last executing test programs:

3m12.164168201s ago: executing program 32 (id=31):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = fsopen(&(0x7f0000000a00)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001700)='privkey_serial\x00', &(0x7f0000001800)='4\x00', 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000002180)={'ipvs\x00'}, &(0x7f00000021c0)=0x1e)
r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x0)
fchdir(r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353d, 0x1}}, 0x20)
r6 = dup(r4)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r6}, 0x18)
unlink(&(0x7f00000001c0)='./file0\x00')
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x41402)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r8, 0xab00, r10)
setsockopt$inet6_int(r7, 0x29, 0x3, &(0x7f00000040c0)=0xcf4d, 0x4)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000100)=[0x0]})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000003200)={&(0x7f0000002200)="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", 0x1000})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000003280)={&(0x7f0000003240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000003300)={0x6, 0x0, &(0x7f00000032c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

2m53.114745807s ago: executing program 33 (id=53):
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f00000008c0)=[@in_dx={0x69, 0x20, {0xc2b8, 0x4}}, @in_dx={0x69, 0x20, {0xc9ca, 0x2}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x64, 0x18, {0x6, 0x12aa}}, @wr_drn={0x68, 0x20, {0x0, 0xfffffffffffffff8}}, @wr_crn={0x67, 0x20, {0x3, 0x10000}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0x23f, 0x4}}, @cpuid={0x64, 0x18, {0x6, 0x7}}, @nested_load_syzos={0x136, 0x40, {0x1, 0x7, [@wr_crn={0x67, 0x20, {0x0, 0x40}}]}}, @nested_create_vm={0x12d, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x5, 0x82b}}, @rdmsr={0x66, 0x18, {0xb65}}, @nested_amd_invlpga={0x17d, 0x20, {0x7000, 0xe188}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x9d, 0x7, 0x7, 0x3}}, @nested_vmresume={0x130, 0x18}, @nested_amd_vmsave={0x183, 0x18}, @enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_amd_set_intercept={0x181, 0xfffffffffffffe61, {0x3, 0xfff, 0x5058}}, @nested_create_vm={0x12d, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0x89e6, 0x2, 0xffff}}, @set_irq_handler={0xc8, 0x20, {0xc2, 0x1}}, @code={0xa, 0x61, {"0f0747889ff4b70000640f01cbc461797e0c8466baa10066b8002066efb98e0900000f32b930060000b803000000ba000000000f30660f28a800200000266567f3afb9800000c00f3235010000000f30"}}, @wr_crn={0x67, 0x20, {0x2, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x6d, 0xfffffffffffffffe, 0x81, 0x273b0ebb}}, @nested_vmresume={0x130, 0x18, 0x3}], 0x3e9})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000180)=0xffffffff)
ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r0, 0x4068aea3, &(0x7f0000000700))
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
mount$9p_virtio(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000000)=ANY=[])
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x49, &(0x7f0000000080)=0x474c, 0x4)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$KVM_GET_SREGS2(r0, 0x8140aecc, &(0x7f0000000400))
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x3)

2m36.988349957s ago: executing program 0 (id=359):
rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0)
rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x1, 0x0)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0x5, 0x9}, 0x5}, 0x20, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x1, 0x1}]}, 0x10)
write$binfmt_misc(r4, &(0x7f0000000100), 0x6)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r3, &(0x7f00000097c0), 0x400000000000199, 0x24008090)

2m36.409353076s ago: executing program 4 (id=369):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0)
ioprio_set$pid(0x2, 0x0, 0x6000)
syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x400aee2, 0x2, 0x1, 0x317}, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000000))
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0xc0085666, &(0x7f0000000080)={0x2, 0x4})

2m36.321957885s ago: executing program 4 (id=371):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0})
r3 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x8)
connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
r6 = accept$inet(r0, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r7}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4, 0x0, 0x0, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r7, r8, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r7, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r6}, 0x20)
sendto(r6, &(0x7f0000000700)='a', 0x1, 0x11, 0x0, 0x0)

2m36.004039523s ago: executing program 0 (id=375):
syz_open_dev$video4linux(&(0x7f0000000040), 0xffffffffffffffff, 0x2c00)
capget(&(0x7f0000000480)={0x19980330}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe, 0xfffffffd}]}}]}, 0x38}}, 0x20000800)
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000180))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07032d0c"], 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x119)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r8)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r9 = socket$kcm(0x11, 0x3, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x6, 0x7702, 0x5, 0xc48, 0x7}, 0x4, 0x9}, [{0x4, 0x1, 0x8, 0xa4, 0x800, 0x1ff}, {0xeff, 0x1000, 0x0, 0x80000000, 0x1, 0x4}, {0x3, 0x4, 0x8, 0x400, 0x1000, 0x2e}, {0xfffffff9, 0x161185d4, 0x5, 0xc0000, 0x3, 0x4}, {0x3ec8, 0xc9a, 0x1000, 0x1ff, 0x80, 0x8}, {0x6, 0x6, 0x2, 0xffff, 0x8, 0x8}, {0x80000001, 0x4, 0x9, 0x3ff, 0x7, 0x6}, {0x9, 0x2, 0xffffff2c, 0x7fff, 0x6, 0xa}, {0x7, 0xf, 0xff, 0x200, 0xc, 0x7b55}, {0x4, 0xb13, 0x7, 0xfc9, 0x3, 0x4}, {0x3, 0xb25, 0x7f, 0x6d49, 0x67, 0x10000}, {0x5, 0x8, 0x1, 0x99, 0x5, 0x7}, {0x10, 0xffffdc2c, 0x4, 0xfffffff7, 0x6, 0xc23}, {0xa9b2, 0x7, 0x7, 0x1, 0xd, 0x4}, {0x9, 0xa, 0x5, 0x9, 0xffffff01, 0x200}, {0x2800000, 0x8, 0x1000, 0x0, 0x9, 0x2}, {0x2, 0x9, 0x2, 0x0, 0xf2, 0x9}, {0x9, 0x5, 0x6, 0x6, 0xbe, 0xfffffffa}, {0x1, 0x66000, 0x8, 0x8000000, 0x1, 0x1}, {0x4, 0xb52, 0x4, 0x9d4, 0x8, 0x1}, {0xffffffff, 0x101, 0x86, 0x7f, 0x3da2}, {0x6, 0x9, 0x2, 0x5, 0x80, 0x4}, {0x1, 0x2, 0x6, 0xfff, 0x3, 0x3}, {0x619, 0x4, 0x5, 0xc00, 0x3}, {0xc, 0x5, 0x1, 0x6, 0x1, 0x96}, {0x1, 0xff, 0x632, 0x3, 0xc0000, 0x8ab}, {0x4, 0x4, 0x2, 0xe, 0x7f, 0x8001}, {0x10000, 0x280, 0x1a3, 0x7, 0x2, 0x5}, {0x1, 0x7, 0x6da5, 0x3, 0xfa1d, 0x1}, {0x789a, 0xa, 0x2, 0x0, 0x68, 0x6}, {0xe40b0000, 0x3f2e080e, 0x10001, 0x3, 0x9, 0x2}, {0x7, 0x3, 0x5, 0x81, 0x7298, 0xa}, {0x8, 0x6, 0x9, 0x7f, 0x5, 0x9}, {0x4, 0xa, 0x8, 0x606, 0x9, 0x9}, {0xfffffff9, 0x100, 0x401, 0x2, 0x3, 0x6}, {0x87ac, 0x7, 0x81, 0x7e09, 0x1, 0x5}, {0xebf, 0x3, 0x62da92d0, 0xa, 0x7, 0xd}, {0x5, 0x9, 0x7, 0x1, 0xffffffff, 0x6}, {0x7f, 0x101, 0x3, 0x9, 0xfff, 0x5}, {0x7, 0x2, 0x0, 0x6, 0xcd, 0xa53}, {0x1, 0xfff, 0xc66, 0xffff, 0x9, 0x7}, {0x4, 0xfff, 0xdf4, 0x4, 0x1, 0x80000001}, {0xff, 0x9, 0x5, 0x10001, 0x7f, 0x5}, {0xb35, 0x84c, 0x4, 0x388d, 0x80000001, 0x518}, {0x4, 0x86d, 0x1ff, 0x81, 0x2, 0x3}, {0x2, 0x7, 0x200, 0x7, 0x2, 0x40}, {0x1, 0xff, 0x7, 0x6, 0x4, 0x1}, {0x80, 0x34, 0xe, 0x1, 0x9, 0x2}, {0x3, 0x8, 0x8c7, 0x2, 0x8001, 0x9}, {0x80, 0x7fffffff, 0x4, 0x6, 0x401, 0x3}, {0x8, 0xc, 0x1ff, 0x80000, 0x7fffffff}, {0x3, 0xa, 0x6, 0xffff2fb8, 0x0, 0x6}, {0x9, 0xa, 0x7, 0xb, 0x3, 0x400}, {0x39, 0x7eca, 0x7fffffff, 0x9, 0x3, 0x2ab8}, {0x9, 0x5, 0x5, 0x1, 0xa5c, 0x7}, {0x2, 0x2, 0x2, 0x7f, 0xe82, 0x7fffffff}, {0xff, 0x4, 0xfffff5d5, 0x0, 0xff, 0x8a0d}, {0x7, 0x7, 0x7, 0x7fffffff, 0xfffffd39, 0xfffffffc}, {0xffffffc0, 0x6, 0xe, 0x0, 0xffffffff, 0x7}, {0x5, 0x1, 0x2, 0xa, 0xc, 0x9}, {0x2, 0x3, 0x2906, 0xef8f, 0x8, 0x3}, {0x9, 0x3, 0xb48, 0x3ff, 0x8, 0x5}, {0x4, 0x0, 0x80000000, 0xe, 0x401, 0x1}, {0x6, 0x8, 0xe, 0x100, 0x87, 0x4}, {0x5, 0x1, 0x1, 0x80, 0x2}, {0x1, 0x3, 0x8, 0xfffffffa, 0x3, 0xe}, {0xfffffffa, 0xbea6, 0x2, 0x2f26, 0x1fc, 0xc}, {0x8, 0xba1, 0x0, 0x8e, 0x11a, 0x1}, {0x7, 0x4, 0xffff, 0x6, 0x8, 0x3}, {0x2, 0x3, 0x5, 0x3, 0x3, 0x4}, {0x9c5, 0x0, 0xfffffffe, 0x2, 0x6, 0x80000000}, {0xd1, 0x2, 0xf, 0x80000001, 0x7f, 0x9c09}, {0xffffffff, 0x4, 0xffff6890, 0x3, 0x2, 0xfff}, {0x800, 0x6040ea3, 0x80000000, 0x8, 0x3, 0x8}, {0xfffffff8, 0x1, 0x6, 0x7, 0x8, 0x2}, {0x4, 0x2, 0x1000, 0x13, 0x4, 0x3}, {0x5, 0x10000, 0x7, 0x0, 0x5, 0x1ff}, {0x80000001, 0x8c1, 0x5, 0x8, 0x7fff}, {0x7, 0x6, 0x7ff, 0x9, 0x3, 0x8}, {0x3ff, 0x7, 0x7ff, 0x80000000, 0x3, 0x9}, {0x0, 0x6, 0x7, 0xa8e, 0x8, 0x2}, {0x800, 0xd, 0x75, 0x8, 0x3, 0x7}, {0x88, 0x0, 0x4, 0x460, 0x7, 0x5}, {0xa327, 0x51f, 0x9, 0xa, 0x4, 0xfffffff8}, {0x7, 0x12000000, 0x10001, 0xfffffffc, 0x7, 0x3}, {0x5, 0x0, 0x4, 0x0, 0x2, 0x100}, {0x5, 0x2, 0x57, 0xe6, 0x3, 0x6}, {0x6, 0x5, 0x10, 0x63a6, 0x8, 0x907}, {0xfffffffa, 0x9, 0x5a, 0x1, 0x80000000, 0xfffffffa}, {0xffffffff, 0x7fff, 0x8, 0xffffb241, 0x7, 0x5}, {0x1, 0x6f9, 0x0, 0x6, 0x3, 0x5}, {0x10001, 0x0, 0x6, 0x4, 0x0, 0x5}, {0x0, 0x7, 0x1, 0xae6, 0x3, 0x100000}, {0x4, 0x1, 0x4, 0x7, 0x3ff, 0xfffffffc}, {0x8000, 0x3f, 0x580, 0xe, 0x401, 0x8}, {0x6, 0x9, 0x5fbd780a, 0x4, 0x5, 0x4}, {0xfffffeab, 0x5, 0x6, 0x101, 0x0, 0x1000}, {0x4, 0x81, 0x4, 0x9165, 0x7ff, 0x6eb}, {0x4, 0x2, 0x7, 0x9, 0x1, 0x7f}, {0x7, 0x4e, 0x8, 0x3, 0x6, 0x6}, {0x5, 0xffffff7f, 0xfffffffd, 0x3, 0x2, 0x1}, {0x81, 0x10001, 0x2, 0x8, 0x0, 0x200}, {0x7, 0x7ff, 0x2, 0x80, 0x10001, 0xc}, {0x2, 0x200, 0xc, 0x0, 0x3823, 0x8}, {0x9, 0x80, 0xffffffff, 0x0, 0x3000, 0x9}, {0x1, 0xfff, 0xd, 0x8fd, 0x0, 0x766c}, {0x3, 0xffffffff, 0x3, 0x9, 0xfffffffb}, {0x1, 0x6, 0x0, 0xfb, 0x1347, 0x1}, {0x2, 0x4, 0x2, 0x6, 0x9, 0xfffffffd}, {0x76, 0x9, 0xe, 0xeca8, 0x6}, {0x68c9, 0x6, 0x6186, 0x8, 0x3, 0xff}, {0x0, 0x1, 0x2, 0xffffff61, 0xffffffff, 0x9}, {0x0, 0xc, 0x4, 0x3, 0x8, 0x8}, {0x5, 0x2, 0x7, 0xa6, 0x6, 0x1}, {0xfff, 0x3, 0xa45a, 0x7, 0x4, 0x6}, {0x1000, 0x7, 0x0, 0x8, 0x5, 0x5}, {0x9, 0x3, 0xfffffff8, 0xa, 0x2, 0x4}, {0x6, 0x2, 0xffffffff, 0xa, 0x10000, 0x5d4}, {0x4, 0x9, 0xd9b, 0x8, 0xbf, 0x100}, {0x6, 0x3, 0x29b, 0x4, 0x6, 0x6}, {0x8, 0x861, 0x10, 0x8, 0x2, 0x6}, {0x8, 0x81, 0x1, 0x1, 0xfe5, 0x5}, {0x6, 0x4, 0x5, 0x392f, 0x8}, {0x7fffffff, 0x16db, 0x7f, 0x1, 0x4, 0x3}, {0x4, 0x9, 0x8, 0x0, 0x10, 0xa}, {0x1ff, 0x9, 0xd0, 0x101, 0x3, 0x7}, {0xb, 0x6, 0x6, 0x7, 0x0, 0x3}, {0x291, 0x3b1, 0x8000, 0x8, 0x60, 0x3}], [{0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x2}, {0x5}, {0x1, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x2}, {0x4}, {0x5}, {}, {0x1}, {0x1}, {0x1}, {}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {}, {0x2}, {0x1}, {0x1}, {0x2}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x6, 0x1}, {}, {}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x2}, {0x2, 0x1}, {0x2}, {0x5}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0xcd3dbd4a777381a1, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r9, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r7, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885)
socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

2m35.853530612s ago: executing program 0 (id=378):
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
preadv(r0, &(0x7f0000001240)=[{&(0x7f0000000040)=""/165, 0xa5}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/82, 0x52}, {&(0x7f0000001180)=""/164, 0xa4}], 0x4, 0xffff, 0x2)
preadv(r0, &(0x7f0000001500)=[{&(0x7f0000001280)=""/167, 0xa7}, {&(0x7f0000001340)=""/6, 0x6}, {&(0x7f0000001380)=""/97, 0x61}, {&(0x7f0000001400)=""/251, 0xfb}], 0x4, 0x7fffffff, 0x8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001540)={{0x1, 0x1, 0x18, <r1=>r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000001580), &(0x7f00000015c0)=0x4)
ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000001640)={@msf={0x5, 0x2, 0x8}, 0x1, 0x2, &(0x7f0000001600)=""/2})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000001680)=0xc1, 0x4)
fcntl$setlease(r3, 0x400, 0x2)
r4 = dup3(r1, r2, 0x80000)
ioctl$int_in(r4, 0x5421, &(0x7f00000016c0)=0x4b)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, 0x4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x20040040)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000001800), &(0x7f0000001840)=0x4)
ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000001880)={@loopback, @remote})
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000018c0)={<r5=>0x0}, &(0x7f0000001900)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000001940)={<r6=>r5, 0x2}, &(0x7f0000001980)=0x8)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000019c0), 0x4000, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r2, &(0x7f0000001a00)={0xd0000004})
r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001a40), 0x181400, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000001a80)={r5, 0x6, 0x4}, &(0x7f0000001ac0)=0x8)
r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001b00), 0x80000, 0x0)
getsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f0000001b40), &(0x7f0000001b80)=0x4)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000001bc0)={r6, 0x1000}, &(0x7f0000001c00)=0x8)
add_key(&(0x7f0000001c40)='rxrpc\x00', &(0x7f0000001c80)={'syz', 0x1}, &(0x7f0000001cc0)="4f23cf3fd59e339279ca6a9a298c9f50ffd753cbec5dd95188880bf8b563eeb7a27bd280bf779e5e616d257b1c8dcdbd", 0x30, 0xfffffffffffffffd)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x40, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_LINENO={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4042)
ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000002080)={&(0x7f0000002040)=[{&(0x7f0000001e00)="9b055d43ad83cb2feb79a709cba88382aca1edcc86985879c75ff18975cfaaeb9e0ad61ef81e049e104bd273", 0x2c}, {&(0x7f0000001e40)="9fa920e9bafb418dfd7a154fc277812320e49b30e22e9588163947e33b76bc51a3a7d5405206169712ad8af216d6140cc25e9294cec66118a54cb6245536f5d4e7cf85e542204fc26774f3aa4170dd772fe059bf134edff9c3c66eee55454e6bc1cdaba4294f70b388c304395d2bf61e289d7ce7b271d195812b60254408775904bd591d8aac58aea6f440", 0x8b}, {&(0x7f0000001f00)="fc96e831733f7e61c747bdd3d189a271080d363a1965c9cbf47ab1d63cbc55bdaa4be0f4166bfbea02b5def58f1d506a5d96b8d09becfaedc3815842846bbdf1ae2085dd233c7b682632a4a4d97d1649ca47fd54d537cf116c9fdd0d590cde511115383522c0628f37bf733054fd053e16d185747585476578a5d5081e06e759dca4f15ea85b1c736aa0e3d39a540781f7d457d32230a25abe12e0e70e485d7351d11d8a83a177408ee21e775d32b3b8b847", 0xb2}, {&(0x7f0000001fc0)="aec5a87b8bbc1a72b699383fd93c32f2d03fa8b364940d9302cebfd5a18cc5831b1d3010bcddc52e260b1a4e4a8089ec5f43bfdc4aff17929227e413266e4b6dbbbd51a5630e4b96fb4ed0a8c858dc112509e885aa362e00391194a0b4396404f3ff", 0x62}], 0x4, 0xff, 0x0, 0x86, 0x2, 0xff, 0x9, 0x8})
preadv(r3, &(0x7f00000021c0)=[{&(0x7f0000002100)=""/58, 0x3a}, {&(0x7f0000002140)=""/103, 0x67}], 0x2, 0xffffffff, 0x25f)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000002200)={0x0, 0x0, 0x4, 0xc4, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10)

2m35.76894743s ago: executing program 0 (id=380):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) (rerun: 32)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x28044806)

2m35.640875548s ago: executing program 0 (id=384):
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0)
ioctl$KVM_CREATE_VM(r1, 0x40086806, 0x21)
ioctl$BLKTRACESETUP(r0, 0x80186803, 0x0)

2m35.332889128s ago: executing program 0 (id=386):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00')
preadv(r2, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0)

2m35.285471944s ago: executing program 34 (id=386):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00')
preadv(r2, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd7000043500000200f1020000000000000000000000001d1b00000c000f10"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0)

