc211b81030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  115.077783][ T9044] RAX: ffffffffffffffda RBX: 00007fc210fd5fa0 RCX: 00007fc210d8d5bc
[  115.077790][ T9044] RDX: 000000000000000f RSI: 00007fc211b810a0 RDI: 0000000000000004
[  115.077796][ T9044] RBP: 00007fc211b81090 R08: 0000000000000000 R09: 0000000000000000
[  115.077802][ T9044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.077807][ T9044] R13: 00007fc210fd6038 R14: 00007fc210fd5fa0 R15: 00007fff7eaa8d08
[  115.077820][ T9044]  </TASK>
[  115.138849][    C1] vkms_vblank_simulate: vblank timer overrun
[  115.276824][ T9056] netlink: 'syz.6.810': attribute type 3 has an invalid length.
[  115.279126][ T9056] netlink: 224 bytes leftover after parsing attributes in process `syz.6.810'.
[  115.287281][ T9058] netlink: 40 bytes leftover after parsing attributes in process `syz.7.811'.
[  115.326819][ T9064] binder: 9062:9064 ioctl c0306201 200000000080 returned -14
[  115.403753][ T9071] binder: 9070:9071 ioctl 400c620e 200000000640 returned -22
[  115.606578][ T9103] sctp: [Deprecated]: syz.0.826 (pid 9103) Use of int in max_burst socket option deprecated.
[  115.606578][ T9103] Use struct sctp_assoc_value instead
[  115.642456][ T9106] netlink: 92 bytes leftover after parsing attributes in process `syz.0.827'.
[  116.120131][ T9060] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  116.124000][ T9060] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  116.126515][ T9060] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  116.129357][ T9060] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  116.132396][ T9060] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  116.134550][ T9060] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  116.137257][ T9060] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  116.139916][ T9060] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  116.141866][ T9060] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  116.146609][ T9060] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  116.215782][ T9124] netlink: 'syz.7.833': attribute type 1 has an invalid length.
[  116.218849][ T9124] netlink: 'syz.7.833': attribute type 2 has an invalid length.
[  116.272344][ T9127] netlink: 'syz.6.831': attribute type 10 has an invalid length.
[  116.274952][ T9126] netlink: 'syz.6.831': attribute type 10 has an invalid length.
[  116.281381][ T9126] batman_adv: batadv0: Adding interface: team0
[  116.283768][ T9126] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.293691][ T9126] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  116.302418][ T9126] netlink: 'syz.6.831': attribute type 12 has an invalid length.
[  116.347154][ T9135] usb usb8: usbfs: process 9135 (syz.6.836) did not claim interface 0 before use
[  116.350990][   T63] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  116.354118][ T9136] netlink: 24 bytes leftover after parsing attributes in process `syz.7.835'.
[  116.437670][   T40] kauditd_printk_skb: 13 callbacks suppressed
[  116.437687][   T40] audit: type=1400 audit(2000000563.055:598): avc:  denied  { map } for  pid=9143 comm="syz.6.839" path="socket:[29419]" dev="sockfs" ino=29419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  116.439368][ T9144] netlink: 284 bytes leftover after parsing attributes in process `syz.6.839'.