2m35.227773973s ago: executing program 4 (id=388):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x5, 0x9b310f5f, 0x9a64, 0x8002, 0x200, 0xffeffffd, 0x0, 0x0, 0x2, 0x103}}, 0x50)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000200)={0xc, r5})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5})
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r4, 0x3b70, &(0x7f00000002c0)={0x10})
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m35.138924143s ago: executing program 4 (id=389):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0) (async)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}}, 0x4008030)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, r3, 0x537, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x6c, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x773b0b57}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xac}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x131402, 0x1f7)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe8) (async)
r6 = getegid()
fchownat(r4, &(0x7f0000000340)='./file0\x00', r5, r6, 0x800)
r7 = socket$unix(0x1, 0x5, 0x0) (async)
r8 = syz_open_dev$usbmon(&(0x7f0000000a00), 0x7fffffff, 0x3) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002a80)={{0x1, 0x1, 0x18, <r10=>r1, {<r11=>r5, <r12=>r6}}, './file0\x00'})
sendmmsg$unix(r7, &(0x7f0000002b00)=[{{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000540)="7f24a8114116b51c6555c68f3f68569a6dc5e3310b8b1ec61d2b251192b1074aed9172040a1a6731f0979fa32645aa8a8756fff1266629c97fb2de9c2fdac2223cfae82b1850ea1003d41e0ff264e28934e4d03d21ac02a0eba97d79ca9f46b4e9fb69c95e56d568e412674f348870b8c70f972ec3edd86c21117763129361cc962dc6201c78b3daa8d60166", 0x8c}, {&(0x7f0000000600)="1076ac56904e191597020d624706bb48448c7093f9026dc3765de3a988488fc804f6b5844ddf0b98c641951f23e347aa5342c50d5c011e0d14ced22042e1007f21a1672376b07d9a4f6f30daa7455a109a3219a55c3f504ca0033e15b7b23da860b632117391cabfacf5b17669baa0ad2cfe8b242af85322cc264c342fe1a42264aeac55e1945f8e5b2f9b7891daa67176edc76962c1513ef82767bad9a783fabfe6b411892abe2f97c0373d7d664b2329c710b5020d007ff8cc8ea7c7d8608bbe99a249062ea73033ab06bd2f25b8aa519a1456f123d29676dc2b18eab0d90e7d05fa", 0xe3}, {&(0x7f0000000700)="f87149674ed76d2cf7f5fd3206cb9168f1aefe70747382ddb83c928559f946ba67d12c2552749a392b56f07a5c94ecaa5974e4f1c5b00d203f5359f9b537ed49633acc546d546d87fef36839a94589df630a9f5b86dc9556e590ce1c0c5006c87ba28875d427ee9e5d", 0x69}, {&(0x7f0000000780)="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", 0xfb}, {&(0x7f0000000880)="26fce22c6d7f7c554a5f773b043f826dcdb851f259e838980a1729a817d81167a6d0bb916d79454d02c5828bb79490aaba2a16f762986f74ba247babae3bda6ffb0493b3c1eb407f41e95d5e83069d5d9356fd946be8a3759e7e7b126021fa23fe3b6640759c497b49c8afc617d58d218d7923849cff2640fc0ce08c2fa5ca4a10f367037fd4bb6d5b3063202d02057f9bb7382248eaac3ff331000370a30af241e07fe007b2bc3ac01b5cdbe42e967709", 0xb1}, {&(0x7f0000000940)='*]', 0x2}], 0x6, &(0x7f0000002ac0)=[@rights={{0x18, 0x1, 0x1, [r4, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r5, r12}}}], 0x38, 0x40010}}], 0x1, 0x4000004) (async)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x2000041}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x20, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa, 0x5d}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x800)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c80), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002cc0)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r13, &(0x7f0000002dc0)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)={0x6c, r14, 0x404, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2e}, @val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4091}, 0x20000001)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r10, 0xc0189373, &(0x7f0000002e00)={{0x1, 0x1, 0x18, <r16=>r2, {0x6}}, './file0\x00'})
mount(&(0x7f0000002e40)=@md0, &(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)='exfat\x00', 0x3420082, &(0x7f0000002f00)='aa\x00') (async)
pwrite64(0xffffffffffffffff, &(0x7f0000002f40)="15f6b4a103adec3f7538e2fe22b3ae808c1f8168147560e57c1fa4af68bfb7feb1bf4af45450bf28d25d3b11bfa69bc99cc5f4faad1ab9c08664700069328558b9fd35bf716d818a046d8349525400979e1546a0a9b9c32ca264cf3fa88717", 0x5f, 0x2) (async)
r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003000), r16)
sendmsg$NL80211_CMD_ABORT_SCAN(r10, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x1c, r17, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r15}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x84)
setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000003100)=0x1, 0x4) (async)
syz_open_dev$sndpcmp(&(0x7f0000003140), 0xb805, 0x2a8342) (async)
mount$9p_unix(&(0x7f0000003180)='./file0\x00', &(0x7f00000031c0)='./file0\x00', &(0x7f0000003200), 0xa00002, &(0x7f0000003240)={'trans=unix,', {[{@cache_loose}, {@access_client}, {@access_user}, {@loose}], [{@subj_role={'subj_role', 0x3d, 'aa\x00'}}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, r5}}, {@fowner_gt={'fowner>', r11}}]}}) (async)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r16, &(0x7f0000003440)={0x11, 0x10, 0xfa00, {&(0x7f0000003300)}}, 0x18)

2m31.977248796s ago: executing program 4 (id=403):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000300)=0x4)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000080)={[0x4, 0x2, 0x3, 0x2, 0x7, 0x5, 0x0, 0x8001, 0x0, 0x2, 0x1, 0x7fff, 0x6261, 0x0, 0x4, 0x28c38997], 0xa000, 0x20004})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='0fc5:1227:b\nlm', 0xe) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async)
syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000380)={0x22340200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000000c0)={0x1, @sliced={0xffff, [0x4, 0x8a, 0x7, 0x4, 0x1, 0x5, 0x6, 0x5, 0x1, 0x9, 0x7, 0xaa, 0x3b1d, 0xffff, 0x49f9, 0x4, 0x4, 0xff, 0x2, 0x101, 0x1b7, 0x0, 0x2, 0x1, 0x0, 0x7be6, 0x4, 0x7, 0x0, 0x6, 0x4, 0x0, 0x40, 0x65f6, 0x6, 0x93b, 0x0, 0xff, 0x4, 0x4, 0x8, 0x9, 0xc, 0x8, 0xf, 0x5, 0xe717], 0x3}})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10)
getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) (async)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000082}]})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000003b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x2038, 0xe, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x234, 0x3, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5f, 0x6, 0x1, 0x0, "a7728156214456816fc730e6900d0d4edf51066b8727e72ea36ad7884ba09758c378c4d9370358f8caa26f4d2f3162c1dc14b8ebc1eb382dba589cc87a8e612d08ab785c12caa85ca60e1fcef5920bdea5b1d4df24ba5271dd3520"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xef, 0x6, 0x1, 0x0, "927fc144d677233c548a9c628e3e3baea190446aea53e683c8f952ed7dc847cc77328a2a31218a3bfb06e7845946c9a7ad36308ed4aec24b045f26b2719e87b137854534debeb8cd0c82ee9a3571a0af95e56d9ee0f71c2dd5a6b0cbcd670902affa539c0e674b05bc719897767d729b2772a04ee194682d437e3c5c0f25d474635b2b023d99a7cee3e20fe701c9b7a734788c6d4bcd1a98d78b1036e0157ba9f29e17b81a4d95d7ae133762ed9b833fb8e6e2d4561d5a3d66c36617d680d06ee07dcfb8ae4b0af4d9cb04283052de9291fc18e61a0ac7b749feb3ffe292cf250a738808c379eb25f7332b"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x9c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x76, 0x1, "e42bcab3d134c7f8b33414cf37d8b8294a925ff61af0e3011f49f7d64dc948f5c9f459b9a79ddda6b3a47aecc296f5836077338186b237894a8261dbd538d0a1c388b4f68e0b64c465cfcc55f8e21eeaa65bc1feaa11f61cf4907ecc41444a0f367f6256fc7840c6f7ea0a6c075fa0c40391"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1ddc, 0x3, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xc0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x40}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}]}}}, @NFTA_SET_ELEM_DATA={0x80, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x1, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffff3138}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x284, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xd, 0x1, "29ee39d55894a9e4b9"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xb5, 0x1, "6a94b3b8c0080a623f693fad45d04e6d07d066e8498cb164f9aedc294d4687646744fc5710acc7404a8da8fa4a6aaa1840ebe61fc8a15c122b4f3332f446058561e39d166848d534160ca7981efeb94dd32140bc23aded2c74cf58658ba7f7cf08583e0dc09b6b5ffff3f711b00ea5b5eb7f77bcaa393c1aa0f4a998d78b31b7cf493315b8f7b91c3d93564c5fefc4e82221fdc29ce0e66950fae2b8ceeb1bef4e883e23cba17c5fc8c17ec2a26f7e5890"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb0, 0x1, "a41d1f1e0200bb0b3262edef84ff6206a85e2f7ac41f2878f99f6cdeae4c01bd00377011b8a0ea289bafd4f669003695023368f5c9af228ed4553fd654748f5c55d9ac1c268d5a78bc9e753ceeba6557be8ee61f8a9912c38a997100ca95dd9967353ad1ba0f267303f49aad11ede7ae874115996d54c360c9ded4c3377a0c7253a769abb7db7d436532f22824f4f36d081366b9185303090084e134411b875652d7c34067715be449f2c802"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}]}, {0x11d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0xd0, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xf7}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xfffffff7}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x25}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x90b}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x1008, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY={0x50, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY_END={0x28, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x15, 0x1, "2bfc7d41f46c421f111b6a9dabcb2d2d14"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0x7c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0xd0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x96, 0x1, "eb89ac3f107455c538926b1ff46c864d1048598872aa1621c3f8c678667e8380e5616bd8cc9cd1e53eb3c22df547e7de6b205961c07605992ad07b627fffa23182535691e2ba22b400cec1cf77296c5cb3c824e2c1c63598b2ee0aeb15fc9a8dc9e8b99a099963907bef72fffb8e550302f3a528f82fc4b565bb2ef829b002484adb58eee7b3ef79d748f7109f92244e43bc"}]}, @NFTA_SET_ELEM_EXPR={0x118, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0x104, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xf8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd3, 0x1, "dfcfd7ea3d3503aafdc5a4f30cc8c7004539ea77b2f68d46455dcbd0832e04d7d4b49f80eae4a24354d940979fd3b79b51971fe1ddc322e520500ee058f234e9612e56338a8a95ca5f41f0a3b92d4b3cadc0b6a298ad30d5bf631699aa675a90c5539330d699ffefcc2d21c5ca837f806d924fe4c2b28a77a0f276f1f6710e0ded53081fb6d88d952e1f7662bca589acf24c888899b151bb5fd28f326c27b6e1c61c7affe4d61c5ef975b8c793c98daffad6aba8fae309632df93d542dd0468c8b461810eea9c842a028f08b14705f"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c4, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x7}]}}}, {0x4e4, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4d8, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0x54, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_CMP_DATA={0x2bc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4f, 0x1, "a20df225498b4ac03daee80cfde1d1920c330b5344209fba69ea13fb795878dbdaf5c915b869d210958c604174d2d90205bf0f3e131ad775e97a0985adb543f1a3ad0911d7670f46c6210d"}, @NFTA_DATA_VALUE={0xe4, 0x1, "d860eba83013088adf53657d6050c82a07cdddee395206902507204c13fb47cc5e1f9cdf6bf650404f857511c03541003a0454fbf489e330f32ab4c4a166449a69478412ff5ca323baff44535abeea3b5f304d52198a0e99571d26a61da5f1d98d994490a24f0182f54ebf745c6d29b10aa71e77f7a9fda8ab178824cd1b3f46e05d88f5d4e153889c67485b48d4f2ea767e5e834352529f30f72d3f521311e3cbed8f3e33c4bad5f2d7f219d7557c576faf8fa423cec19b1b86af48020f4b7af9417db0de56a9022e51a13a491e7e53c2d5a40175f65e1e8083be62d3e83e2f"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfa, 0x1, "1e78061980e8cf244a7ea3b345584cc187194bf2fdc336290b217e3e2524b05966d14e49a3d3a35d8b68defed4a57f2b8c48d2062059087e93654d9f3f33c74f0fa8aa35c4b77641d32fe12c33ee270e7b17fbb0935e8d0f5e74b61ee4cf04f40bdb805ee90aa3984fd94a980d16c07ebd7b9aa0bfe0da6125ea7e26eb7c3c27d4df657f3fad916bc5d9cd9c9f36779d36b7a1c35ce628c50ce9a7a8fca87918bdc4ba13b306a24e1c3ec0d275e8f9aa86ff4f8bb10eb75a85c790d1f9a00314aad4c7b72114b40bdf91fc71e5efb3a2154636a5bb92e99e1ebfb53926e107663e37d1164b34243aeb4e4881acca11a56254bda51a3c"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_CMP_DATA={0x1bc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "3cdfcd5b5e246da9325925c140735f98a39a8599b33b7b94ae2e4589a1bb08b79059a4f3ec683028487f6bf7a41d"}, @NFTA_DATA_VALUE={0x7e, 0x1, "bf4a149e5d5260925e46aec6524f1e9df3cb00fcdeedc9ecba49ef73b943102444906d16b46d24f6228eaf1360139941f80d5f29a8ded619bb05e3d0712471cb7618e8c0f81b4db0e795592aea83861c1a49dae320055ed3cf0361578a7df5cf230cb1e6df986305ebe6ce8afeb78316493a6c0b11c5d6dbc989"}, @NFTA_DATA_VALUE={0x102, 0x1, "3c362c826080b581f5a1de27683cf083caca48656837f9be1b109bd2d5e0ad785e01433e8b324e697674245ae32a074e55bf0b701c5a00a8b9c5d1c5180a54fc0d2cb98e9b3a501686574a7138cee46cf4c59169fa92c05af06529b6484da05b8ea03b524e390bd9ccd7c0dbe191346f737631990db548c67170df5335340cea4b3929b842937269bbda474ddf81c74e9f70a47a70ac9c036501a3392f304df34272f78d45b0f4e945c2c782d806e34f580cdf7dbf5fa3e9ae98cf82434240cc30201bdb40a38e6977491442452742569b7b0cf39b787936ba8b2da904341c9432dbc8985fbba51db4a965874108a4e04c603485c64417a3b37c519363cc"}]}]}}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x54, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_NEWTABLE={0xd8, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x32, 0x6, "1eca522de870b977e8f3eb3a39316290b2a7fc0d4c30acea808198cd4438a5c2bf84df2cc4838f76460693ca7bfe"}, @NFTA_TABLE_USERDATA={0x68, 0x6, "af46a795d5c28b92ae2f2af59e8f35d5b3ca48f4867758d5564cb57fbb6ef5e627ab1474e68e2ec9448e271e94f3cd80b10996f3787bee453e29d2fa72b1051a5b7f6bd32bb87654ea3376906653d536baa4dc487a4f716e9b8442e8c4bfba48613ec15c"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x15cc, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1590, 0x3, 0x0, 0x1, [{0x13d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @synproxy={{0xd}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x11b4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x13, 0x1, "9c80780577de07517bdf3f3c13b66b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xdb, 0x1, "286fc0efbb93ef957fe15e7436fff4dd0d0ce475dd2d243823811770decf4fcf8cee624427555511f718f9ed98cf93f09b64beef991c882dc761acf951c45f78af4283a82ba6df1910cc7713a73524e8322336cfe7b6f6f792b0dbf5f02235e7b5a2dc213737699dd50672b8b80b9a03735a1aa42711b739a8eff300644da434721370e92ade02b2c0195e451590f562f9ae9b8a1ce4616d398e846e01741c6cb8b9f9bab20800bc7e3bf32ec59f81a988c9ae70947c994253c5442d5997dee33b30db79a02362c1bc2b14fd9fb4b0e2d6c04189fd9464"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "bab068a997ca36755bf660a02cf6c754aec8d0f1aa3d2c5d95531552e5c9b5286af97bf96338553f25a9e6fbdf9db2d8bf208baef7ac00713855c7fc7deabf4b53f5c2b9f8793caf2a71856d424d759eaa802e76d6564081c70ae49ccc08bb8e15b9969321d952eac64521d8058b90feaaa9f6aa8eac7a5ab83fa8b0ec164e58047bfc4435cb3c1ca2e410ac0e3c316890d95cc8fff62e386efa75df42e7fd74084e572e60b2212f72e318dacf5dab4e54b5506fde97c70f76bda6df723a42457c86393bab75e67087be067a3c5c8e0ee0651740a5e2b13f968db69f7257bd242abd4a3610ae239507effdb881008abd1c67e7532e00efd4f43d60b5c7cdc75b26e844556b518428121c36a9489645a21df2d4eac008a906c42b824f02701d1daac0bfe8ea98d5fcf085ef7911d463d2b198c1dca55d8a199e9e58297f88c858b8d93058260a5335952088ea334cd275414b877294ee695fe51226284a6385ac07485534e88f0e4b1bcb7d3fb67030cc454f628687223d9f8efab83549eeb56f005c6a1008d3c10b4f1b38564c763233ba72b48bc9a3cdb0380e9dcaa5c9ee3a694d5798bb2ebbcdba17823e8eb27b7a0d4aa21c728d0bb80d561e48b548fdceb016717b83db367cbf58946620fc38d6a92efdc30481ec406a50cdd1d2844ae6ba634ff9ec868f8f5dfabcaf7ab83a1657aa7b7662efead1654be97291ce6e6c18a37d40aff1ee8155c3ad5669c06245ad9a5df1fb4c55306f0c8d0e302bede4abc1163d9688c02f6be8be9ad113e46e699e60ecd79850b5c00aece3b22610b16df5347f247902f151e4a4353547bf1b1d2be60ea55028915e3284a953a8458c26aaf41e3dcb63c55645b2531e11b83475d839007115eca39f301e63086c999ac6c148c5bedc61634875f598d2fbc774908c0b61bc0845f9611717b6400bc286287c2bac040653f722be7cdf171a6798bb97c32deefcaf83d79fb44f4749409133a4dec3f6c577d1fe2f2f24d44646a878a7c00027fe36efbc6709807c6f553c51a672328f419e8e247bfcdb0d04eddbbf162c4ff01abffd89d2daff97772d4365aed9dc28841f5db47e25b9d03d1cc32268125cd87700653ffba22090ab06dfcbe7d60866e2bdddef7586ca6bbe3acd4ac302bb2048c756bc218730f28f380e2bb3d5709afb2d58a4bec36ee33de32d195449637f144ef62eb2996c03fca2e5036281525f29793bad94dbcd40994b627ffa94b527e6d127f0d995b5c33b2f62f434c124994711dc288eaa30376b3e4a33879eee2349f5ff01a19e75209b547f4dc1e4326c0f3edb1ae9014b02138103d2b0efc09a6e66380a49e6c6429cc76ee010ccacbcfd48cb4f55de6bc0781686e0952a66e5346506cbb665781389b54704e2b7c9d4e909860af5bd55f7afa30faf06323bd55cf1d79dc145a2a4fb3e562817aee77dabe879150c1168b112f13b8e07cb4c6a343c2db3d2c7da01cd0bccd994e496380ef3c0bed362c31cc882af0dc8abda8a5322282dbc46594eb6a5f43199bcee42afd7245179d102e92da68fb9a729376085cc93a38e30543c52aafcd09795f9556e96a3badc09032d65414f8061547c9eb55ae8473ba30cf82d7ef62496382b3ee7163d10ae7366c9a8aa9800542098bceafdd2e615725d57481dac3f6706c367253a47e4a6d7d3bcdfb672ab34cf8a8294a19c0d9f9354f347a0a7adc7cf2c8bfd33bc7dbc9c05d8fbd03c4619113ec1a9a0e7fc6db8e7d75913dc47285be9424797ae7cc14f3773dafd45d4104373d219e26a9d22abfe61b936cc8cdbb236422854149519a15cbd0b94f9eeeb459de42c2fc018c95c59b1f1a425df6dcbc111e2063a5de2f69b20487684739a950c946efeb027c753df337205d45680fb3b1c28e246a32a98545d3b91650b5de8ac0801ad61f72b78687a17700b3d928352bc7fe28011c84701915915cd64e3f36d7056d3d59f5dfc99af33440d37566abb5f5c934a5dce060ecb32fbc8b927515874053dd25f97df65f601b7d64bd5c5bb93ea42a290a983559a3b75370189cb86d7b51c69fa7e12dad05ec5bad42c862fb4fbd04f31e96cd3ed3eaa1fa1427df6135d25239513726040085dc471073daa85d385c976a69df05216a44664e5167e323847984f1a366fd3c85a4b07b942af8310f4fd539e6dae11e3bc097c7b9b4da4a8605e5e7cdfe4f9847a750aba98019a2cf77e15f7351cd1c87884bb09d3b0f576e8d1f1c25a0a24d6907a662b6369f59df509a5e51d4a8ed681b5da88bcd1980eff7f08e9cc3d509b92ba7cba456558f17bc36e0893297b6b52fe1209deed87f8ad9653d8a349cf9d26ef6249792b7c631691a80121196232e352d6e231f40f8185c107a42754c470272c61751593084c2a8f4b309ac9929c90707d750d25405f7de630c1fec0a8453746ce968220f46d59d74603813f3f12ad461c28a925e50fe4178bd4f565006c34cfb5d96ebbde299b35d2097a3b09eaa05d1992a0fa9482a56cdfe903f53970c2e3ae6ba87ea46d802b3e27eef24f8a3a067fd644c54425ad029ce7f361f6b18a6ad04ba8274bd864de1bfa81b8dfc9c1c18f1bf859ab3a14f4eccede0c76e4a4bfac16f215f88c25649340facee5211c658ba99f3683d807922b51e37f03c5a30d908dbffef9ec229599aa458948e49580a6c157299288b1938cca62441b1f91316bddcbf0cf8d330a784a73c49245219a89f7550d9a7b133e59fce1548b670739d3d11e4d1df1c729eba0f8859056d532894a221e95b5ad21bac39914e003a7ce0301c8c9a522df8faf78c28f19bd139b2ac204f276c743f934439d3173841fe59c86e40881785a41e691e3c197fc34eef60732e2c11cfcfacdb26f703cc0c0ec33de4d33e4d7243616623f9e30afa7c36d79f18034c0d77aa95101bf5015440e320505f9c01474dfeb09bae1a0a0d12cac4e42bb8570fcfaf28d5bc2c03c8e33c9cdc67e2d30048a9a8abe31221a2b09a5c395254e3f25757fcab0cd973f6d231ece59224677d65b3199fff562c0cf1f892bdb64a65a4b8012788e3e0ec35aa03a3ec3f1568907c68bc1e7330d93a44c3b3e8ec067b85f25ccd354989a23c087c5ed614baa8f84b9237746702b0d1ce2c28fa2b65b1d71d012b8dd4920231052eccfaf7b0f10781c2a4ded15803302bad8e1ef4fc253b9336852c2912d3fad75e5a3ed81568d58ecfb555cff6356d7f6c8ce7bf389073962e60de6a731bf2996640c9b3a2eebab472b677c020ccd313e6141048e9262bd55f71522e7e467f5765aef99e5ed8d971d7e2b9141d1fe5b6137dc2aea08a42cffb3e16ebb4dd47086061a0921e520a6ce036cc864ac619aa7c569c75b00d29de3749e7ff8a1e5fed9744d413993ce6b639c6dbdff57d146ecf962939d47f47a724225fbf5a7ed2aa06b3153263c0b39667b93316e08d085e9bb33986e2c6a7df39569ce5e18b15351622d54874d8c1cf265c6a239bab7884b316423e424b222af0a07f64a35ce1bac6f818e9ca27eb30a7a5742262db6a3b71344f84103c0a405e78c92093511646e97a3d1bfdcf65d317ddc1654d74ed9366c3bb188fc6acbb2e8dcaae8676a90aac7e61b98e551302502df9377fe07f2b3e0862a30f0dc0d650bc57c5d05b49b34402a0baab172f26ccebaa53ca5f7031f385ee110ac3187cc601b5c04c6f1e3f7e71ce5ac6263e6129096a206b782c3678e39fdca3de11a748172dd05256d4dce86129cac322508b446b33cafa749a96b5265ce76fa6a4915b59d2d0e149ce079f2ff5c54b2bcd3667cfc069b96781ad7eeaeedd89738052bf3d755f1ab96034eb682b1c59f31f5187e549bf17844bbf814f853a2c673019cbd1593397927daa7198b866a5cfa0d53490afd580a04eea4d84ae635f7edffc583099651e98856def6d7354fcb0a872fc7cec09f9cd95d9fac266438773b1b2a05d174b17897d69e24cd875b178023ef292e4cd5f5834d523a6a9c77b5562142dddf28b49a0f59de829001394169f837b3f9dafc90076e73152f79cdfd6aa55abe904cd27b526ce8c326e0389e051d8222bd1ac05a9de7acc6620f6eb39cc5cd20773ed4c5e11827732a732cb6e82946dcfd74e9d256acaf0f8aa12f0ef07b00c9699a21179dc0035bec4bbc039287c74046dfff0d6ffd18551de964f8debb8647eab8547006ff21f2f8cfd3f83d070998bc3c0252463ec9b87edeb2973c1469b6fd4c3dd6771d2f465631e67132d79d0a7a15eb0bbf13d309ad28ce5ed66d4f7944ffa44634a45ad52b71234030547a58b4779f226f7112118e4561b949fe1d99962dd951ef2ac0cd01adb1c4942e81f0a80b2e6800e3080348b2ab0e3a302ef61f7882a41030bcd4c8063ff568619c9a2005566a3dc66d227bd104fae56fdfc44602100df4750517e7ef55c45a9c2237d5e523215489d92474aedca269b7055ecca5812bea47af92e1fbf4c0e4c1c7acb3ee3ddbb794f9ad9d5a6408c34e350b585a7a9d6e8aedd91b3452a1015c49ba6ea53f181abdf9623cfdf7ed8b5ee8e29d4aa5f0f167e5343ac94cc8dff04c1deaf06fd6336e8d5aefc30db513b2887b75c16170a014c4dc552a11d8a0f15b1cf3adf4877fe2709514cc2c50ba478c3b37882987ec3806d36501da8a313ce94c7fdf951d600b9309c204085b465c4752aea6233526bd2795c353e492af617c713487a51d0ce83fb820a47424c631eb9684e2845643a7fd938ab20ea61b8e7938f378828792b40907bbfefe2df42ee4a53071efdec11cbc4458ca9d0f821437ae85e59fea6b94222c7b1f6791df84a1f4ab875dbbf8f3ada7abd0c65cc558e033aba19b05783d811a2e59b14be2269ea7d567884c35961689afd79bce01fb012fe654ea820be29f1d52e931bc465b1bda064120928403801f42759bfd0a0d80a5fd5ea542d89d2d4744a97de98dad10c35cbfb551ee5ae1b7ce1b79f5de598e86f05f93b81d4f244e7d84390153a0bac4b714c49147833d5de0d0d0bed88188d21a36959984048e23bdcaf9b946b884d404d34f9c1c81fd8bd995fc46634ff4048fb1f96973ef76a57376eb21a7191879bd725e1d3b3c2e96ea0715a6fc633b65ac6fed446a16b1aabc5810e5146a07be3798beb72bed8a3579de3e2e816f86991dcf945e4fd32e4b8aba84e60da0aecddb5e378f152b6124d92de4fcbf607549ffdaf05e9e01f6f65957de008df34f00ac2d46ab3635114a206e4e1aac7ec0bfac2bd1c613a3b9925bb4d2813de1c04731f662dff811f9860ca8ad8c586892f1c02962751b5d27f5ce1e1705b40f6c4c4a7f898f8a882f0f43386961aa5559c3b19a9b6de5e7087f1232243d431464e6e16bfc01420a293f82cf253a5e9d5a2969f62dde4e40e57a5bd8bd5b1dc064261dbf2787006939c9ed0993d9a992d66fc474a9830aaadced4ee64a10f8ebcb6ac5f021997d37cbcbd0844e8c1202360c27b2f9de00abd142621657d0ee889e72eed5f7d97d70ea17ab97e34222feb7869ecdb51fc3bff64c398139858bc9c2353f4005ba1c7768f19e6f4c34488911e355817b447754e382c84e52aa2daaf7fa2c843133059b9480a868fdf98f072b42782fb4d8603f3dcc481e9b43489124f1319b0a92e2d0e7115cf8c35596748f452dd1e0cd741a3d74a673398d11fa5d3e791de55b69c905d2c5957bdc5d954317eee58502cd0ca25e68f4834c8849fc2f2a3ae6d003fc71b757ae00253945434b3bcced08e4e2277c28b48c6b967978616a8a88b1e1cf60"}]}, @NFTA_SET_ELEM_DATA={0x174, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc6, 0x1, "0100242eb17d726af22086b956332e7ac598ddec62aa09c8db29698672bbc959a93ee8a286494f0986a22ccdc6ed21eb4340623d09b11332d52f52775bb8a9846f7cde0c93a7e2a55029fba6d2bb5aee6ad1a1c14acfe236c89cd47fcd51e639aa79a9921ddc688a90f44d6103cf55b49eb680a6eace8adef44e0e6810a3691ac89b4ab74651d9b94d126496c563da37e7e0c6ea75b6aa874d1cb3ce2a41c1c5fa5a66111b72cbe1dfd0f544426ba46561f6f9d63f17a18a6ff8ee86445c19697c83"}, @NFTA_DATA_VALUE={0xa7, 0x1, "9608d0ac95f0443491bb37de56c3ccb70e2fca4908a85bfc00fa73bd8ecc6b2a2f3e06fa8c75419dace51add693324d541e5d4296b388bcdffa40f09c42f4607fc8ad8d5eab0e20d528c88533df4b5dccc9d75e07d08cdc9e7aa80e66c75dd2d061f3dce6d5326c65beb4812e109197543e43f87f630e44eca928147b8648ad18ef2f0b69d7878d00b70e517d580b1757ef9bcd116962f0471757c7eae99b52d46c188"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x70}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}, {0x17c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xf0, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", ""]}}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4d}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x12}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x1c}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x7e}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x26}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xb9}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc9}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x85, 0x6, 0x1, 0x0, "4305b389ea8aa9e6e7396542ba21143901bbd65fca4507d9d3dc712b56273084ae25eb31fbfe3fbff5f4e6cd9acca4ff760af601e31fa81964f63f6ff49b175751d9238e814ed2f384c92d73042d5bcab406b60c310e272347feeeee7e5ef768f39eee1a6ba443ae0ea835be09ee531c5a3af1f65b45cbf9e91d38a3b2e0ff8ab6"}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x38, 0x6, 0x1, 0x0, "b6b058ea71cc7b05fc308d065983dc8c4a25b8410ce6311bd20ef89f1d35ce5305e569b0947eb54e827948d78fcdab40d7233bcc"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3738}}, 0x10) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a03000000000000000000010000000900010073797a30000000000900020073797a3100000000fbff00000819014000000000080002400000000038000000160a0101040b000000000000010000000900020073797a31000000000900010073797a30000000001000016700000000000000000000000a7bd5ce5e45cd9abe6f923e0e94"], 0xc0}}, 0x0)