[  116.522745][ T6326] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  116.619164][ T9162] ==================================================================
[  116.619174][ T9162] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0
[  116.619202][ T9162] Write of size 8 at addr ffffc900054b1000 by task syz.6.845/9162
[  116.619214][ T9162] 
[  116.619221][ T9162] CPU: 2 UID: 0 PID: 9162 Comm: syz.6.845 Not tainted syzkaller #0 PREEMPT(full) 
[  116.619238][ T9162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  116.619248][ T9162] Call Trace:
[  116.619253][ T9162]  <TASK>
[  116.619259][ T9162]  dump_stack_lvl+0x116/0x1f0
[  116.619285][ T9162]  print_report+0xcd/0x630
[  116.619302][ T9162]  ? __virt_addr_valid+0x81/0x610
[  116.619323][ T9162]  ? sys_fillrect+0x15d4/0x17b0
[  116.619343][ T9162]  kasan_report+0xe0/0x110
[  116.619359][ T9162]  ? sys_fillrect+0x15d4/0x17b0
[  116.619379][ T9162]  sys_fillrect+0x15d4/0x17b0
[  116.619400][ T9162]  ? __pfx_sys_fillrect+0x10/0x10
[  116.619420][ T9162]  ? __pfx_bit_putcs+0x10/0x10
[  116.619435][ T9162]  ? bit_cursor+0xeca/0x17e0
[  116.619452][ T9162]  drm_fbdev_shmem_defio_fillrect+0x22/0x140
[  116.619471][ T9162]  bit_clear+0x17d/0x220
[  116.619486][ T9162]  ? __pfx_bit_clear+0x10/0x10
[  116.619504][ T9162]  ? __pfx___might_resched+0x10/0x10
[  116.619521][ T9162]  ? fb_get_color_depth+0x120/0x250
[  116.619535][ T9162]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  116.619552][ T9162]  ? __pfx_bit_clear+0x10/0x10
[  116.619567][ T9162]  __fbcon_clear+0x603/0x780
[  116.619584][ T9162]  fbcon_scroll+0x48b/0x690
[  116.619599][ T9162]  con_scroll+0x45c/0x690
[  116.619615][ T9162]  do_con_write+0x5560/0x8280
[  116.619632][ T9162]  ? call_rcu_tasks_generic+0x400/0x920
[  116.619655][ T9162]  ? __pfx___mutex_lock+0x10/0x10
[  116.619673][ T9162]  ? __pfx_do_con_write+0x10/0x10
[  116.619690][ T9162]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  116.619711][ T9162]  con_write+0x23/0xb0
[  116.619726][ T9162]  n_tty_write+0x41c/0x11e0
[  116.619749][ T9162]  ? __pfx_n_tty_write+0x10/0x10
[  116.619767][ T9162]  ? rcu_is_watching+0x12/0xc0
[  116.619783][ T9162]  ? __pfx_woken_wake_function+0x10/0x10
[  116.619799][ T9162]  ? kfree+0x24f/0x4d0
[  116.619816][ T9162]  ? file_tty_write.constprop.0+0x6ef/0x9b0
[  116.619833][ T9162]  ? __pfx_n_tty_write+0x10/0x10
[  116.619852][ T9162]  file_tty_write.constprop.0+0x504/0x9b0
[  116.619870][ T9162]  vfs_write+0x7d0/0x11d0
[  116.619884][ T9162]  ? __pfx_tty_write+0x10/0x10
[  116.619900][ T9162]  ? __pfx_vfs_write+0x10/0x10
[  116.619912][ T9162]  ? find_held_lock+0x2b/0x80
[  116.619933][ T9162]  ksys_write+0x12a/0x250
[  116.619946][ T9162]  ? __pfx_ksys_write+0x10/0x10
[  116.619961][ T9162]  do_syscall_64+0xcd/0x4e0
[  116.619980][ T9162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.619994][ T9162] RIP: 0033:0x7ff23eb8eba9
[  116.620004][ T9162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.620019][ T9162] RSP: 002b:00007ff23fa81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  116.620035][ T9162] RAX: ffffffffffffffda RBX: 00007ff23edd5fa0 RCX: 00007ff23eb8eba9
[  116.620046][ T9162] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000009
[  116.620055][ T9162] RBP: 00007ff23ec11e19 R08: 0000000000000000 R09: 0000000000000000
[  116.620064][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.620073][ T9162] R13: 00007ff23edd6038 R14: 00007ff23edd5fa0 R15: 00007ffdceaa77a8
[  116.620087][ T9162]  </TASK>
[  116.620092][ T9162] 
[  116.620096][ T9162] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc900051b1000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0
[  116.620124][ T9162] Memory state around the buggy address:
[  116.620132][ T9162]  ffffc900054b0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  116.620142][ T9162]  ffffc900054b0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  116.620152][ T9162] >ffffc900054b1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  116.620160][ T9162]                    ^
[  116.620168][ T9162]  ffffc900054b1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  116.620177][ T9162]  ffffc900054b1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  116.620184][ T9162] ==================================================================
[  116.620192][ T9162] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  116.620201][ T9162] CPU: 2 UID: 0 PID: 9162 Comm: syz.6.845 Not tainted syzkaller #0 PREEMPT(full) 