2m31.770669727s ago: executing program 4 (id=406):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffe300000800030000000000080001"], 0x44}}, 0x0)

2m30.628248123s ago: executing program 1 (id=414):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x1c, 0x0, 0x0, 0x0, 0x9, 0x0, 0xff, 0xb, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0xffffffff, [0x2]}}) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x37)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x3, 0x60000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
r3 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1df}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0, &(0x7f00000004c0)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x23456, 0x0, 0x2, 0x1}) (async)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x28a}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_io_uring_submit(r8, r9, r10, &(0x7f0000000980)=@IORING_OP_RECV_ZC={0x3a, 0x7, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0, 0x0, {0x0, 0x0, 0x8001}}) (async)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x64, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x6e8, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80}}}, &(0x7f0000000440)) (async)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r9, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x34, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r11}})

2m30.565434608s ago: executing program 1 (id=416):
r0 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002})
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0)

2m29.294712349s ago: executing program 1 (id=429):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x34}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bonding_masters\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u8=&(0x7f0000001080)=0x8}})
write(r1, &(0x7f00000004c0)='+veth0', 0x6)

2m29.135685288s ago: executing program 1 (id=430):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1887c9f844a66dc0372af740c3a10200000200000000000000fcffffff180f0000786c6c2500000000002020207b1af8ff00000000bfa10000000000000701007ae900f8ffffffb70200000300007f"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
accept4(r0, 0x0, 0x0, 0x80800)

2m28.846884037s ago: executing program 1 (id=434):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys_link\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='sys_link/bus/pci/devices/0000:00:02.0/resource\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r3, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r2, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x309, 0x52}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040004}, 0x24004040)
r5 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r5, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x3, 0xf0b, r5})
setns(r0, 0x20000000)
read(r0, &(0x7f0000000500), 0x3e8)

2m28.793178725s ago: executing program 1 (id=437):
r0 = socket$kcm(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f0000013a004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f0000013a004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x2b, 0x9, 0x70bd2d, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}}, 0x40070) (async)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x2b, 0x9, 0x70bd2d, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}}, 0x40070)
r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000001440), 0x801, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000)
read$msr(r6, &(0x7f0000000240)=""/20, 0x14) (async)
read$msr(r6, &(0x7f0000000240)=""/20, 0x14)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002500010026bd7002ffdbb9250500000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4048854}, 0x40044)
getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000000100))
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/ipc\x00')
setns(r8, 0x8000000)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0xaa00, 0x0) (async)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0xaa00, 0x0)
openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) (async)
r9 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0)
readv(r9, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9)
r10 = geteuid()
r11 = getpgrp(0x0)
gettid() (async)
r12 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc))
r13 = syz_open_dev$midi(&(0x7f0000000e80), 0x6, 0x200)
sendmsg$netlink(r4, &(0x7f0000000f00)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x2}, 0xc, &(0x7f0000000e00)=[{&(0x7f0000000180)={0x9c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, "", [@generic="1f6e3cd419fab1cfdb7c40156c227d32f0ee6c41388b9238d099b52ccc6d9d50b43ca831b868f602051426bda586292a3a45e6fada399cb03344594b4a0694b9e7137d362af4c3c801f1c4e3cf5699cbc1c76ec8677a45647bea817db3136f6dbd4dce4f0f73dd641681757406c0e328fcb981cb6208de50793c78c3838269eca4f6159c023701ff43985bc0"]}, 0x9c}, {&(0x7f0000000480)={0x434, 0x32, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x19a, 0xb0, 0x0, 0x1, [@generic="a2ae7819fdded7c65f72739244a5e14731b8f541eeb667df69030b2fcee55ee646d152c387f70ea65f7786fce95003e80ce9f9d960fec794a9fd7220fb46df83896abbe5ee95c3d375ec1bede456f9706982d76d0784f883f879ad291fb92dfa6c56f3eee1d8d509437ca3383a82651a2e1256aeee92cf1eef270b2e18c88f94eddb6a452efd767520aeca667a0480c348ed97cf5d2cf6a2fa4f1c729c7e20b212", @typed={0x8, 0x3a, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0xd9}, @nested={0x4, 0x150}, @generic="eb7abc17c52728841a6f62bb7caee6d54c0f8a71c7ab8f05678dbd361914988854285e2186617c0cdd25843084a310c329cd8958f8aa00c1a1a0898c664510fe06e86bf034625c3579f58c6a7c6f964468834d2f141a3c9954677014a88d1e9b7e123c8a464418f4c4c609d115f22807732cbed3c359801be7632c73d4144502cb09a75b224831f45491f092023dc743dc15ea412a567a2c1f66f9ad43e0128a2c5785088724a091c75bcde666a22dadf92de9c2f1c225a56bcefffcc4b38f8b71cbce9fe4322cb35011e1a84c9c613d64", @typed={0x8, 0xc, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0x150}, @nested={0x4, 0xea}, @nested={0x4, 0xd5}]}, @generic, @typed={0x94, 0xbf, 0x0, 0x0, @binary="2b1d0040d25272b96f73d5bd2689f8e08261f0cf6ec39d70e3f9c0f194f2eed1725fd39cabee6e7a1f74c76183b18920c6db610ec6bc6970db1fb9fc5f780e73843347a0844c72ac76fd8754aac1ef827b380d3f55f73904b16770089ae3f3b7fcd442ce9261877d1c224b33f1b93bb1966aa05e0848fdd1c04bf13369b6f275b05a8882f63273e34cbb1ad6cdd81646"}, @generic="4e59776419bf697446de2929974931d2cfdbbbff06699593a6c225af86b8ab52294eed12a1e5d5b51e39b84e21bb9fb2b6c383895c3687e2b08fbf6042f09b48b9512140487270493d399a78aa92aa60f12b608d1c43808fee08187bf2975b146fac451f6445276db7cfed", @typed={0x8, 0x10b, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @typed={0x14, 0x11d, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0xdd, 0x0, 0x0, @u32=0x5}, @nested={0x159, 0x13a, 0x0, 0x1, [@typed={0xbb, 0xbc, 0x0, 0x0, @binary="db27f549d042d1114cf702b2dd8b448bc3d6880bd0606c61db59b6118f8df5391e86037a25a1cc278a0b873ebdc3d4c058fe4bb09c520c4e3cab59063a407e9de52588b918ddd5b10a4cb07da1238bea766635e26a53969cfcb0674d3b2b22917f666ee59d56551cf42b4ff7a36232dc6aa8ecc4f1b92d13cd9a5b4342a39177d8f2e57c95630cfdca0931f0a2ef55e3cbc2c31aebb8c7f8226c5ae3e99c1658d6ec6ae793a694549b2216d0cb5b1b4044437d938a47c1"}, @generic="3146ee740a180d52965ffee785d18c52df2fb32cb84c15e30c07cc5cb3b72a7f81769448269c97c7815a3e30e8cccd07d73d6dff71e370b9a26ad43b4b7c1e64fc3bcb6a84e0d39ed66d8a6f956405c31692365a6b53124911152484066775879bb2ce83a459e9fc9fce2fff4c3dafd28022e727f0f8634dc24cbb96042bfc061f46864978c42611aa19c8b7ad8679c0369ff6ab58", @nested={0x4, 0x117}]}, @typed={0x8, 0x9e, 0x0, 0x0, @fd=r3}]}, 0x434}, {&(0x7f0000002680)=ANY=[@ANYBLOB="00013f64500000293aa7d6e2d02bbc7cdf993ba8eca59e35e6636c329ff72c8bbf844a0bed481be240ddfb599f0d3c13a6e6f747e2e29899759259bc36ae904ad2a82a1e77c49969187a24cf91b69c1205429e36000000000000000000000000000000721ee28b3d52da39a8b48b27b3b80092d39708adf36caa684793e5157bf5169c5d709ffc52212ae43ab555b86d08e3fc1a2ae39a6780d60f93f4593497edd818f54003014196cec2fab1248b35de98309a741e1ed47a2a661e1dab18dd82af08dc", @ANYRES32=r10, @ANYBLOB="080026000500000035f1afe706682c1942f213608e34ae017b06fb0cadc2672e0d3512b5ab085be889671164bc77ad58d4a75086aed5f872f1f2bfd282c11541592bba2f5b4959ea4b57cd5b078a5e6350fd7f44e8919b83a923a8833a71d1ef4f7c4740a736b4d6be2d394c4c18f1ccc9729a8948eb4fac2326e12aaa5c95fd77b6ad1c9ea2637d409e877dbdd9ce4d9f2cbe5d7d21763f3b68a8dd7a6a767c2fd0a4ac49a37c08dbed7b1ea0a17affd2caae1a2669a039498191236205b1ce5c0c84e78b13f05cb37de48c88b088e4f49273c22bb105351797abea63cbdb0800d100feffffff00"], 0x100}, {&(0x7f00000009c0)={0x18c, 0x27, 0x1, 0x70bd25, 0x25dfdbff, "", [@nested={0x20, 0xe3, 0x0, 0x1, [@typed={0x14, 0x36, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x4c, 0x0, 0x0, @pid=r11}]}, @generic="6955bbd6aec7dc462c14b5068c9c10d89b15a524883dc6e04826ccc99797b29b48c3674f4e64cc1134899406725af19962fcfed495cf4e40726bd122", @nested={0x84, 0x7c, 0x0, 0x1, [@generic="a93abbae9df8602e9370b774670ad99c85727a07d32cbd4d094de9b9403a104e66939b1248e771b3eb8c15f64eb4819cf13ceb1704367c4b01509c8c0bd0243be5717e9aa4d585ecfe4b31af2878ed27b7247b9ee124ae8add86c33a56aca8e465cc86aabe4a17af087580fc", @typed={0x8, 0x74, 0x0, 0x0, @pid=r12}, @typed={0xc, 0x107, 0x0, 0x0, @u64=0x100000000}]}, @generic="95a1110343d5207165f6529d97f5abbaa2883b06f0588756ae752d52e4fd14c8791d27aad77bf98f1476a77b3a55d8ed4ec6108ed5c003e497a946a49fa72da7649c2c6e4aa3b8fa6a41bf1a871671daeca68a60d6cf2533a9d2750cca992e0d59dd1cf8688c457f0cdaef607e5f4d9ae96ee53abdcdd24590842a791e08c1e0213a6c3848be148f12b0cb79b75bbabd0d3418c7be768a75e70bfc"]}, 0x18c}, {&(0x7f0000000b80)={0x274, 0x40, 0x10, 0x70bd27, 0x25dfdbfb, "", [@generic="a52486bd81f722999c1a5f362a1fec5b4c2a799d27480e030c8d35f53ed1f42fab7feaa638bf14e44753559789fbdd6f21056a78cb9cc142f4860675d709c1939f54cc847301f9982bf157c0c9432272d1bcf6e5dc1b5f4dc1d17d2448d991b1eb8cb61e8f0fcee7d554db473cb295c982de5086cd522969c7e16316fde314af0e42cd37e766698eb4df657d7b01302c987456b0888216c4b437ffa5ee6da999e2060af057ad8c440f894e314f4203622f903ef15155d75b242c30b61496ea5f38d346c94aa0eedc6fdbf9d192bdaaa038dfa6942dce6a17c39f02338cf51668855e2811b08962cce2dd65e1b9", @generic="d8ed40c086691863bb2e43baee3dfd902efe9a46265188054b413e55d642a2a8a648993b8c5f99475d53ed56cec695d4766ead111a8c69d037e53245d35d1685ad68fac7bb77a19288fd81034b46ce929af34679cfedae6001f0c35261c67367996eb3c8b390fd0384201f4f046bbf2f04cc38539db2fd7a525cdeb42767f34cec7d8093484d180ade0e7c9a931d29f8256230cba9d41ba7d13a07e548ebb188c1a55484816dad6bb658910e115642fb5cc182144b", @typed={0x4, 0x66}, @nested={0x24, 0x7a, 0x0, 0x1, [@generic="8e53baca73ff06fba72a45280c92da72281eb798", @typed={0x8, 0x115, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x139}]}, @generic="eb9c2fed2cb8ac8b14621dc6c1a2866fcddf47345b24bb883afb17ecf0ad5ee8e10fc06e40090f119b66c6cd22c4515a1cae9a067fa51101e5e076614d2ec968cf27c18298f55bbdbbba691334528641e12e3f3ca31c415c065240f0b352aa4fb7fbbfbe59b5004e1a4fb3198b1f2b35c0d62a9a1ee356496ef0c70c597d6a609babb60a0888511c851c969fcbd724b8535c32605d33a5059571"]}, 0x274}], 0x5, &(0x7f0000000ec0)=[@rights={{0x14, 0x1, 0x1, [r13]}}], 0x18, 0x20000004}, 0x4044095)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000200000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c246f593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000003400000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x24840)