[  116.620215][ T9162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  116.620224][ T9162] Call Trace:
[  116.620229][ T9162]  <TASK>
[  116.620234][ T9162]  dump_stack_lvl+0x3d/0x1f0
[  116.620253][ T9162]  vpanic+0x6e8/0x7a0
[  116.620267][ T9162]  ? __pfx_vpanic+0x10/0x10
[  116.620278][ T9162]  ? __pfx_vprintk_emit+0x10/0x10
[  116.620305][ T9162]  ? sys_fillrect+0x15d4/0x17b0
[  116.620326][ T9162]  panic+0xca/0xd0
[  116.620337][ T9162]  ? __pfx_panic+0x10/0x10
[  116.620353][ T9162]  check_panic_on_warn+0xab/0xb0
[  116.620365][ T9162]  end_report+0x107/0x170
[  116.620380][ T9162]  kasan_report+0xee/0x110
[  116.620395][ T9162]  ? sys_fillrect+0x15d4/0x17b0
[  116.620417][ T9162]  sys_fillrect+0x15d4/0x17b0
[  116.620437][ T9162]  ? __pfx_sys_fillrect+0x10/0x10
[  116.620457][ T9162]  ? __pfx_bit_putcs+0x10/0x10
[  116.620472][ T9162]  ? bit_cursor+0xeca/0x17e0
[  116.620489][ T9162]  drm_fbdev_shmem_defio_fillrect+0x22/0x140
[  116.620506][ T9162]  bit_clear+0x17d/0x220
[  116.620522][ T9162]  ? __pfx_bit_clear+0x10/0x10
[  116.620539][ T9162]  ? __pfx___might_resched+0x10/0x10
[  116.620557][ T9162]  ? fb_get_color_depth+0x120/0x250
[  116.620572][ T9162]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  116.620618][ T9162]  ? __pfx_bit_clear+0x10/0x10
[  116.620636][ T9162]  __fbcon_clear+0x603/0x780
[  116.620654][ T9162]  fbcon_scroll+0x48b/0x690
[  116.620672][ T9162]  con_scroll+0x45c/0x690
[  116.620689][ T9162]  do_con_write+0x5560/0x8280
[  116.620707][ T9162]  ? call_rcu_tasks_generic+0x400/0x920
[  116.620730][ T9162]  ? __pfx___mutex_lock+0x10/0x10
[  116.620747][ T9162]  ? __pfx_do_con_write+0x10/0x10
[  116.620763][ T9162]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  116.620784][ T9162]  con_write+0x23/0xb0
[  116.620800][ T9162]  n_tty_write+0x41c/0x11e0
[  116.620823][ T9162]  ? __pfx_n_tty_write+0x10/0x10
[  116.620842][ T9162]  ? rcu_is_watching+0x12/0xc0
[  116.620858][ T9162]  ? __pfx_woken_wake_function+0x10/0x10
[  116.620874][ T9162]  ? kfree+0x24f/0x4d0
[  116.620891][ T9162]  ? file_tty_write.constprop.0+0x6ef/0x9b0
[  116.620908][ T9162]  ? __pfx_n_tty_write+0x10/0x10
[  116.620927][ T9162]  file_tty_write.constprop.0+0x504/0x9b0
[  116.620946][ T9162]  vfs_write+0x7d0/0x11d0
[  116.620960][ T9162]  ? __pfx_tty_write+0x10/0x10
[  116.620976][ T9162]  ? __pfx_vfs_write+0x10/0x10
[  116.620989][ T9162]  ? find_held_lock+0x2b/0x80
[  116.621009][ T9162]  ksys_write+0x12a/0x250
[  116.621023][ T9162]  ? __pfx_ksys_write+0x10/0x10
[  116.621039][ T9162]  do_syscall_64+0xcd/0x4e0
[  116.621057][ T9162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.621070][ T9162] RIP: 0033:0x7ff23eb8eba9
[  116.621080][ T9162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.621093][ T9162] RSP: 002b:00007ff23fa81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  116.621106][ T9162] RAX: ffffffffffffffda RBX: 00007ff23edd5fa0 RCX: 00007ff23eb8eba9
[  116.621116][ T9162] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000009
[  116.621125][ T9162] RBP: 00007ff23ec11e19 R08: 0000000000000000 R09: 0000000000000000
[  116.621133][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.621142][ T9162] R13: 00007ff23edd6038 R14: 00007ff23edd5fa0 R15: 00007ffdceaa77a8
[  116.621154][ T9162]  </TASK>
[  116.621821][ T9162] Kernel Offset: disabled

VM DIAGNOSIS:
00:42:28  Registers:
info registers vcpu 0

CPU#0
RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608ce0 RDX=ffffffff8e2977c0
RSI=ffffffff81608d28 RDI=ffffffff93dbefe0 RBP=0000000000000000 RSP=ffffc90000007fd0
R8 =0000000000000001 R9 =fffffbfff27b7dfc R10=ffffffff93dbefe7 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81608d29 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d66b3000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00005555914895c8 CR3=0000000032d88000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fefef800 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000008000020
Opmask04=00000000ffffdfff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f1eae07ab0 000055f1eae07ab0
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f1eade8c60
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f1eade1730
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ea63f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff0000000000ff
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c4dd54c6823 73730c4dd54c6823
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737332 73730c4dd54c6873