2m15.673535178s ago: executing program 35 (id=406):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffe300000800030000000000080001"], 0x44}}, 0x0)

2m12.71123991s ago: executing program 36 (id=437):
r0 = socket$kcm(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f0000013a004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f0000013a004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x2b, 0x9, 0x70bd2d, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}}, 0x40070) (async)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x2b, 0x9, 0x70bd2d, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}}, 0x40070)
r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000001440), 0x801, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000)
read$msr(r6, &(0x7f0000000240)=""/20, 0x14) (async)
read$msr(r6, &(0x7f0000000240)=""/20, 0x14)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002500010026bd7002ffdbb9250500000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4048854}, 0x40044)
getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000000100))
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/ipc\x00')
setns(r8, 0x8000000)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0xaa00, 0x0) (async)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0xaa00, 0x0)
openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) (async)
r9 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0)
readv(r9, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9)
r10 = geteuid()
r11 = getpgrp(0x0)
gettid() (async)
r12 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc))
r13 = syz_open_dev$midi(&(0x7f0000000e80), 0x6, 0x200)
sendmsg$netlink(r4, &(0x7f0000000f00)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x2}, 0xc, &(0x7f0000000e00)=[{&(0x7f0000000180)={0x9c, 0x19, 0x400, 0x70bd28, 0x25dfdbfd, "", [@generic="1f6e3cd419fab1cfdb7c40156c227d32f0ee6c41388b9238d099b52ccc6d9d50b43ca831b868f602051426bda586292a3a45e6fada399cb03344594b4a0694b9e7137d362af4c3c801f1c4e3cf5699cbc1c76ec8677a45647bea817db3136f6dbd4dce4f0f73dd641681757406c0e328fcb981cb6208de50793c78c3838269eca4f6159c023701ff43985bc0"]}, 0x9c}, {&(0x7f0000000480)={0x434, 0x32, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x19a, 0xb0, 0x0, 0x1, [@generic="a2ae7819fdded7c65f72739244a5e14731b8f541eeb667df69030b2fcee55ee646d152c387f70ea65f7786fce95003e80ce9f9d960fec794a9fd7220fb46df83896abbe5ee95c3d375ec1bede456f9706982d76d0784f883f879ad291fb92dfa6c56f3eee1d8d509437ca3383a82651a2e1256aeee92cf1eef270b2e18c88f94eddb6a452efd767520aeca667a0480c348ed97cf5d2cf6a2fa4f1c729c7e20b212", @typed={0x8, 0x3a, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0xd9}, @nested={0x4, 0x150}, @generic="eb7abc17c52728841a6f62bb7caee6d54c0f8a71c7ab8f05678dbd361914988854285e2186617c0cdd25843084a310c329cd8958f8aa00c1a1a0898c664510fe06e86bf034625c3579f58c6a7c6f964468834d2f141a3c9954677014a88d1e9b7e123c8a464418f4c4c609d115f22807732cbed3c359801be7632c73d4144502cb09a75b224831f45491f092023dc743dc15ea412a567a2c1f66f9ad43e0128a2c5785088724a091c75bcde666a22dadf92de9c2f1c225a56bcefffcc4b38f8b71cbce9fe4322cb35011e1a84c9c613d64", @typed={0x8, 0xc, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0x150}, @nested={0x4, 0xea}, @nested={0x4, 0xd5}]}, @generic, @typed={0x94, 0xbf, 0x0, 0x0, @binary="2b1d0040d25272b96f73d5bd2689f8e08261f0cf6ec39d70e3f9c0f194f2eed1725fd39cabee6e7a1f74c76183b18920c6db610ec6bc6970db1fb9fc5f780e73843347a0844c72ac76fd8754aac1ef827b380d3f55f73904b16770089ae3f3b7fcd442ce9261877d1c224b33f1b93bb1966aa05e0848fdd1c04bf13369b6f275b05a8882f63273e34cbb1ad6cdd81646"}, @generic="4e59776419bf697446de2929974931d2cfdbbbff06699593a6c225af86b8ab52294eed12a1e5d5b51e39b84e21bb9fb2b6c383895c3687e2b08fbf6042f09b48b9512140487270493d399a78aa92aa60f12b608d1c43808fee08187bf2975b146fac451f6445276db7cfed", @typed={0x8, 0x10b, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @typed={0x14, 0x11d, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0xdd, 0x0, 0x0, @u32=0x5}, @nested={0x159, 0x13a, 0x0, 0x1, [@typed={0xbb, 0xbc, 0x0, 0x0, @binary="db27f549d042d1114cf702b2dd8b448bc3d6880bd0606c61db59b6118f8df5391e86037a25a1cc278a0b873ebdc3d4c058fe4bb09c520c4e3cab59063a407e9de52588b918ddd5b10a4cb07da1238bea766635e26a53969cfcb0674d3b2b22917f666ee59d56551cf42b4ff7a36232dc6aa8ecc4f1b92d13cd9a5b4342a39177d8f2e57c95630cfdca0931f0a2ef55e3cbc2c31aebb8c7f8226c5ae3e99c1658d6ec6ae793a694549b2216d0cb5b1b4044437d938a47c1"}, @generic="3146ee740a180d52965ffee785d18c52df2fb32cb84c15e30c07cc5cb3b72a7f81769448269c97c7815a3e30e8cccd07d73d6dff71e370b9a26ad43b4b7c1e64fc3bcb6a84e0d39ed66d8a6f956405c31692365a6b53124911152484066775879bb2ce83a459e9fc9fce2fff4c3dafd28022e727f0f8634dc24cbb96042bfc061f46864978c42611aa19c8b7ad8679c0369ff6ab58", @nested={0x4, 0x117}]}, @typed={0x8, 0x9e, 0x0, 0x0, @fd=r3}]}, 0x434}, {&(0x7f0000002680)=ANY=[@ANYBLOB="00013f64500000293aa7d6e2d02bbc7cdf993ba8eca59e35e6636c329ff72c8bbf844a0bed481be240ddfb599f0d3c13a6e6f747e2e29899759259bc36ae904ad2a82a1e77c49969187a24cf91b69c1205429e36000000000000000000000000000000721ee28b3d52da39a8b48b27b3b80092d39708adf36caa684793e5157bf5169c5d709ffc52212ae43ab555b86d08e3fc1a2ae39a6780d60f93f4593497edd818f54003014196cec2fab1248b35de98309a741e1ed47a2a661e1dab18dd82af08dc", @ANYRES32=r10, @ANYBLOB="080026000500000035f1afe706682c1942f213608e34ae017b06fb0cadc2672e0d3512b5ab085be889671164bc77ad58d4a75086aed5f872f1f2bfd282c11541592bba2f5b4959ea4b57cd5b078a5e6350fd7f44e8919b83a923a8833a71d1ef4f7c4740a736b4d6be2d394c4c18f1ccc9729a8948eb4fac2326e12aaa5c95fd77b6ad1c9ea2637d409e877dbdd9ce4d9f2cbe5d7d21763f3b68a8dd7a6a767c2fd0a4ac49a37c08dbed7b1ea0a17affd2caae1a2669a039498191236205b1ce5c0c84e78b13f05cb37de48c88b088e4f49273c22bb105351797abea63cbdb0800d100feffffff00"], 0x100}, {&(0x7f00000009c0)={0x18c, 0x27, 0x1, 0x70bd25, 0x25dfdbff, "", [@nested={0x20, 0xe3, 0x0, 0x1, [@typed={0x14, 0x36, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x4c, 0x0, 0x0, @pid=r11}]}, @generic="6955bbd6aec7dc462c14b5068c9c10d89b15a524883dc6e04826ccc99797b29b48c3674f4e64cc1134899406725af19962fcfed495cf4e40726bd122", @nested={0x84, 0x7c, 0x0, 0x1, [@generic="a93abbae9df8602e9370b774670ad99c85727a07d32cbd4d094de9b9403a104e66939b1248e771b3eb8c15f64eb4819cf13ceb1704367c4b01509c8c0bd0243be5717e9aa4d585ecfe4b31af2878ed27b7247b9ee124ae8add86c33a56aca8e465cc86aabe4a17af087580fc", @typed={0x8, 0x74, 0x0, 0x0, @pid=r12}, @typed={0xc, 0x107, 0x0, 0x0, @u64=0x100000000}]}, @generic="95a1110343d5207165f6529d97f5abbaa2883b06f0588756ae752d52e4fd14c8791d27aad77bf98f1476a77b3a55d8ed4ec6108ed5c003e497a946a49fa72da7649c2c6e4aa3b8fa6a41bf1a871671daeca68a60d6cf2533a9d2750cca992e0d59dd1cf8688c457f0cdaef607e5f4d9ae96ee53abdcdd24590842a791e08c1e0213a6c3848be148f12b0cb79b75bbabd0d3418c7be768a75e70bfc"]}, 0x18c}, {&(0x7f0000000b80)={0x274, 0x40, 0x10, 0x70bd27, 0x25dfdbfb, "", [@generic="a52486bd81f722999c1a5f362a1fec5b4c2a799d27480e030c8d35f53ed1f42fab7feaa638bf14e44753559789fbdd6f21056a78cb9cc142f4860675d709c1939f54cc847301f9982bf157c0c9432272d1bcf6e5dc1b5f4dc1d17d2448d991b1eb8cb61e8f0fcee7d554db473cb295c982de5086cd522969c7e16316fde314af0e42cd37e766698eb4df657d7b01302c987456b0888216c4b437ffa5ee6da999e2060af057ad8c440f894e314f4203622f903ef15155d75b242c30b61496ea5f38d346c94aa0eedc6fdbf9d192bdaaa038dfa6942dce6a17c39f02338cf51668855e2811b08962cce2dd65e1b9", @generic="d8ed40c086691863bb2e43baee3dfd902efe9a46265188054b413e55d642a2a8a648993b8c5f99475d53ed56cec695d4766ead111a8c69d037e53245d35d1685ad68fac7bb77a19288fd81034b46ce929af34679cfedae6001f0c35261c67367996eb3c8b390fd0384201f4f046bbf2f04cc38539db2fd7a525cdeb42767f34cec7d8093484d180ade0e7c9a931d29f8256230cba9d41ba7d13a07e548ebb188c1a55484816dad6bb658910e115642fb5cc182144b", @typed={0x4, 0x66}, @nested={0x24, 0x7a, 0x0, 0x1, [@generic="8e53baca73ff06fba72a45280c92da72281eb798", @typed={0x8, 0x115, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x139}]}, @generic="eb9c2fed2cb8ac8b14621dc6c1a2866fcddf47345b24bb883afb17ecf0ad5ee8e10fc06e40090f119b66c6cd22c4515a1cae9a067fa51101e5e076614d2ec968cf27c18298f55bbdbbba691334528641e12e3f3ca31c415c065240f0b352aa4fb7fbbfbe59b5004e1a4fb3198b1f2b35c0d62a9a1ee356496ef0c70c597d6a609babb60a0888511c851c969fcbd724b8535c32605d33a5059571"]}, 0x274}], 0x5, &(0x7f0000000ec0)=[@rights={{0x14, 0x1, 0x1, [r13]}}], 0x18, 0x20000004}, 0x4044095)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000200000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c246f593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000003400000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x24840)

1m59.191480127s ago: executing program 8 (id=719):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x5)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000072, 0x0, 0x7ff}]})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002b40)={r1, &(0x7f0000001a80), 0x0}, 0x20)

1m58.967713436s ago: executing program 8 (id=722):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800)
bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800, 0x1}, 0xe)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4)
connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14)

1m55.56217104s ago: executing program 8 (id=722):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800)
bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800, 0x1}, 0xe)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4)
connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14)

1m54.583287704s ago: executing program 8 (id=782):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x4, 0x6e1, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
syz_ublk_setup_queues(0xffffffffffffffff, r7, &(0x7f0000000280)={0x0, 0x1ecf, 0x10, 0x2, 0x1ca, 0x0, r1}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x161, 0x2, 0x1, 0x275, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8ec5, 0x40000, 0x0, 0x1f9, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4342, 0x40, 0x1, 0x68, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8722, 0x2000, 0x0, 0x381}, <r9=>0xffffffffffffffff}], 0x4, &(0x7f0000001980)={0x2e, 0x78, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3e65}, 0x0, r6, '\x00', {0x4, 0xcc2, 0x0, &(0x7f0000000980)=@buf_max_buf="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"}}, &(0x7f0000001a00))
r10 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)
r11 = fsmount(r10, 0x0, 0x0)
openat$cgroup_pressure(r11, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
syz_ublk_setup_queues(r8, r7, &(0x7f0000001a40)={0x0, 0xdfb7, 0x385358a5fe57601, 0x2, 0x1cf, 0x0, r9}, &(0x7f0000001ac0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc62, 0x2000, 0x3, 0x144, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce7e, 0x100, 0x5, 0x2b5, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2bb, 0x2000, 0x3, 0x24a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x235f, 0x80, 0x3, 0x138, 0x0, r1}}], 0x4, &(0x7f0000000340)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r6, '\x00', {0xffff, 0x1f6, 0x0, &(0x7f0000002040)=@buf_1k="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"}}, &(0x7f00000030c0))
capset(&(0x7f0000000040)={0x20071026}, 0x0)
r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r12, r7, 0x0, 0x0, 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0)

1m54.47698045s ago: executing program 8 (id=785):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r2, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0)
write$binfmt_format(r4, &(0x7f0000000a00)='1\x00', 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x9, 0x3, 0x1562c695, 0x241d, 0xe, "2d5157854e0a1e37a2c83e0fab035d8445e39c"})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c)
syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000000))
socket(0xa, 0x3, 0x3a) (async)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r2, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) (async)
write$binfmt_format(r4, &(0x7f0000000a00)='1\x00', 0x2) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) (async)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x9, 0x3, 0x1562c695, 0x241d, 0xe, "2d5157854e0a1e37a2c83e0fab035d8445e39c"}) (async)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) (async)
syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000000)) (async)

1m54.220787508s ago: executing program 8 (id=788):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0xfff, 0xc3, 0x3, 0x4067}, {0x8, 0x4, 0x6, 0x2}, {0x8000, 0x6, 0x3, 0xf}]})
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) (async)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d4}, {0x7c9f, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x68ea, {0x4, 0xb, 0xfffb, 0x5}, 0x0, 0x0}}) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1m50.815169876s ago: executing program 7 (id=828):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002700090025bd7800fddbdf25100000001400010002"], 0x28}}, 0x4000080)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
recvmsg$inet_nvme(r2, &(0x7f0000000bc0)={&(0x7f0000000100)=@tipc=@name, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000400)=""/186, 0xba}, {&(0x7f0000000680)=""/245, 0xf5}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000880)=""/97, 0x61}, {&(0x7f0000000900)=""/224, 0xe0}, {&(0x7f0000000a00)=""/60, 0x3c}, {&(0x7f0000000a40)=""/180, 0xb4}, {&(0x7f0000000b00)=""/32, 0x20}], 0x8}, 0x14000)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRESOCT=r2, @ANYBLOB="2de89eb8a2820ac262b1bcf70aaa565c1434aa"], 0x20}}, 0x40000c0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast1}, 0xc)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0)

1m50.62777737s ago: executing program 7 (id=829):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) (async)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a38000000000a030000000000000000000200000a0c00044000004000000000040900030073797a31000000000c0004400000000000000004140000001100010000000000000000000100000a"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1)

1m50.627416334s ago: executing program 7 (id=830):
socket$can_bcm(0x1d, 0x2, 0x2) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x362, 0xc000, 0x7, 0x337}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f00000001c0), &(0x7f0000000240)='%pB    \x00'}, 0x20)

1m50.537110338s ago: executing program 7 (id=831):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080045c4001c00660000070290780a010102ac1414aa11ff9078ac141423282a2765a59fe7b72f0a6714e24a6234e7c3364afca9c600094e4f520d31bb8db354f46f1f07cf0a67d323772964d3ebdc5836ec52b3500f3fb21dbc59836b8038bf58f1279c3741bee9595c0d5ddc9d3d507fda9554ecc62064f8624d1bfa3715a87b41733f3f8d4c9e0113aa4ff8779098a58db9f8363b20a9194978e98788"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) (async)
umount2(&(0x7f0000000100)='./file0\x00', 0x4) (async)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080045c4001c00660000070290780a010102ac1414aa11ff9078ac141423282a2765a59fe7b72f0a6714e24a6234e7c3364afca9c600094e4f520d31bb8db354f46f1f07cf0a67d323772964d3ebdc5836ec52b3500f3fb21dbc59836b8038bf58f1279c3741bee9595c0d5ddc9d3d507fda9554ecc62064f8624d1bfa3715a87b41733f3f8d4c9e0113aa4ff8779098a58db9f8363b20a9194978e98788"], 0x0) (async)

1m50.472855755s ago: executing program 7 (id=832):
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xa031, 0xffffffffffffffff, 0x180000000)
remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000240)=0x1, 0x4)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.controllers\x00', 0x300, 0x0)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x22, 0x0, 0x6}, 0x28)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000440)=0x13, 0x4)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000180)='system_u:object_r:man_t:s0\x00', 0x1b, 0x6)
r5 = openat(r3, &(0x7f0000000280)='./debug\x00', 0x40100, 0x54)
fanotify_mark(r3, 0x200, 0x10000000, r5, &(0x7f00000002c0)='./file0\x00')
r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x208000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000140)={0x20000008})
r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x6043, 0x0)
bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffffffffffffffff}, 0x6)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
read(r8, &(0x7f0000001000)=""/8192, 0x2000)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f00000001c0)=0x2, 0x4)
sendmsg$inet6(r9, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)

1m49.949462958s ago: executing program 7 (id=833):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)="b7c3e4013257", 0x6)
r1 = geteuid()
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000100)=@sr0, r1, &(0x7f0000000140)={0xafd, 0x8d, 0x0, 0x0, 0x9, 0x3, 0x7, 0x8, 0x1})

1m49.903066616s ago: executing program 37 (id=833):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)="b7c3e4013257", 0x6)
r1 = geteuid()
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000100)=@sr0, r1, &(0x7f0000000140)={0xafd, 0x8d, 0x0, 0x0, 0x9, 0x3, 0x7, 0x8, 0x1})

1m38.062116767s ago: executing program 38 (id=788):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0xfff, 0xc3, 0x3, 0x4067}, {0x8, 0x4, 0x6, 0x2}, {0x8000, 0x6, 0x3, 0xf}]})
r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) (async)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d4}, {0x7c9f, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x68ea, {0x4, 0xb, 0xfffb, 0x5}, 0x0, 0x0}}) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1m9.294392707s ago: executing program 3 (id=1328):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40)
lsetxattr$security_capability(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000040)={0x1, 0x1})
write$binfmt_elf32(r0, &(0x7f0000000b00)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x2, 0xd1, 0x4, 0x3, 0x6, 0x4, 0x19, 0x38, 0x1d9, 0x40a, 0x4004, 0x20, 0x0, 0x5, 0x3, 0x200}, [], "3a3de323fc952c30153fb4277badd52c104d976b73baea89f9721dcfb1ad4db22b3e8f575be812ce3b12ab6dc552525dfabd48c9af7b50e29e11806aaa7695ce3d60de130aadd295fcb4283f8e51e2514c31de09716397909d4093ce97458f331d9699a92f3fbf409a2787f99551d050b2c77bdfc6cb5ce8f92a7c7aa07dc3b747400000000000000000", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9c2)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x649, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x92, 0xb8, 0xce, 0x40, 0x85a, 0x26, 0x132, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x637, 0x4, 0x8, 0x1, 0x20, 0x6, "", [{{0x9, 0x4, 0x26, 0x7, 0x9, 0x60, 0x2, 0xd9, 0x1, [], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x3, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe0, 0x7ff}]}}, {{0x9, 0x5, 0x4, 0xc, 0x400, 0xa0, 0x4, 0x6}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x6d, 0xd9, 0x2, [@generic={0xed, 0x2, "5c6de2989df5cc2d53e540c5b54e53c833090325dd3b31ce64477c7d7231e07197205e0e99fc33fd8762afd18fce24327474754fa5e0da387a37dab1244f4b678946230545ac073543d0c256992dc1ba7af5f6b16b7c4c54ac6fb2bf55ff40338ea2f2474747b795da8d1c2c117ab44963e343b35cf87071c312a3ef50785dc886adda927d45cce40d9be55021cd6215fc4ad74d19ab17bd9f24d93a8b7ffaa9134c13408cc0c92b53f7388c8f248d2a2ee7cf43a3e2adf8a45a5e3f28da69bf50c7b6ed5f59b572bf94e5de17f165df11aacb1611e6768a405b0353661d7845ae0a84fdeea8bb6447aecc"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x2, 0x0, 0xe, [@generic={0x1a, 0x23, "03a5d831a521d9eb73a9f1a03cc587c477d3639fd8748ad8"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x8, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0xff}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x7, 0x7, 0x2}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x4, 0xb, 0x6}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x4, 0x50, 0x9}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x9, 0xfd, 0x6f, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x4, 0x9}, @generic={0x1e, 0x22, "d04399e8b518fd06836f8b074f045cab1883a3ddad2049dd89179ecc"}]}}]}}, {{0x9, 0x4, 0x23, 0x2, 0x7, 0x89, 0x29, 0x19, 0x1, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7e, 0x6, 0xe, 0x7}]}, @uac_control={{0xa, 0x24, 0x1, 0x12f0, 0x1c}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x1ff, 0x4, 0x6, 0xe}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x7, "54cfb6ae"}]}], [{{0x9, 0x5, 0x3, 0x6, 0x400, 0x80, 0xd, 0x79, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x6}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x10, 0x8}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0xaf, 0xf, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x5}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x50e}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x4, 0x81, 0xf7}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x8, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x2cf}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x7, 0x4, 0x7f, [@generic={0xe9, 0x2, "5e754cb84165e97a77869f3c8ab58d714cf1b4b06c1afa6846d36605cd9cafd9be1dbe4d74047516507145c6a6fcbd8271b031572550f330f1d369a749a837ffc6b7df94119ed2b6a81ef390b57a19998407ec79e9ae2ccefa46ea9e57e90b75cdabddd4b6a6dc91675a590bb56b33740d41ec891ffb209f510fd47706eb9d813e3379f957edd315e5e4aa13bbc24d52217621e2767f72cf744ee449fef17650423176ed579a1579048fbcccac2d9e2b79a65c4767d1367163facb4a42c543d77735cb494007742b7b582d51aac3fc40cb596fe81bf849c793e69e32319573fbf8e28188ad0e42"}]}}]}}, {{0x9, 0x4, 0x77, 0x17, 0x5, 0xf2, 0xf1, 0xb8, 0x20, [], [{{0x9, 0x5, 0x5, 0x8, 0x400, 0x1, 0xd, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xa}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xd, 0xfc, 0x4}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x55, 0x9, 0x4, [@generic={0x79, 0x4, "44383d332a286a6beadbfe494259933fb42ae457f57567c6e9db093206f153dcbd30a3c9488d2cebf493a6831461f6c6ed8f9d44660f3f439c6ae753681f4a87892df3a58f3cfd80a32ea040286fc130f4deb7a357972668145f9003f2eaf64ab27e4eeb763a5239eddde719efe82326d0a67bfb6e2b13"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x3, 0xdc, 0x6}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0xe, 0xb2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x4}]}}]}}, {{0x9, 0x4, 0xee, 0xc1, 0x8, 0x2, 0x2, 0xff, 0x7f, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "2341f8b280fe"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xec, 0x9}, {0x6, 0x24, 0x1a, 0xe, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x9a, 0x2, 0x40}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x2, 0x9, 0xf, 0x9, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x5, 0xe57, 0x5, 0x80, 0x1000, 0xe}, @mdlm_detail={0x27, 0x24, 0x13, 0x9, "2b78a5d94a4f381e98f0a3dc3d3a459cf189f17ae0fb8833732a8f8c24957aec064957"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}]}], [{{0x9, 0x5, 0xe, 0x10, 0x200, 0x10, 0xf5}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0x4, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4c, 0x6193}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x10, 0x8, 0x1, [@generic={0x6b, 0xa, "31420a947767e5c9bfff1375182e67d892431c035eddaede2e802fb5d3e0a317adaf116239324aadd7bbf34f79b33970a2492fa9f52009a2bc5466c61295891fd1e0349c263d09e4ea826324da51709a2cd2b6d7b740d9467caf409b99f956385e4c063f2053821bdd"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x7, 0x7, 0x8, [@generic={0x6a, 0x21, "1ea8dfabd8936988b93fca7918660ecc79765b7389ab32040ddf4ffd9b94abf2f2f16ad376de8a3691cce01b3e518ffe8b8631420fa239ef21d8cb7c7dc5e55ba2d7f46aa909e7d6c4ee4ec7f1a4bc5bbb2fbac18a288dad7bc6aca420b353106dee95a8e9e03e0a"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x9, 0x6, 0xf5, [@generic={0xba, 0x22, "d3ea1e6d070867199ad27eb7ec1ce9630f51c2276754df6f082c65a126c46004632b4c69d84d0520a868566dbe45a79311e2bf1c4fdd60b17f95a2bc79d54756df7b9f48f4ded621d2cb1070b4e7e27e8b7b8a458a7f7b60e048f25fd974d6d6f71a795bffc62ad85ddd78db402bef211a33ff4dd102ddc22882dff3af1efc5a030545eede84aa89f74461cd63b6792026744bdd3f5ade331201e2aa7df6b6e6ec2bffe0711e6a10adc02dc3552abc84f77b8bd59b7d0f23"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x3, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6138}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xff}]}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x3b, 0x7, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x5}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x200, 0x6, 0x4e, 0x9, 0xff, 0x91}, 0xf, &(0x7f0000000840)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xdd, 0x1, 0x1}]}, 0x1, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x448}}]})

1m2.492437298s ago: executing program 3 (id=1375):
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)="87", 0x1)
sendfile(r0, r0, 0x0, 0x200000)
r2 = dup(r0)
ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000001180)=""/217)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}})
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040))
write$UHID_INPUT(r2, &(0x7f0000000140)={0xf, {"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", 0x1000}}, 0x1006)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8'])

1m0.86998596s ago: executing program 3 (id=1392):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000000000000000008300"], 0x0, 0x51}, 0x28)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, 0x0})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}, {0x40000003, 0x4, 0x1, 0xffff, 0xffffffff, 0x5b}]})
ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000040))
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r5 = io_uring_setup(0x71c9, &(0x7f0000000200)={0x0, 0x1ae6, 0x800, 0x2, 0x2ce})
r6 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000003c0))
io_uring_enter(r6, 0x1, 0xfffffffd, 0x9, 0x0, 0x0)
r7 = syz_io_uring_setup(0x56a5, &(0x7f0000000340)={0x0, 0x8531, 0x2, 0x1, 0x1c5}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480))
r8 = syz_open_dev$ublk_chdev(&(0x7f0000000780), 0x0, 0x301100)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_ublk_setup_queues(r4, 0x0, &(0x7f00000002c0)={0x0, 0xdbe4, 0x10, 0x2, 0xee, 0x0, r5}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8f80, 0x4000, 0x2, 0xd7, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1630, 0x800, 0x0, 0x107}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ce7, 0x10, 0x1, 0x384, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee1c, 0x0, 0x0, 0xd2}}], 0x4, &(0x7f00000017c0)={0x2e, 0x50, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r9, '\x00', {0x0, 0xc36, 0x0, &(0x7f00000007c0)=@buf_max_buf="6b7ed9dec3215160c8cead18de631481a3454f3080b128b11ac11762b56804da4827d619f3be563ded206285d92b4db6ad815e640e80cc36817e709f138a04570f581f5cd5afb8e6b138eeaa24db7dad1192c2d81b2fae8bfb7e3aba300f8767a5d4c475a4196795e02e641f86e3c9c3db4c50b7b3efc7cf0ad868d231463bb7cd00b2e0fb0def6dd84e580e035956b9c304f4309117280101c042f8d162d22b8e4730e27ba74af51411f476277a41018fbf407885616a03fce26a90a6c6fd2dd79c99fad9a297f5864f6f232b3b705cf25d4c53014220d88fd1f87db6fe12e01f9e0b16885b5876966143dc72c5b781588dc4ee45629a52fbef52bb58ab58b67ef955f8a3826a37be309b1ef6f9da56b7d107601c8c74784f4126168219a323d696a9f09ef842f69ea7250ec99bf6f4e2978174e6e8e7302612de966dc6a7a2cc5bf0933361848c005d2ff4144b9437ba369acaa75708fb153465d4431eabfd81f96221d2cb8cdd3d75b752d8add27b14d7027fcd02e1f164ec86a5bd13846609985b499d65f67e0825557f86d2361b9604fd97c2514f27e7bc3dcbe612d7e88a203cbffcace246a9e1cbdcdfe8dab431bf4432d5dd8cbe1099a5535315fa72e12a28588f16c587146dd9541fbea460d1cecc3d3ba654df335849c86a1624e16309756967154dd90bae9a85a2b1dba95e1edf5fc352496e268f2140c05a4170cb9948d9ab0698c6f97b00b7d7e1c2049acdd39d0800bc7f7333bd9cb09d66308e4ea4494522ed78c1f4ffb113e65dab088ae6a67007ac74733c6aab44efd7b8336228092598bdd7e6491215b6e9c9733bffd257872a603198410a12fb1d6900b694155decf9b7d1cac24c4438589f4f43d02ae3d3fb7da69f55d76dbadd881aa2ebf1f63d2440ce11c67160d10bc931e767fd69c9699b77fc78c569098b2a4673b661d2477a38005fd56762a663bfe97a4df858efaa37ddc5e39cfcec66508088f535e94c3c736ced75b82b371dd8d5bf32e1db4757e6cf607c3f0b9b5a75716184afc84a2b142c2e8b664c22c1cfe7e65739068090164e994da66be874dd6af18f015b060e475e801a0549bb015cd0300b12ce3b150994a8640ba67dd50f9aa133c7ac3f9ff643cee357e9d721fa598ddaa2a58c65fa7c49ba71b6b025c67d4a14a16e01c87d43d6b718dc70fc713045f8506e6cc0eab9c638056bc00fa0486d91f876d9f1621e61335f010cd67321d1bdf431ea60710612f1d9ce5ddb7b76e6edc1c8dc15f21b4ec463a109b1d16bb22360d7de255466e0ef5cde2678ae968dd8fa30cb4ef69cd42b6cd9b49ec2e57c0e81082a50754d34c5a9aa80526040e2dd6ecb247c8875527d3674a9bee164588b7502eb2d2ed758731b763fbb83e16e1a7c7e413dd5eef4b6fcc6ded1750c765e1b71199a52fbe96b574d5ffaa95a07231735b362d6bf30652a8653c2280e2a35c2d63893cd58f7256e595eb5743dfa5963a2e5019d1d0282b82a642235e0686d710353947f2a9c18acc1fffb025d62034309bbd93e052be33f14688bcf259c297464c04b37a4d3f8f8d936b26c3dc98ed2fb740486e434c6efdc4c83143a15402e00779670d5521fcf0f9f7306026f76063953d8d933fa12a2ecb5ba878401cc9332d0898a6557b870a891e16905ceda2d86709bfd3ab0f30413c7f0ece996602f815b2b7f8edddf3e68f61e9e7879916b6d02e1213f108109e10220a2a4110cc041c6a12228ca2aebf15232d984504981b3262bfb409dc9d4ec8208ed6b496b8346e8ddb5d166b91f06520817e9c2d73162ec529ab2d150cdfdb01fe323a7007c06e0ea3f9ca3cc6116eda343b1045f1f0e13ab00baceb051a577378b3370dc35abf9cbd0fd9a428d5385da9397641835bc2e68c1adb50364cf82cee2e8b59b0ac399d227d753d24f288845f6c0b59d857b7308a9b7bfd941b3db92839d48dc5c0e117e992e483f6d6db15b1db56edded6da06dd93fb8a908a73099cc94dc121c939e4e5522ee6cc952127c37d198a23b95fb4ecd601d6f94e1a40211affe1e4999465b54c372b55ec52368395a7b8ed60973bd4ae0c13de04a3e6a3f70366ec356cd73e83331e95067bd7d968891d3d59d57b8bc71ec2ecbf4a2239d8ba8b02060d97a92dc2ffaa8fb65309f7b44439c4f94de798afdd393d3a414ed94f743e05bb261a0cf777bfa4d501160c60016cca082695f9219da410bd5cf089b3d79610b3b4182582eea279061fa19f94eec5b76e9cfb9c5b497086c25fbe60af57f894f568164aa180c50c3c92c28ea0ccdd1bd267092573c7d58a2eab15420f67774bd0e4061a1dd2d32a0684fd07df6ac7e410fae9c9bb0016ad28fe73c8623dfe041021f977557656b08a233f62f97201bd76cdd5380062e8031dee1a1d3fb0d07fce032f2a0581549cb93103fdb3dd11abe9dcd3f898a6292ab4838a24f9aa98e4da0e3939d00914c7fbd456daee63da7172ea6a7e346d3d50522440198552505a626e21e132a5dd65cd50c296b66d53691fcd6b443cf340e70eb521a35db73c5f87b136c57693b3c8af1428d672663b1e23cd4a1b051815dfc6ef2b571d3c1579242a5912abc05cb933daf5358e4be2c87373781202203d7a9994e666265d23243539fa0207fd39d5b743de5a9e227e275a1f13335fae50a00e2ad50d0eb88d4b1a8650c36249e9446462e63587f168587690efb30522fd3a9d8f383405a2b57770cdfac37de3e54efac237ea09e589b0ea9c3cd4d78bb34eed6851caccba1e4b5a994b5a75355560977d4a2567180887a0589eab1799ac8245e16ad88b79adf2c3c37fc88c8f8cf440765ed112c87172fbb79224c4709387d188ad94ac102d0466583c9954f0f25e88159169a3a90ba01f4f3423b83bf3e7a5fe6bc278aaf6e7cec509927f92dfa32d825ac95c3b17d39b6c5f42d9449867bf530b2c4d5e9b97e562508d29aa1e81a7a057b4745a85eaf4bff177e5988f96eb7db3afb08051f0502ca13b11bcafe3cd938c9aaa60221c621cd299ef412a7416f62d1dcedc28295d741c1abb1f5335b11427450e6b729561a08f8261065a969154fc9a0d2e121c1c8ec67291a79bf34a4f2edd12db6a24146c6a560cee7aa7aeb932e742028a7f1900d6ee559c97ffe1aff7028799c5f0a263cebf125abf841bbccf599cee53e97ba672bc8dfac3b31732e94a43435dceedbd9d2ac8933ca5f2b43ec10f00dc8194f52ef7ab1b211dbb10fba716adcd93c24b904d0c3d04104ca232d11a7418c9a33e6949b50cc8ad28b9ec1f9f8a56d0b4a2cda248a8bd8426a7b74473e52ff1d1c4963f5bfe1c944c062df99017d00e825fe084ea670a70a5f7c9dd06c4b4e85916a1341db30e4cf7be047a1d03f961bdbb70de3e5293be98ff46ea41e6cfa9cda8e2493da309c9884fdc9f7409ea5bf6979f2122d0ef2a14dc6b447123e4a6bfcab32b42cdbf8e61968a7ad5fff6958f94a0d8a2cf22359830b5453a35ff9f6e0e7e624346b421fb7d03d109b039e49e3c34368cb64c962ac6acf5bb14d4e07703372108fbaf13f6f1e2575af536ca8a6b5977df7b2561424f76fefcf8cace8ce8810b1ebde227683aae48a698c1c72dd1ca06836e6a1e860cdbb85134e9283d0d961572619d9b8d96c7a9f9230bc91241e980e3619f1e8e939277994d8d1aa4246b4a21c5ad0e0a8578ca0cf5581ba973f95aafef75fe1cf9aaca09bd1c3666cef93585ecc5829647516d860274c4379d4a6960019aa44b63708d2503ebc836c75df0611df5b130f3b8931569ba5b162cebcb9dd61ab92c937c19fe0fa1dfce4724c8cb316286ca6c80efaf071ed966a13298c3d254ab0c15364b0b27e046b220dfb28542b2efd924cb5fb55c5261bc30986da37dbadb28188ad2ad31d98768aa46ff45efebfdaa520bbb613daa4680f685a82753824078e38bff756d11535940edfb2f7b6e7fb0612c99ca572cdf3af73e9df9896580e0ab11f04b3107eac7f4b01fa31b5e4bce7d1f634227259b8bfbccb86031e5b9484ce064884d0c876f84fe678ba724a64177ddd5cae70c6ac8315f33ed6e6b9fc2394687dad986fd00d86ba475d0fd210f0890b177d750ee72070bf57289fd0224c9286be19edc1802a0e70f6638bec36e378300177bd4a06af46996992e922c58f8382c88456b8c2fac5c37b9ba6a56cf4a9d1c31ce1e243faecc0f3fc5a2188e843997a453ef77f007e5504bc21f5c59009f435f0499ae02330f0e1519015bdf100f1d368506100aae89d600bd47432af4b7fedc978dd02f07db69c0250a00da15967cef45d46a114421d865e6e1f3d7036e61ef6bf290f80a1980ca41a106a065b656cfb9f68addb95971d4bdab50fde47c1ba07515a6170c2b4cd5efb189127b72da782707ac9eb31cc5b41f55ecab3aa43b59cf1786e2c90ccdd2a10866f5c866dade85b59943594c7de1cf95d3ca6071fd109c90a4cedadeff02dfff733deac0e1f6510f8dec181c8e5710258aa8fc73118efd67fe69ec21ca7105474d56f0af1c5d949678d4c64e9b6c362cacb1d1b24521d06104f029070c273fa877406a04a6c94df484f328e451fbf558385fdff1bf9a191827154a614551e6765abfc99db4573accc0656023701c1ada324f97a31486f0d01c4cf66a27ac1b7663d6a71ea60e8e775c1743c0969b22bbd46d6af53583fe1f4b1b53ece5aaba81ee191d4e7999dfb2b4c1c7cc9ed37d317a2b7bc56ba3122bb2cb76170cef8f98d36988b7194d8a0c7e505dfb612cb1dd5bdb1e36d408226d98a3246b4429465fced0372a19987b2270d7c0c43c394120c8c812522121fb64f08081e735f74750767edc50cd2e288768a98eea721a611bbdf05d4e13191bfc9b89b8c08cc04cc97dc78950fb6e9b74c7835843ad6195ab98b534c669f35a0f6eba23fa3bf9d7d5fed608699d2ea8dd61ed6bcd7cdd1460b78fd12b7c8e1a2c768bff1e56dbe9077d01883be35e76311ac7fc49d78e10a9d49232d9b5203beb27c4cf06cc9ebe47332a77c42b69e27d0fc8993e13d2067235ae73b340642cb2a70ae353006c4d3b3a58a6f2999963761f42f0a438a7ca06eafea8509d7e237db4f7d0d5e1b7d4c9108a2a98fbe0a9322651555c27ca26c2c3d8218793b0db5a2b762bc7cb9636b2a761619b1619ec8c7edcc4fcc12b0b3a26c24e9919859b0c1a7af1518e8dea47d12e7e7921eb288642a9ea03bbf3a2985e5aeaf8013243ce9e64c4cbb061cbea2e297327c63a10c88b5ea68e749c162974a87bb4baca762267908026165e79fc91511c0f94efa8e352b7f691dc0b8faba05f57f57a29bf4d9c3ccc6ac04ccc979e9240c311dd8da8188e988d7576f163a0797499cad0b6649af6f9b6caecc55e00c5314f2759b6a4bfee136a6302cb5af914ecbce60bcaf77d28cf9555438a7db2afa31a8c9e68b1a5cfef354ef5b4859b0a5a669cb2a19a8b69b436061f1e24c6a48c5cb7d83af3e3251b40e1fc921708a83d4f1ffcc0c57f1cbb7cf843309aa96ae6d796222837717f46c262fe520b200266a71f14392797c2b9baa77bbce9433410b832e9385fddd23790250bbf54635cf3ea1c4406db51c8c0e6f34b8c7601d71204359b4eb22efc5035f8723f27b54c60473fe8a7b96bafb9eaa7baebe509abd2855d25ece70a3854cc6f578f32c4b3b34d3190549973d49f3c99235bf61a8cb01523a2b127e72b274e8531688a97fbe053ec3dca1921d14f254db2306f3b39da700866558de7f34a971850886e03358b9b328"}}, &(0x7f0000001840))
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r12, &(0x7f00000003c0)={0x0, &(0x7f00000004c0)=[@rdmsr={0x66, 0x18, {0x40000095}}], 0x18})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m0.483471825s ago: executing program 3 (id=1394):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"})
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x7fff, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"})
r1 = syz_open_pts(r0, 0x200)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000500000018110000", @ANYRES32=r4, @ANYRES16=r4], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x34, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x3f74, 0x4, 0x3, 0x8}, {0x0, 0xa9, 0x49, 0x6}, {0xc, 0x4b, 0x0, 0x80000001}, {0x1, 0x7, 0x7d, 0x9}, {0x8, 0x7, 0x6, 0x6}, {0xc1, 0x4, 0x0, 0x6}, {0x6, 0x0, 0xa, 0x2e}, {0x8, 0x3, 0x91, 0xe9}, {0x7, 0x3, 0x88, 0x7c}]})
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x5a, 0x1, 0x0, 0x0, {}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0)