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0048544150564544 0000000000000021 0000000000000030
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f1eaddcc40 000055f1eade6cd0 0000000000000041 0000000037316c6c
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608ce0 RDX=ffff88801deba440
RSI=ffffffff81608d28 RDI=ffffffff93dbefe0 RBP=0000000000000001 RSP=ffffc900006a0fd0
R8 =0000000000000001 R9 =fffffbfff27b7dfc R10=ffffffff93dbefe7 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81608d29 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d67b3000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f3ea604883c CR3=0000000054824000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000400001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 687465760001000c 0012002800000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb8aaed96
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb8aaed96 00007ffeb8aaed9c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42a8a12e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42a8a12e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42a8a12e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42a8a12e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42a8a12ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42a8a12fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42a8ba74a8 00007f42a8ba74a0 00007f42a8ba7498 00007f42a8ba7470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42a970d100 00007f42a8ba7460 00007f42a8ba0004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f42a8ba74b8 00007f42a8ba74b0 00007f42a8ba74a8 00007f42a8ba74a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff85648fb0 RDI=ffffffff9b1170a0 RBP=ffffffff9b117060 RSP=ffffc90004aef098
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000036313954
R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3622e66 R15=dffffc0000000000
RIP=ffffffff85648fd7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007ff23fa816c0 ffffffff 00c00000
GS =0000 ffff8880d68b3000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000002000 CR3=000000004e2b9000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000e58e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000020100001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff23fa80bf0 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdceaa7cb6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdceaa7cb6 00007ffdceaa7cbc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff23ec12e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff23ec12e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff23ec12e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff23ec12e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff23ec12ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff23ec12fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608ce0 RDX=ffff88801ded0000
RSI=ffffffff81608d28 RDI=ffffffff93dbefe0 RBP=0000000000000003 RSP=ffffc900006f8fd0
R8 =0000000000000001 R9 =fffffbfff27b7dfc R10=ffffffff93dbefe7 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81608d29 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d69b3000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ff23edd7dac CR3=0000000063acc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff69716216
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff69716216 00007fff6971621c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb247e12e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb247e12e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb247e12e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb247e12e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb247e12ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb247e12fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732064616200786c 6c36313025783000 657a697320780004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5605414447005d49 49131415005d1500 405f4c56055d404d 5751560541444700
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b2c744bd65e4ea87 5735839fce0d5abe be613cdd4b02a1d0 c018f9e2e1660c9c
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0baa83cd47a87ce 2ec9463576f3a66b d613e4cae77e5b12 bef17bf25e120390
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1887e358dc9746d7 6d6c84679f5aff63 6bee68a462847ff8 9d20e0736bb7714d
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c5faab6a13cab7d3 bb282fb0ae1efc83 901d17f17e04fa7b 3b8422994c23c57d
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000