1m0.238225893s ago: executing program 3 (id=1396):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x14cf, &(0x7f0000000140)={0x0, 0xc89e, 0x20, 0x80008, 0xc0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50)
sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f000000a300)=[{0x2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/47, 0x2f}, {&(0x7f0000000280)=""/81, 0x51}]}, {0x5781, 0x0, &(0x7f0000000980)=[{&(0x7f0000000480)=""/144, 0x90}, {&(0x7f0000000540)=""/15, 0xf}, {&(0x7f0000000580)=""/198, 0xc6}, {&(0x7f0000000700)=""/95, 0x5f}, {&(0x7f0000000780)=""/103, 0x67}, {&(0x7f0000000800)=""/183, 0xb7}, {&(0x7f00000008c0)=""/120, 0x78}, {&(0x7f0000000940)=""/33, 0x21}]}, {0xe96, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000a40)=""/80, 0x50}, {&(0x7f0000000b40)=""/179, 0xb3}, {&(0x7f0000000c00)=""/170, 0xaa}, {&(0x7f0000000cc0)=""/107, 0x6b}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/68, 0x44}]}, {0x400, 0x0, &(0x7f0000002400)=[{&(0x7f0000001e40)=""/130, 0x82}, {&(0x7f0000001f00)=""/219, 0xdb}, {&(0x7f0000002000)=""/23, 0x17}, {&(0x7f0000002040)=""/200, 0xc8}, {&(0x7f0000002140)=""/166, 0xa6}, {&(0x7f0000002200)=""/99, 0x63}, {&(0x7f0000002280)=""/26, 0x1a}, {&(0x7f00000022c0)=""/68, 0x44}, {&(0x7f0000002340)=""/189, 0xbd}]}, {0x10, 0x0, &(0x7f0000002640)=[{&(0x7f00000024c0)=""/8, 0x8}, {&(0x7f0000002500)=""/6, 0x6}, {&(0x7f0000002540)=""/225, 0xe1}]}, {0x8000, 0x0, &(0x7f0000003a80)=[{&(0x7f0000002680)=""/245, 0xf5}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/178, 0xb2}, {&(0x7f0000003840)=""/93, 0x5d}, {&(0x7f00000038c0)=""/177, 0xb1}, {&(0x7f0000003980)=""/225, 0xe1}]}, {0x3c68, 0x0, &(0x7f0000004080)=[{&(0x7f0000003b00)=""/71, 0x47}, {&(0x7f0000003b80)=""/207, 0xcf}, {&(0x7f0000003c80)=""/63, 0x3f}, {&(0x7f0000003cc0)=""/121, 0x79}, {&(0x7f0000003d40)=""/170, 0xaa}, {&(0x7f0000003e00)=""/207, 0xcf}, {&(0x7f0000003f00)=""/111, 0x6f}, {&(0x7f0000003f80)=""/242, 0xf2}]}, {0x1, 0x0, &(0x7f0000004380)=[{&(0x7f0000004100)=""/179, 0xb3}, {&(0x7f00000041c0)=""/225, 0xe1}, {&(0x7f00000042c0)=""/144, 0x90}]}, {0x7, 0x0, &(0x7f0000004680)=[{&(0x7f00000043c0)=""/111, 0x6f}, {&(0x7f0000004440)=""/238, 0xee}, {&(0x7f0000004540)=""/36, 0x24}, {&(0x7f0000004580)=""/218, 0xda}]}, {0x4, 0x0, &(0x7f0000005ac0)=[{&(0x7f00000046c0)=""/36, 0x24}, {&(0x7f0000004700)=""/73, 0x49}, {&(0x7f0000004780)=""/108, 0x6c}, {&(0x7f000000a480)=""/236, 0xec}, {&(0x7f0000004900)=""/107, 0x6b}, {&(0x7f0000004980)=""/238, 0xee}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/7, 0x7}]}, {0x8, 0x0, &(0x7f0000005c80)=[{&(0x7f0000005b40)=""/196, 0xc4}, {&(0x7f0000005c40)=""/13, 0xd}]}, {0x80000001, 0x0, &(0x7f0000007280)=[{&(0x7f0000005cc0)=""/117, 0x75}, {&(0x7f0000005d40)=""/248, 0xf8}, {&(0x7f0000005e40)=""/126, 0x7e}, {&(0x7f0000005ec0)=""/77, 0x4d}, {&(0x7f0000005f40)=""/202, 0xca}, {&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007040)=""/33, 0x21}, {&(0x7f0000007080)=""/85, 0x55}, {&(0x7f0000007100)=""/247, 0xf7}, {&(0x7f0000007200)=""/67, 0x43}]}, {0xb, 0x0, &(0x7f0000008880)=[{&(0x7f0000007340)=""/169, 0xa9}, {&(0x7f0000007400)=""/4096, 0x1000}, {&(0x7f0000008400)=""/226, 0xe2}, {&(0x7f0000008500)=""/124, 0x7c}, {&(0x7f0000008580)=""/225, 0xe1}, {&(0x7f0000008680)=""/32, 0x20}, {&(0x7f00000086c0)=""/150, 0x96}, {&(0x7f0000008780)=""/182, 0xb6}, {&(0x7f0000008840)}]}, {0x2698, 0x0, &(0x7f0000008c80)=[{&(0x7f0000008940)=""/60, 0x3c}, {&(0x7f0000008980)=""/68, 0x44}, {&(0x7f0000008a00)=""/196, 0xc4}, {&(0x7f0000008b00)=""/157, 0x9d}, {&(0x7f0000008bc0)=""/158, 0x9e}]}, {0x0, 0x0, &(0x7f000000a240)=[{&(0x7f0000008d00)=""/4096, 0x1000}, {&(0x7f0000009d00)=""/86, 0x56}, {&(0x7f0000009d80)=""/40, 0x28}, {&(0x7f0000009dc0)=""/214, 0xd6}, {&(0x7f0000009ec0)=""/245, 0xf5}, {&(0x7f0000009fc0)=""/56, 0x38}, {&(0x7f000000a000)=""/162, 0xa2}, {&(0x7f000000a400)=""/99, 0x63}, {&(0x7f000000a140)=""/221, 0xdd}]}], 0xf)
write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[], 0x78)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000004840)=0x3c3, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/mtrr\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', &(0x7f0000004800)={0xd00, 0x197, 0x19}, 0x18)
r11 = openat(r10, &(0x7f0000000100)='./proc/mtrr\x00', 0x2a940, 0x8)
ioctl(r11, 0x400c4d07, &(0x7f0000000a00)="00000200000000000000020001")
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0)

59.932295478s ago: executing program 3 (id=1397):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3f70, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000040)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00e', @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="0c0023800600120009000000"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x20008040)
r3 = openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x400000, 0x1c1)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000140)={0x5, 0xa3f, 0x2, 0x5, 0x8, 0x8})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001800000825bd7000fcdbdf258000200dfc00ff04000b000008000200ffffffff08000400", @ANYRES32=r4, @ANYBLOB="25bfab7073f649106a40491394dad807d4fe570147cd7f09ca2550"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

59.848444988s ago: executing program 39 (id=1397):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3f70, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000040)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00e', @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="0c0023800600120009000000"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x20008040)
r3 = openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x400000, 0x1c1)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000140)={0x5, 0xa3f, 0x2, 0x5, 0x8, 0x8})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001800000825bd7000fcdbdf258000200dfc00ff04000b000008000200ffffffff08000400", @ANYRES32=r4, @ANYBLOB="25bfab7073f649106a40491394dad807d4fe570147cd7f09ca2550"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

10.076938946s ago: executing program 9 (id=2032):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580), 0x0)
sendmsg$inet_sctp(r0, 0x0, 0x1)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={<r2=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r3, 0x3eb, 0x30}, 0xc)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}}, 0x18)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'veth0\x00', @broadcast})
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x30f3}, 0x8)
syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xa)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000390423bd7000fbdbdf2500000000", @ANYRES32, @ANYBLOB="81b8000000000000300012800b000100697036746e6c00"], 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844)

9.969701944s ago: executing program 9 (id=2033):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'veth1_virt_wifi\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0xfffffffe, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/13], 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(r2, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0)
unshare(0x6a040000)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
writev(r3, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb25", 0x39}], 0x1)

8.90093323s ago: executing program 9 (id=2045):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffc, @mcast2, 0x2}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x40, 0x1c1, 0x17}, 0x18) (async)
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34) (async)
r3 = epoll_create1(0x0)
epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async)
epoll_wait(r3, &(0x7f0000000240)=[{}], 0x1, 0x404) (async)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'gretap0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0) (async)
writev(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001240)="7b62945da65d934746c62127fe5f8dea297500d531af3d82a6660c404efb3d6218b5705af0b3cf2f446282ea5a43626f311c3caac11af2273194a7c9792a95245285c1b081d57c759398e010e28c3ff1ad6a39397eb54c7bd56354a5655fa08b143dd80e1ffd976335fdba870f53439b6b75c24eb44b44c28fb21a922d23ac3acee7955767f0ede9e6d818fa8b9f7b0042c00afd311a964b8aeec39c5a6ff0589ba532823880b47da1c86d22c0fb882b70e5cd3e59954a2b699ee1a4dab4139a11ab8a2c071c01aa7ee90d0153ff81185d437d4aa3700d9a73", 0xfdef}, {0x0}], 0x3)

8.900658567s ago: executing program 9 (id=2046):
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="696e6f606533322c00b14563323d2340b5fdd4d03c57b32e06f2432df669e103eeba72f9a20b3c660ccd44d3216c4de1f197ceeb8ba7"])

8.826763022s ago: executing program 9 (id=2047):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x80000000, 0x0, @vsb={0x4}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ttyS0\x00', 0x2, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x101000, 0x12d)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)

8.824958439s ago: executing program 9 (id=2048):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x54}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0)
pwrite64(r1, &(0x7f0000000140)="80845da595ed204e024d218485de430e041a6cb43f2ac343159c12718df933ad73734d7e483c882b94bf333382195e2e9850fb871d0a3a24a46320f63c872d8eee34d9485d6cb2221d864220bb04f9ec2fc3bc93bc59a24ccd0687a152e2c63ab1cca3ba7690ca3c87849b4f0e3e95a486aac46c64706b4d32b1e8a5074b8f5ca627176cd8", 0x85, 0x1)

2.328325381s ago: executing program 2 (id=2086):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
syz_emit_ethernet(0x45, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "223427d5c9a46b"}}}}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.549854741s ago: executing program 6 (id=2092):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x40000)
ioctl$BLKGETNRZONES(r1, 0x80041285, &(0x7f0000000240)=0x5)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x30, 0x1a, 0x1, 0x9, 0x25dfdb7c, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x40000) (async)
ioctl$BLKGETNRZONES(r1, 0x80041285, &(0x7f0000000240)=0x5) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x30, 0x1a, 0x1, 0x9, 0x25dfdb7c, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) (async)

1.549580684s ago: executing program 6 (id=2093):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
finit_module(r1, 0x0, 0x3)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000180)={[0x7, 0x5, 0x5, 0x7e, 0x54c, 0xb, 0x7f, 0x0, 0xff32, 0x81, 0x2, 0x5, 0x3, 0x7, 0x2, 0x8], 0x5000, 0x80000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x200000000000000, 0x0, 0x400c800}, 0x40)
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
finit_module(r1, 0x0, 0x3) (async)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000180)={[0x7, 0x5, 0x5, 0x7e, 0x54c, 0xb, 0x7f, 0x0, 0xff32, 0x81, 0x2, 0x5, 0x3, 0x7, 0x2, 0x8], 0x5000, 0x80000}) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x200000000000000, 0x0, 0x400c800}, 0x40) (async)

1.47480487s ago: executing program 6 (id=2094):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002000000000c0200000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000380)=0x5, 0x4)
read(r1, &(0x7f0000000840)=""/251, 0xfb)
sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000300)={0xa, 0x4e24, 0x2, @mcast1, 0x1}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000580)="9c61e4526715966dd2bfccb88eecafdd1cbcee590f57e4b16265df81c461528baf42a62da91f618aabd7a828b9373ea0d56a796df858e714d1e23b6f1b5e8f3bf51cac6b377385d7bf53b8d2bcf7829ed712c9c8d784f46e7a4948e1b602f501f6348d568928d3e4d83d9d26bc6643814d30d9731b32fbea54aab0d73d5b47a2293951d325944e4f927962b92a04301d9b6c6bc9f1b7e7be4eb0c9cbeb2521", 0x9f}, {&(0x7f0000000640)="9455db9d05827ade827e5e0742d23b0a685505bbfa9564091c53f1e24f4cca975952461a", 0x24}], 0x2, &(0x7f0000000a80)=[@rthdr={{0x58, 0x29, 0x39, {0x2c, 0x8, 0x2, 0x4, 0x0, [@local, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @rthdr={{0xb8, 0x29, 0x39, {0x2f, 0x14, 0x2, 0xae, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x43}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @remote, @local]}}}], 0x128}, 0x44004)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, &(0x7f0000000040))
r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000100)=0x15)
ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000000))
ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000240)={0x1, 0x136c, 0x7, 0x9be, 0x3a})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c"], 0xb4}}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0xafa, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
socket$packet(0x11, 0x2, 0x300)
r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r10, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000000380))

1.314483553s ago: executing program 2 (id=2095):
r0 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x49, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}})
r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001f070000000000000086000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0)

1.218061972s ago: executing program 6 (id=2096):
setns(0xc9, 0x0)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x4}, 0x30, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24000080)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x60}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
landlock_restrict_self(r1, 0xa)

971.203855ms ago: executing program 6 (id=2097):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffc01, 0x3]}}) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901fc03010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async)
r4 = syz_open_dev$I2C(&(0x7f0000000180), 0x2, 0x40402)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000001080)={0x1, 0xf, 0x3, &(0x7f0000001040)={0x8, "869350fe732ece7379b9f49c7406bcf1c8792b5f90e172c5c647030b3602c581d5"}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0)
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') (async)
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00')
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00')
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00')

883.527895ms ago: executing program 6 (id=2098):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005880), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000058c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000005980)={0x0, 0x0, &(0x7f0000005940)={&(0x7f0000005900)=ANY=[@ANYBLOB="1c070000", @ANYRES16=r4, @ANYBLOB="632d27bd7000fcdbdf252c00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x35cd8c14ee216813}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r1, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x3, 0x0, 0x0, {0x9, 0x9, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x3, 0x8}}, @NL80211_ATTR_FILS_KEK={0x42, 0xf2, "539bba18bbb6c5cb32fca5cfff99b3dd8ff8c5a85e5554f7a43fe771139c8d9bc090ddf9e7563ec4f4bee14d11436fd38260259f0fd7182cc2a9d6872704"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$unix(0x1, 0x2, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf2507000000080001006000000008000300", @ANYRES32=r9, @ANYBLOB="0c009900ff070000080020001400040073797a6b616c6c6572300000000000000800050006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
r12 = dup(r11)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r11, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r13 = dup(r11)
setsockopt$SO_BINDTODEVICE(r13, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x2, 0x0, 0x2000000, 0x7}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r15, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r14, 0x0, r11, 0x0, 0xffff, 0x2)
setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x36, 0xffffffb9, 0x1a}, 0x9c)
close(r10)
socket$inet_sctp(0x2, 0x1, 0x84)

779.871397ms ago: executing program 5 (id=2099):
socket$kcm(0xa, 0x3, 0x3a) (async)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60)
syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x10000) (async)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x10000)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[<r2=>0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x2, 0x0, &(0x7f00000002c0)=[0x0, <r4=>0x0]})
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000440)=[r8], 0x1, 0x800})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000380)={0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000003c0)={0x0, 0x0, <r10=>0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0xe0e0e0e0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[<r12=>0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x7, 0x5, 0x5})
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async)
r13 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r13, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r13, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[<r14=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r13, 0xc02064b6, &(0x7f00000005c0)={r14, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0]}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANE(r13, 0xc02064b6, &(0x7f00000005c0)={r14, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0]})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000700)={0x0, 0x9, &(0x7f0000000600)=[r2, r3, r4, r8, r9, r10, r11, r12, r14], &(0x7f0000000640)=[0x9, 0x80000000, 0x1], &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x48bf, 0xc9e]})

725.220649ms ago: executing program 5 (id=2100):
r0 = socket$inet_sctp(0x2, 0x4, 0x84)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000001800))

609.069041ms ago: executing program 5 (id=2101):
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x111, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0xffff7fff}}, 0x10)
ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000001c0))
write(r0, &(0x7f0000000200)="2a18810ef8531c47366532f446fbeed3adf6a56dd7ce24fc853a6605bee1951fb973273a843f3f7e0a3209822be16771fb5023cc7c13547df5f3b478f3ba956ea0aae666e0b3", 0x46)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r1}}, 0x18)
ioctl$USBDEVFS_RESET(r0, 0x5514)
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000300)={0x19e1, 0x1b, [{0xc, 0x1}, {0xc}, {0x1, 0x1}, {0xf, 0x1}, {0xe}, {0xc, 0x1}, {0xa, 0x1}, {0x5, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0xc}, {0x4}, {0xe}, {0xb}, {0xf, 0x1}, {0xc}, {0x7, 0x1}, {0xb}, {0xa, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x3}, {0x7, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x8, 0x1}]})
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @ib={0x1b, 0xff, 0x6, {"2c2db2f9c82f44f0a1698e71289e4fb0"}, 0x3ff, 0x2, 0x5}}}, 0x90)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000440)=0xc12, 0x4)
ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f00000004c0)=@attr_other={0x0, 0x32c6debd, 0x2, &(0x7f0000000480)=0x4c8})
readv(r0, &(0x7f0000000500), 0x0)
ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0)
ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000600)={&(0x7f0000000540)=[{0x9, 0x2d, 0x1, 0x4}, {0x4da, 0xffffffff, 0x233, 0x2}, {0x8ef, 0x2, 0x8, 0x6}, {0x8, 0xb, 0xffff, 0xb8}, {0x9, 0x0, 0x44a, 0x9}], 0x5, 0x20, 0x3})
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000640)={0x3, {{0xa, 0x4e20, 0x1ff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xb}}, {{0xa, 0x4e21, 0x6, @local, 0x5}}}, 0x108)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000007c0)={<r4=>0x0, @dev}, &(0x7f0000000800)=0xc)
sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000840)=@getsa={0x44c, 0x12, 0x200, 0x70bd29, 0x25dfdbfd, {@in6=@private1, 0x4d4, 0xa, 0x3c}, [@offload={0xc, 0x1c, {r4, 0x3}}, @user_kmaddress={0x2c, 0x13, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x0, 0x2}}, @migrate={0x134, 0x11, [{@in=@empty, @in6=@private2, @in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x33, 0x0, 0x0, 0x3502, 0xa, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in=@local, @in6=@mcast2, @in6=@mcast1, 0x3c, 0x4, 0x0, 0x3504, 0xa, 0xa}, {@in=@loopback, @in=@broadcast, @in=@private=0xa010100, @in=@empty, 0xff, 0x2, 0x0, 0x3502, 0x2, 0xa}, {@in6=@local, @in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@multicast2, 0x33, 0x3, 0x0, 0x3501, 0x2}]}, @migrate={0x180, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2, @in6=@remote, @in6=@rand_addr=' \x01\x00', 0x32, 0x5, 0x0, 0x0, 0xa}, {@in6=@local, @in=@private=0xa010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x3c, 0x0, 0x0, 0x3502, 0xa}, {@in=@rand_addr=0x64010100, @in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in6=@mcast1, 0x32, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in6=@mcast1, @in=@private=0xa010100, @in=@broadcast, @in6=@rand_addr=' \x01\x00', 0xff, 0x0, 0x0, 0x3503, 0xa, 0x2}, {@in=@rand_addr=0x64010102, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, @in=@local, 0x6c, 0x4, 0x0, 0x3500, 0x2, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x0, 0xa}}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x0, 0x4e22, 0x6, 0xa, 0xa0, 0x80, 0x89, 0x0, 0xee00}, {0x8000, 0xc0000000000000, 0x9, 0x5, 0x5, 0xffffffffffffff01, 0x800, 0x5}, {0x2, 0x5a, 0x0, 0x8}, 0xf36, 0x6e6bbc, 0x2, 0x1}}, @migrate={0x50, 0x11, [{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, @in6=@mcast1, @in6=@mcast2, 0x2b, 0x3, 0x0, 0x3504, 0x0, 0xa}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xb}, @XFRMA_SET_MARK={0x8, 0x1d, 0xf}]}, 0x44c}, 0x1, 0x0, 0x0, 0x20000010}, 0x1)
r5 = openat$incfs(r0, &(0x7f0000000d40)='.pending_reads\x00', 0x200201, 0x128)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000dc0)={0x1, 0x10, 0xfa00, {&(0x7f0000000d80), r2}}, 0x18)
ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000e40)=@attr_other={0x0, 0xe, 0x4, &(0x7f0000000e00)=0x1})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000e80)={0xe3f, 0x4, 0x0, 'queue1\x00', 0x6})
file_getattr(0xffffffffffffff9c, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80), 0x18, 0x800)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000fc0)={0x36, [[0x0, 0x6, 0x47, 0x100, 0x400, 0x8, 0x3, 0x6], [0x80000001, 0xbb1, 0x59, 0x4, 0x101, 0x4, 0xa1b, 0x45032aae], [0x78, 0x8, 0x9, 0x9aa, 0x1, 0xd0e, 0x5]], '\x00', [{0x10, 0xb8, 0x0, 0x1, 0x1, 0x1}, {0xa, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x17e077c4, 0x1, 0x0, 0x1}, {0x7, 0x7ff, 0x0, 0x0, 0x1, 0x1}, {0x6, 0xd}, {0xe21, 0x5, 0x1, 0x1, 0x0, 0x1}, {0xbe, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x1777, 0x78c, 0x1, 0x0, 0x1}, {0x30e, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x90000, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x7, 0x1, 0x1, 0x1}], '\x00', 0x1})
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000001340)={0x0, &(0x7f0000001240)="40fda0833f1418734592d148159d8922cdbc40989a3381e00b66722cb06717d968c469d194fcec1a371308c2f1d62ccb0c2cbcc681c9f2149f976cce6f444b6a7b3b86b71ec447d02f417b0a76f3950e8016827d4181b5e523c4cbf7d4bf2d16afbde28c04f2c6f5b6f653487d2169cb1ae639aa61577fb20c96dd4036a9f9c3004561a9a3b072a22d13f76a613db5081762a5f197d4bb8c1acdde313c7c3f17514cd7e442442dfc187b22dde434a7c9c691398ad425da9f87810a2c6da00d714efd0a728976b1667f29", 0xca})
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x34, 0x7, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x800)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)

608.161855ms ago: executing program 5 (id=2102):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x26020480)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x7, 0x10003}, 0x0)
r4 = fanotify_init(0x81, 0x40000)
fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0)
read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020)
open(&(0x7f0000000300)='./bus\x00', 0x0, 0x150)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000000f0605000000000000000000010000097a59b4ac1ef96a2cc629ff5bcdfcf1abfa5b97f22539a34265e49a1acdf82907b7f78200d2a7432a08fcd82379117da64be3ac4a75680b47c242e1692ef21cd61c90d9d09581eaf8f92409faf97b3c6327355e16991c13acb0a248da84fb603e9c215939a679fff00e9697d33861d77ecdb86a068f976fe29c31ebad2681b47fd2ba42f5973c6afe18e5e00e52b6ae24cc4378322dbdf3104aa93d5165e1ef227397d41e62be065e0eaad5"], 0x14}, 0x1, 0x0, 0x0, 0x8490}, 0x80)
recvmsg$can_raw(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)=""/110, 0x14}], 0x1}, 0x40000040)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x42}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffffc01}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000009e40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r15, @ANYBLOB="2e003300d0000000080211000001080211000000505050505050000425", @ANYRES64=r12], 0x4c}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r10, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x6, 0x7}, {0xd, 0x4}, {0x1, 0x5}, {0x0, 0x6}, {0x3, 0x2}, {0xe0, 0x5}], "13b36f480d7854da"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x49, 0x1}, {0xb, 0x1}, {0x0, 0x6}, {0x10, 0x2}], "e3a1f064d5382dae"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x10, 0x4}], "4fa6d274d52a1a07"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x1, 0x3}], "7461bd4c3f71c804"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x1, 0x1}, {0x3, 0x1}, {0x3, 0x2}, {0x9, 0x4}, {0x4}, {0x8, 0x2}, {0x8, 0x2}, {0x1, 0x1}, {0x9, 0x3}], "43aab0fb1422ff8e"}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48004}, 0x80)

532.475673ms ago: executing program 5 (id=2103):
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x12, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x6)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x3f7, 0x8000, 0x0, 0x163}, &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000000))
ioctl$XFS_IOC_SCRUB_METADATA(r2, 0xc040583c, &(0x7f0000000080)={0x5, 0xe8, 0x4, 0x1, 0x7})
io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1)
ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000))

531.964641ms ago: executing program 5 (id=2104):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/17, 0x11}, 0x10000e6c}], 0x1, 0x18103, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x400000000010, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r3)
epoll_create1(0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet6_udp(0xa, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
pipe2(&(0x7f0000000080), 0x800)
socket$inet6(0xa, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)

191.303024ms ago: executing program 2 (id=2105):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000480)) (async)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000480))
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040f0400011620"], 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0x80, 0xffffffff}, {0x6, 0x681}, 0xab4, [0x7f9, 0x800007b, 0x3, 0xffffffffffffff80, 0xffffffff80000000, 0x66, 0x1000, 0x5f, 0x4, 0xffffffff, 0x40010, 0x80000000011, 0x0, 0xada, 0x0, 0xe3]}) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0x80, 0xffffffff}, {0x6, 0x681}, 0xab4, [0x7f9, 0x800007b, 0x3, 0xffffffffffffff80, 0xffffffff80000000, 0x66, 0x1000, 0x5f, 0x4, 0xffffffff, 0x40010, 0x80000000011, 0x0, 0xada, 0x0, 0xe3]})
r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x169101, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000180)) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000180))
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x80, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB='\f\x00}'], 0x28}}, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
socket$netlink(0x10, 0x3, 0xe) (async)
r13 = socket$netlink(0x10, 0x3, 0xe)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r13, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x30, r8, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d7}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40100}, 0x4080000)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0x5}, {0x0, 0xfff1}, {0x6, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0x5}, {0x0, 0xfff1}, {0x6, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10)
symlinkat(0x0, 0xffffffffffffffff, 0x0) (async)
symlinkat(0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0xcc6fc5564f7ff3b6, 0x0)

53.464924ms ago: executing program 2 (id=2106):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0xc0884123, &(0x7f0000000080))
r3 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x2ba1, 0x4)
sendmmsg(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffff}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x44}, 0x1, 0xba01, 0x0, 0x44844}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x440080c0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socket(0x10, 0x3, 0x0) (async)
syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0xc0884123, &(0x7f0000000080)) (async)
socket(0x11, 0x3, 0x0) (async)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x2ba1, 0x4) (async)
sendmmsg(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffff}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x44}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) (async)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x440080c0}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) (async)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)

513.634µs ago: executing program 2 (id=2107):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_gettime(r0, &(0x7f0000000000))
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async)
timer_gettime(r0, &(0x7f0000000000)) (async)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async)

0s ago: executing program 2 (id=2108):
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source\x19oV_\\\xf2\x9f[`P\v\x84T\x05\xd0C4F\r!\xb7:\x89H\xab3\x9c\xb8\xaf\'', &(0x7f00000002c0)='\xb3\xa4\x05\xba\x9c\x90\xe6\xf9xl\a\x1f\xd7nl\x9f\"\xd2\x9a\x1db\x10G\x8b\xd4p\x002\x8a\xd3\xa5\'\xa6<J\xa3Z\xfb\xc1>\x88\xb0\x91g\xedE-\f\x0ec\xa2\xe1G\x7f\x95S\xc7\xb9\x93\x99\x04\xecDg~)\x15\x97\x83\xe8V\xd1\xa2r~\x80\x98{\xa8\xc0u\x9dr\r\xdd7\xa73\x95\x1c\x17\xff\x0f\x00\x005\xc0d\x02z`\x00\x00\x85s@\xa4O\xe8[\xaa\xcd\xc1\xd7K\x01\x00\x95\xe2M\x99\xa6\x80+,\x01G\xa3PK\xb0\\\xd3;\xefEp{L\xc2Sm\x19\'\x87\xd7I&\x90\x11\v\x0e\xe5JW\xe1a2NBp~\xd3$\xbe7O\xe8j\xb4!R\xd9G\x8e\xb9\x9f\x8d\xc9\x00\x00_\xd4\xd0\xbb\xde\xfb\x89:\xa4 8\x1f\xa6K\xebC\b\xc3\xb4m\x9a\xc9^', 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
setns(0xc9, 0x0)
r4 = socket(0x2a, 0x2, 0x5)
connect$inet6(r4, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @private1, 0x200}, 0x1c)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000180), 0x400, &(0x7f00000007c0)={[], [{@appraise}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_eq}, {@audit}]})
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={<r8=>0x0, 0x8, 0xe59}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000006c0)={r8, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x10, 0x200, 0x4, 0x6}, &(0x7f0000000780)=0x98)
r9 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
read$snddsp(r9, 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000bc0)={0x2020}, 0x2020)
fchdir(r3)

0s ago: executing program 6 (id=2109):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f00000002c0)={0x3d, &(0x7f0000000140)=[{0x46, '\x00', @st={0x4, [{0x1, @uvalue=0xf}, {0x2, @uvalue=0x9}, {0x3}, {0x1, @svalue=0x2790}]}, 0xc70a}, {0x26, '\x00', @buffer={"a74a0405000025e000000000733e00", 0x20}, 0x7}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/failslab/ignore-gfp-wait\x00', 0x1, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000100)='THAWED\x00', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000200000000000008fe", 0x1e)
mmap$IORING_OFF_SQ_RING(0x0, 0x93b9, 0x1000006, 0x22011, r3, 0x0)
sendto$l2tp6(r3, &(0x7f0000000100)="e203e751d32fa37be1fbae6a381174a1fe77cf8682aca38cb3678a1d3476046fa2b7ea7cb1a71ba34caa037a2822967c777697d5aa37f6bb7c4e3821a0b7f0c938b5b3a1ef1a8ffbe9a0655acd15cb780986f93f7d8a7212cffcaf57a3a80f239899d89bb50d08c91a2bd052fd58f128059708aecea1a7ac3e3e213d6a73dba0efcdbdd5bd756eb89c13c6438e7e987cd42a6340321428e4b3882f98591b17398d918023bc042e1b6e192c0d6fe79dbe55046936da9daacb13533b5d99ddfb810beed5d2ceabf6bf69125401b300ebdf40426e4a2f4f986b22173f4b5ebf7874b9c0d9d3f14f6c296e7520149fd4c9f923737122f6693990a82185789f4633", 0xff, 0x4000, &(0x7f0000000200)={0xa, 0x0, 0x4, @mcast1, 0x3, 0x400004}, 0xfffffffffffffe8f)
clock_gettime(0x0, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0})
nanosleep(&(0x7f0000000240)={r5, r6+10000000}, 0x0)
ioctl(r3, 0xc138fd02, &(0x7f00000002c0)="0400000000000000a99fc6e9fe7205550aed89f0b6532259b0b138d5ee46ace27b661d4935fdf1df0fd383f5dc63391d26e2b3f6a0968836385bd588c096434eedbfa04534dc5a2cf816933445c880f098653183790ffcb2b758ce09ec6a2f60f39551cf19760410096e3f05164469a5ad65ca79b54edb17dd2cdb32195843287fd19db9829d7ebddec1027c5fc856cbb7a114fb5c8f17918a56461fbb23b7f8e6fc0aca6e637823eda219520feb401fa5bcdf2d4b3925f8e6ba")

kernel console output (not intermixed with test programs):

05] usb 11-1: GET_CAPABILITIES returned 0
[  188.277066][ T9005] usbtmc 11-1:16.0: can't read capabilities
[  188.278270][ T5516] usb 10-1: Invalid ep0 maxpacket: 64
[  188.282351][ T5516] usb usb10-port1: attempt power cycle
[  188.358187][   T42] kauditd_printk_skb: 23062 callbacks suppressed
[  188.358204][   T42] audit: type=1400 audit(1787359898.143:32611): avc:  denied  { write } for  pid=11681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  188.397584][T11685] xt_nat: multiple ranges no longer supported
[  188.434847][   T42] audit: type=1400 audit(1787359898.218:32612): avc:  denied  { write } for  pid=11686 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  188.498421][ T5519] usb 11-1: USB disconnect, device number 9
[  188.531952][   T42] audit: type=1400 audit(1787359898.302:32613): avc:  denied  { write } for  pid=11694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  188.606199][   T42] audit: type=1400 audit(1787359898.377:32614): avc:  denied  { write } for  pid=11701 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  188.623594][   T42] audit: type=1400 audit(1787359898.396:32615): avc:  denied  { recv } for  pid=5675 comm="sshd-session" saddr=10.0.2.2 src=41632 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  188.652302][   T42] audit: type=1400 audit(1787359898.396:32616): avc:  denied  { recv } for  pid=5675 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=35760 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  188.662534][ T5516] usb 10-1: new low-speed USB device number 24 using dummy_hcd
[  188.685406][ T5516] usb 10-1: Invalid ep0 maxpacket: 64
[  188.824909][ T5516] usb 10-1: new low-speed USB device number 25 using dummy_hcd
[  188.847970][ T5516] usb 10-1: Invalid ep0 maxpacket: 64
[  188.850715][ T5516] usb usb10-port1: unable to enumerate USB device
[  188.870795][   T42] audit: type=1400 audit(1787359898.630:32617): avc:  denied  { egress } for  pid=36 comm="kworker/u33:0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  188.881683][   T42] audit: type=1400 audit(1787359898.630:32618): avc:  denied  { sendto } for  pid=36 comm="kworker/u33:0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  189.218712][  T848] usb 14-1: new high-speed USB device number 5 using dummy_hcd
[  189.366483][ T5738] Bluetooth: hci1: unexpected event for opcode 0x2041
[  189.381583][  T848] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  189.385710][  T848] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  189.388603][  T848] usb 14-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config
[  189.393440][  T848] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66
[  189.397162][  T848] usb 14-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  189.403551][  T848] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  189.406803][  T848] usb 14-1: Product: syz
[  189.408534][  T848] usb 14-1: Manufacturer: syz
[  189.420844][  T848] cdc_wdm 14-1:1.0: skipping garbage
[  189.423157][  T848] cdc_wdm 14-1:1.0: skipping garbage
[  189.429822][  T848] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device
[  189.432732][  T848] cdc_wdm 14-1:1.0: Unknown control protocol
[  189.478720][ T5738] Bluetooth: hci1: unexpected subevent 0x19 length: 24 < 28
[  189.641680][    C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71
[  189.644876][    C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes
[  189.649237][    C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71
[  189.651754][    C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes
[  189.656398][    C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71
[  189.659184][    C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes
[  189.661999][    C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71
[  189.664824][    C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes
[  189.668480][    C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71
[  189.671298][    C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes
[  189.674215][    C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71
[  189.676938][    C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes
[  189.679640][    C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71
[  189.682326][    C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes
[  189.685383][    C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71
[  189.688128][    C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes
[  189.691021][    C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71
[  189.693503][    C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes
[  189.696025][    C0] cdc_wdm 14-1:1.0: nonzero urb status received: -71
[  189.698586][    C0] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes
[  189.708063][ T5808] usb 14-1: USB disconnect, device number 5
[  189.729526][ T5879] usb-storage 8-1:8.38: USB Mass Storage device detected
[  189.742848][ T5879] usb-storage 8-1:8.38: Quirks match for vid 085a pid 0026: 4
[  189.808286][T11744] i2c i2c-0: delete_device: Can't find device in list
[  189.823420][   T42] audit: type=1400 audit(1787359899.519:32619): avc:  denied  { ioctl } for  pid=11743 comm="syz.9.1372" path="socket:[45962]" dev="sockfs" ino=45962 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  189.841172][ T5879] usb-storage 8-1:8.35: USB Mass Storage device detected
[  189.846398][ T5879] usb-storage 8-1:8.35: Quirks match for vid 085a pid 0026: 4
[  189.924070][ T5879] usb-storage 8-1:8.119: USB Mass Storage device detected
[  189.925392][   T42] audit: type=1400 audit(1787359899.612:32620): avc:  denied  { read } for  pid=11750 comm="syz.9.1374" lport=53398 faddr=::ffff:172.20.255.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  189.927867][ T5879] usb-storage 8-1:8.119: Quirks match for vid 085a pid 0026: 4
[  190.016471][ T5879] usb-storage 8-1:8.68: USB Mass Storage device detected
[  190.022260][ T5879] usb-storage 8-1:8.68: Quirks match for vid 085a pid 0026: 4
[  190.087787][ T5879] rndis_host 8-1:8.238: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  190.095017][ T5879] usb-storage 8-1:8.238: USB Mass Storage device detected
[  190.100798][ T5879] usb-storage 8-1:8.238: Quirks match for vid 085a pid 0026: 4
[  190.172482][  T848] usb 8-1: USB disconnect, device number 4
[  190.540285][T11736] Process accounting resumed
[  190.650632][  T848] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  190.822527][  T848] usb 8-1: Using ep0 maxpacket: 8
[  190.825964][  T848] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  190.833578][  T848] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  190.838559][  T848] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  190.842313][  T848] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  190.846882][  T848] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  190.852255][  T848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.082548][  T848] usb 8-1: GET_CAPABILITIES returned 0
[  191.084439][  T848] usbtmc 8-1:16.0: can't read capabilities
[  191.133018][T11816] syzkaller0: left promiscuous mode
[  191.135374][T11816] syzkaller0: left allmulticast mode
[  191.215070][T11821] syzkaller0: entered promiscuous mode
[  191.220757][T11821] syzkaller0: entered allmulticast mode
[  191.304953][ T9005] usb 8-1: USB disconnect, device number 5
[  191.344202][T11826] block2mtd: error: cannot open device /dev/loop0
[  191.388007][T11828] bad cache= option: none��
[  191.388007][T11828] 
[  191.391990][T11828] CIFS: VFS: bad cache= option: none��
[  191.881251][ T5879] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  192.041740][ T5879] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  192.048722][ T5879] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.053427][ T5879] usb 11-1: Product: syz
[  192.055305][ T5879] usb 11-1: Manufacturer: syz
[  192.057417][ T5879] usb 11-1: SerialNumber: syz
[  192.108984][ T5808] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  192.355948][T11854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.366605][T11854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.381752][ T9005] usb 14-1: new high-speed USB device number 6 using dummy_hcd
[  192.464515][ T8703] usb 11-1: USB disconnect, device number 10
[  192.553422][ T9005] usb 14-1: Using ep0 maxpacket: 8
[  192.556207][ T9005] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  192.560419][ T9005] usb 14-1: config index 0 descriptor too short (expected 301, got 45)
[  192.563170][ T9005] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  192.566195][ T9005] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  192.569687][ T9005] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  192.573015][ T9005] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  192.577535][ T9005] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.606111][    T9] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  192.787855][    T9] usb 10-1: Using ep0 maxpacket: 8
[  192.790828][    T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  192.795987][    T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  192.801028][    T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  192.802791][ T9005] usb 14-1: usb_control_msg returned -32
[  192.805268][    T9] usb 10-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[  192.807237][ T9005] usbtmc 14-1:16.0: can't read capabilities
[  192.812202][    T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024
[  192.819027][    T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024
[  192.823350][    T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  192.828971][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.975237][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  192.979638][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  192.983949][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  192.992599][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  192.996327][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.054029][    T9] usb 10-1: usb_control_msg returned -71
[  193.058080][    T9] usbtmc 10-1:16.0: can't read capabilities
[  193.069671][    T9] usb 10-1: USB disconnect, device number 26
[  193.187623][T11872] usbtmc 14-1:16.0: INITIATE_CLEAR returned 0
[  193.209987][T11872] tmpfs: Unknown parameter '�1��hFQ����<�!����)/|����j�?��䙣f�Ի
[  193.209987][T11872] '
[  193.225966][ T5808] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive
[  193.229135][ T5808] ath9k_htc: Failed to initialize the device
[  193.232298][T11858] lo speed is unknown, defaulting to 1000
[  193.238513][ T8703] usb 11-1: ath9k_htc: USB layer deinitialized
[  193.459371][T11858] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.462160][T11858] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.464793][T11858] bridge_slave_0: entered allmulticast mode
[  193.468527][T11858] bridge_slave_0: entered promiscuous mode
[  193.472426][T11858] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.474986][T11858] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.476408][ T9005] usb 14-1: USB disconnect, device number 6
[  193.477535][T11858] bridge_slave_1: entered allmulticast mode
[  193.488904][T11858] bridge_slave_1: entered promiscuous mode
[  193.532445][T11858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.539026][T11858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.568778][T11858] team0: Port device team_slave_0 added
[  193.573344][T11858] team0: Port device team_slave_1 added
[  193.595796][T11858] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.598449][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  193.609515][T11858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.615274][T11858] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.619004][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  193.628756][T11858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.676227][T11858] hsr_slave_0: entered promiscuous mode
[  193.678868][T11858] hsr_slave_1: entered promiscuous mode
[  193.794492][T11895] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1402'.
[  193.798559][   T42] kauditd_printk_skb: 18 callbacks suppressed
[  193.798584][   T42] audit: type=1400 audit(1787359903.234:32639): avc:  denied  { write } for  pid=11892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  193.864599][   T42] audit: type=1400 audit(1787359903.299:32640): avc:  denied  { write } for  pid=11898 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  193.973140][   T42] audit: type=1400 audit(1787359903.393:32641): avc:  denied  { write } for  pid=11903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  194.035994][   T42] audit: type=1400 audit(1787359903.458:32642): avc:  denied  { write } for  pid=11907 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  194.053468][   T42] audit: type=1400 audit(1787359903.468:32643): avc:  denied  { unmount } for  pid=9506 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  194.114122][T11909] netlink: 'syz.5.1405': attribute type 19 has an invalid length.
[  194.158192][   T42] audit: type=1400 audit(1787359903.561:32644): avc:  denied  { write } for  pid=11916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  194.234166][   T42] audit: type=1400 audit(1787359903.636:32645): avc:  denied  { write } for  pid=11929 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  194.245289][T11931] /dev/sr0: Can't open blockdev
[  194.365395][   T42] audit: type=1400 audit(1787359903.767:32646): avc:  denied  { write } for  pid=11945 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  194.408948][   T42] audit: type=1400 audit(1787359903.805:32647): avc:  denied  { write } for  pid=11952 comm="syz.9.1416" name="functions" dev="configfs" ino=13589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  194.413914][T11953] Unable to locate . in FUNC.INSTANCE
[  194.436733][   T42] audit: type=1400 audit(1787359903.814:32648): avc:  denied  { write } for  pid=11952 comm="syz.9.1416" name="functions" dev="configfs" ino=13589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  194.454918][T11956] CUSE: info not properly terminated
[  194.610053][T11961] lo speed is unknown, defaulting to 1000
[  194.613259][T11858] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  194.634276][T11858] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  194.636971][T11948] syzkaller0: left promiscuous mode
[  194.638809][T11948] syzkaller0: left allmulticast mode
[  194.654081][T11858] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  194.663279][T11858] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  194.667130][T11858] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  194.674492][T11858] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  194.722136][T11858] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  194.737000][T11858] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  195.024205][T12008] bond0: entered promiscuous mode
[  195.026382][T12008] bond_slave_0: entered promiscuous mode
[  195.028940][T12008] bond_slave_1: entered promiscuous mode
[  195.098006][T11858] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.114064][T11858] 8021q: adding VLAN 0 to HW filter on device team0
[  195.127639][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.130917][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.158522][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.161675][ T6554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.192473][ T5743] Bluetooth: hci0: command tx timeout
[  195.374031][    T9] usb 11-1: new high-speed USB device number 11 using dummy_hcd
[  195.489250][T11858] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.530885][T11858] veth0_vlan: entered promiscuous mode
[  195.534977][    T9] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  195.538956][T11858] veth1_vlan: entered promiscuous mode
[  195.549542][    T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.554310][    T9] usb 11-1: Product: syz
[  195.556356][    T9] usb 11-1: Manufacturer: syz
[  195.558373][    T9] usb 11-1: SerialNumber: syz
[  195.563519][T11858] veth0_macvtap: entered promiscuous mode
[  195.573921][T11858] veth1_macvtap: entered promiscuous mode
[  195.586538][T11858] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.600442][T11858] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.614073][    T9] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  195.663167][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.674084][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.773502][ T6554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.781286][ T6554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.824616][ T6554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.827180][ T6554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.832698][ T8703] usb 11-1: USB disconnect, device number 11
[  195.854827][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.860318][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.968693][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'.
[  195.975286][T12078] netlink: 'syz.2.1432': attribute type 10 has an invalid length.
[  195.978571][T12078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'.
[  195.996396][T12078] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1432'.
[  196.178298][T12101] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2054 sclass=netlink_tcpdiag_socket pid=12101 comm=syz.5.1438
[  196.239049][T12114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.243279][T12112] netlink: 'syz.2.1439': attribute type 9 has an invalid length.
[  196.423006][T12126] ip_tables: iptables: counters copy to user failed while replacing table
[  196.499700][T12133] netlink: 'syz.6.1446': attribute type 26 has an invalid length.
[  196.673788][T12150] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1449'.
[  196.677963][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1449'.
[  196.742637][    T9] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive
[  196.749723][    T9] ath9k_htc: Failed to initialize the device
[  196.755322][ T8703] usb 11-1: ath9k_htc: USB layer deinitialized
[  196.850246][  T848] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  196.878926][T12163] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  196.913841][T12164] 9pnet_virtio: no channels available for device syz
[  196.916343][T12166] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1454'.
[  196.916382][T12164] 9pnet_virtio: no channels available for device syz
[  196.919949][T12166] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  196.922196][T12164] 9pnet_virtio: no channels available for device syz
[  196.929844][T12164] 9pnet_virtio: no channels available for device syz
[  196.932926][T12164] 9pnet_virtio: no channels available for device syz
[  196.936044][T12164] 9pnet_virtio: no channels available for device syz
[  196.940339][T12164] 9pnet_virtio: no channels available for device syz
[  196.944344][T12164] 9pnet_virtio: no channels available for device syz
[  196.949926][T12164] 9pnet_virtio: no channels available for device syz
[  196.953165][T12164] 9pnet_virtio: no channels available for device syz
[  196.956363][T12164] 9pnet_virtio: no channels available for device syz
[  196.959499][T12164] 9pnet_virtio: no channels available for device syz
[  196.962660][T12164] 9pnet_virtio: no channels available for device syz
[  196.967318][T12164] 9pnet_virtio: no channels available for device syz
[  196.971000][T12164] 9pnet_virtio: no channels available for device syz
[  196.974162][T12164] 9pnet_virtio: no channels available for device syz
[  196.977585][T12164] 9pnet_virtio: no channels available for device syz
[  196.980752][T12164] 9pnet_virtio: no channels available for device syz
[  196.983890][T12164] 9pnet_virtio: no channels available for device syz
[  196.987002][T12164] 9pnet_virtio: no channels available for device syz
[  196.991334][T12164] 9pnet_virtio: no channels available for device syz
[  196.994543][T12164] 9pnet_virtio: no channels available for device syz
[  196.997675][T12164] 9pnet_virtio: no channels available for device syz
[  197.001389][T12164] 9pnet_virtio: no channels available for device syz
[  197.004566][T12164] 9pnet_virtio: no channels available for device syz
[  197.007722][T12164] 9pnet_virtio: no channels available for device syz
[  197.011416][  T848] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  197.016191][T12164] 9pnet_virtio: no channels available for device syz
[  197.020812][  T848] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  197.025173][  T848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.028898][T12164] 9pnet_virtio: no channels available for device syz
[  197.033926][T12164] 9pnet_virtio: no channels available for device syz
[  197.039375][T12164] 9pnet_virtio: no channels available for device syz
[  197.043747][  T848] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  197.047230][T12164] 9pnet_virtio: no channels available for device syz
[  197.050306][  T848] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81
[  197.054367][T12164] 9pnet_virtio: no channels available for device syz
[  197.057141][  T848] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1
[  197.061426][  T848] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[  197.065320][T12164] 9pnet_virtio: no channels available for device syz
[  197.068533][T12164] 9pnet_virtio: no channels available for device syz
[  197.071597][T12164] 9pnet_virtio: no channels available for device syz
[  197.074898][  T848] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[  197.079799][  T848] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  197.085806][ T8703] usb 11-1: new high-speed USB device number 12 using dummy_hcd
[  197.089375][T12164] 9pnet_virtio: no channels available for device syz
[  197.097973][T12164] 9pnet_virtio: no channels available for device syz
[  197.103794][  T848] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[  197.105846][T12164] 9pnet_virtio: no channels available for device syz
[  197.110227][  T848] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  197.110560][T12164] 9pnet_virtio: no channels available for device syz
[  197.119315][T12164] 9pnet_virtio: no channels available for device syz
[  197.122320][T12164] 9pnet_virtio: no channels available for device syz
[  197.125315][  T848] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  197.126015][T12164] 9pnet_virtio: no channels available for device syz
[  197.133858][T12164] 9pnet_virtio: no channels available for device syz
[  197.136573][T12164] 9pnet_virtio: no channels available for device syz
[  197.141504][T12164] 9pnet_virtio: no channels available for device syz
[  197.143717][T12164] 9pnet_virtio: no channels available for device syz
[  197.145864][T12164] 9pnet_virtio: no channels available for device syz
[  197.148365][T12164] 9pnet_virtio: no channels available for device syz
[  197.150393][T12164] 9pnet_virtio: no channels available for device syz
[  197.152565][T12164] 9pnet_virtio: no channels available for device syz
[  197.155479][T12164] 9pnet_virtio: no channels available for device syz
[  197.158026][T12164] 9pnet_virtio: no channels available for device syz
[  197.160882][T12164] 9pnet_virtio: no channels available for device syz
[  197.163185][T12164] 9pnet_virtio: no channels available for device syz
[  197.165434][T12164] 9pnet_virtio: no channels available for device syz
[  197.167681][T12164] 9pnet_virtio: no channels available for device syz
[  197.170939][T12164] 9pnet_virtio: no channels available for device syz
[  197.173233][T12164] 9pnet_virtio: no channels available for device syz
[  197.175571][T12164] 9pnet_virtio: no channels available for device syz
[  197.177928][T12164] 9pnet_virtio: no channels available for device syz
[  197.180760][T12164] 9pnet_virtio: no channels available for device syz
[  197.183080][T12164] 9pnet_virtio: no channels available for device syz
[  197.185313][T12164] 9pnet_virtio: no channels available for device syz
[  197.187594][T12164] 9pnet_virtio: no channels available for device syz
[  197.246997][ T8703] usb 11-1: device descriptor read/64, error -71
[  197.336296][ T5743] Bluetooth: hci4: unexpected event for opcode 0x0402
[  197.344617][T12181] MTRR 2 not used
[  197.414938][ T5743] Bluetooth: hci0: command tx timeout
[  197.440205][  T848] usb 7-1: USB disconnect, device number 4
[  197.453011][  T848] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  197.463301][  T848] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  197.467245][  T848] keyspan 7-1:1.0: device disconnected
[  197.521794][ T8703] usb 11-1: new high-speed USB device number 13 using dummy_hcd
[  197.553839][T12191] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1463'.
[  197.631999][T12195] fuse: Unknown parameter 'obj_user'
[  197.660646][ T8703] usb 11-1: device descriptor read/64, error -71
[  197.776733][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1467'.
[  197.790873][ T8703] usb usb11-port1: attempt power cycle
[  197.811867][T12211] syzkaller0: entered promiscuous mode
[  197.814026][T12211] syzkaller0: entered allmulticast mode
[  197.844093][T12211] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1469'.
[  197.857410][ T5743] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  197.860589][ T5743] CPU: 1 UID: 0 PID: 5743 Comm: kworker/u34:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  197.860618][ T5743] Tainted: [L]=SOFTLOCKUP
[  197.860624][ T5743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  197.860643][ T5743] Workqueue: hci4 hci_rx_work
[  197.860715][ T5743] Call Trace:
[  197.860730][ T5743]  <TASK>
[  197.860738][ T5743]  dump_stack_lvl+0x100/0x190
[  197.860773][ T5743]  sysfs_warn_dup.cold+0x1c/0x28
[  197.860817][ T5743]  sysfs_create_dir_ns+0x24b/0x2b0
[  197.860852][ T5743]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  197.860876][ T5743]  ? find_held_lock+0x2b/0x80
[  197.860898][ T5743]  ? kobject_add_internal+0x25f/0x930
[  197.860934][ T5743]  ? kobject_add_internal+0x25f/0x930
[  197.860958][ T5743]  ? do_raw_spin_unlock+0x145/0x1e0
[  197.860978][ T5743]  kobject_add_internal+0x2c8/0x930
[  197.861003][ T5743]  kobject_add+0x16a/0x1e0
[  197.861021][ T5743]  ? __pfx_kobject_add+0x10/0x10
[  197.861039][ T5743]  ? class_to_subsys+0x10f/0x150
[  197.861070][ T5743]  ? kobject_put+0xb9/0x640
[  197.861089][ T5743]  ? _raw_spin_unlock+0x28/0x50
[  197.861123][ T5743]  device_add+0x294/0x1970
[  197.861143][ T5743]  ? __pfx_dev_set_name+0x10/0x10
[  197.861164][ T5743]  ? __pfx_device_add+0x10/0x10
[  197.861181][ T5743]  ? mgmt_send_event_skb+0x2fb/0x460
[  197.861208][ T5743]  hci_conn_add_sysfs+0x1a3/0x260
[  197.861226][ T5743]  le_conn_complete_evt+0x121b/0x2120
[  197.861260][ T5743]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  197.861284][ T5743]  ? hci_event_packet+0x186/0xcd0
[  197.861315][ T5743]  hci_le_conn_complete_evt+0x23c/0x3a0
[  197.861337][ T5743]  ? skb_pull_data+0x15f/0x1e0
[  197.861370][ T5743]  hci_le_meta_evt+0x34a/0x5f0
[  197.861386][ T5743]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  197.861418][ T5743]  hci_event_packet+0x51c/0xcd0
[  197.861439][ T5743]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  197.861457][ T5743]  ? __pfx_hci_event_packet+0x10/0x10
[  197.861483][ T5743]  ? kcov_remote_start+0x387/0x670
[  197.861520][ T5743]  ? lockdep_hardirqs_on+0x7d/0x110
[  197.861543][ T5743]  hci_rx_work+0x451/0xfc0
[  197.861569][ T5743]  process_one_work+0xac7/0x1b10
[  197.861601][ T5743]  ? __pfx___mod_timer+0x10/0x10
[  197.861631][ T5743]  ? __pfx_process_one_work+0x10/0x10
[  197.861660][ T5743]  ? __pfx_hci_rx_work+0x10/0x10
[  197.861683][ T5743]  worker_thread+0x5ef/0xe50
[  197.861708][ T5743]  ? kthread+0x13a/0x450
[  197.861723][ T5743]  ? __pfx_worker_thread+0x10/0x10
[  197.861740][ T5743]  kthread+0x373/0x450
[  197.861756][ T5743]  ? __pfx_kthread+0x10/0x10
[  197.861774][ T5743]  ret_from_fork+0x730/0xd60
[  197.861807][ T5743]  ? __pfx_ret_from_fork+0x10/0x10
[  197.861833][ T5743]  ? __switch_to+0x800/0x10f0
[  197.861857][ T5743]  ? __pfx_kthread+0x10/0x10
[  197.861874][ T5743]  ret_from_fork_asm+0x1a/0x30
[  197.861902][ T5743]  </TASK>
[  197.861925][ T5743] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  197.959354][ T5743] Bluetooth: hci4: failed to register connection device
[  198.173615][ T8703] usb 11-1: new high-speed USB device number 14 using dummy_hcd
[  198.197530][ T8703] usb 11-1: device descriptor read/8, error -71
[  198.476775][ T8703] usb 11-1: new high-speed USB device number 15 using dummy_hcd
[  198.518785][ T8703] usb 11-1: device descriptor read/8, error -71
[  198.644213][ T8703] usb usb11-port1: unable to enumerate USB device
[  199.099871][T12274] kernel read not supported for file /sg0 (pid: 12274 comm: syz.5.1486)
[  199.154098][   T42] kauditd_printk_skb: 40 callbacks suppressed
[  199.154122][   T42] audit: type=1400 audit(1787359908.250:32689): avc:  denied  { getopt } for  pid=12277 comm="syz.5.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  199.155116][T12278] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  199.168663][T12276] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  199.215127][T12276] lo speed is unknown, defaulting to 1000
[  199.310078][T12285] Cannot find del_set index 1 as target
[  199.365287][T12293] __nla_validate_parse: 2 callbacks suppressed
[  199.365308][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1490'.
[  199.372786][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1490'.
[  199.498132][ T5743] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23
[  199.538598][T12312] Bluetooth: MGMT ver 1.23
[  199.561617][   T42] audit: type=1400 audit(1787359908.624:32690): avc:  denied  { wake_alarm } for  pid=12313 comm="syz.5.1499" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  199.605290][ T5743] Bluetooth: hci4: unexpected event for opcode 0x203e
[  199.610987][T12314] netlink: 'syz.5.1499': attribute type 2 has an invalid length.
[  199.612232][T12316] team0: Device vlan2 is already an upper device of the team interface
[  199.613624][T12314] netlink: 'syz.5.1499': attribute type 2 has an invalid length.
[  199.637672][ T5743] Bluetooth: hci0: command tx timeout
[  199.660359][T12314] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.785948][   T42] audit: type=1400 audit(1787359908.839:32691): avc:  denied  { mounton } for  pid=12328 comm="syz.9.1503" path="/" dev="ramfs" ino=49978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  199.846279][T12331] overlayfs: missing 'lowerdir'
[  199.894608][T12331] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  200.006783][T12350] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1510'.
[  200.084948][   T42] audit: type=1400 audit(1787359909.120:32692): avc:  denied  { bind } for  pid=12347 comm="syz.2.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  200.180042][   T42] audit: type=1400 audit(1787359909.204:32693): avc:  denied  { write } for  pid=12354 comm="syz.2.1511" name="functions" dev="configfs" ino=13589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  200.180325][T12355] Mass Storage Function, version: 2009/09/11
[  200.192120][T12355] LUN: removable file: (no medium)
[  200.204335][   T42] audit: type=1800 audit(1787359909.232:32694): pid=12355 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1511" name="file" dev="configfs" ino=51760 res=0 errno=0
[  200.219684][   T42] audit: type=1400 audit(1787359909.232:32695): avc:  denied  { setopt } for  pid=12354 comm="syz.2.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  200.432898][   T42] audit: type=1400 audit(1787359909.447:32696): avc:  denied  { node_bind } for  pid=12368 comm="syz.2.1517" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  200.450074][   T42] audit: type=1400 audit(1787359909.466:32697): avc:  denied  { setattr } for  pid=12367 comm="syz.6.1516" name="/" dev="9p" ino=88080509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  200.568695][T12375] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  200.652552][T12379] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  200.876682][T12388] binder: 12384:12388 ioctl c06864a1 200000000280 returned -22
[  200.883057][T12388] binder: 12384:12388 ioctl c00c642e 200000000380 returned -22
[  200.887574][T12388] binder: 12384:12388 ioctl c06864ce 200000000440 returned -22
[  200.891071][T12388] binder: 12384:12388 ioctl c010640b 200000000500 returned -22
[  200.896026][T12388] binder: 12384:12388 ioctl c06864b8 200000000540 returned -22
[  200.900651][T12388] binder: 12384:12388 ioctl c0306201 2000000004c0 returned -14
[  200.904433][T12388] binder_alloc: 12384: binder_alloc_buf, no vma
[  200.933045][   T42] audit: type=1326 audit(1787359909.906:32698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.6.1525" exe="/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f073d59e0d9 code=0x0
[  200.954761][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1524'.
[  200.958620][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1524'.
[  201.166801][T12416] iommufd_mock iommufd_mock0: Adding to iommu group 1
[  201.258444][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1532'.
[  201.263356][T12420] netlink: 'syz.9.1532': attribute type 30 has an invalid length.
[  201.267143][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1532'.
[  201.271534][T12420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12420 comm=syz.9.1532
[  201.276948][T12420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=12420 comm=syz.9.1532
[  201.638227][T12436] netlink: 'syz.9.1535': attribute type 10 has an invalid length.
[  201.656348][T12436] team0: Device wg2 is of different type
[  201.737302][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1538'.
[  201.867184][ T5743] Bluetooth: hci0: command tx timeout
[  201.875501][ T1437] ieee802154 phy1 wpan1: encryption failed: -22
[  201.917587][T12460] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1542'.
[  201.970277][T12462] TC_ACT_REPEAT abuse ?
[  202.126565][T12466] tun0: tun_chr_ioctl cmd 1074025675
[  202.129038][T12466] tun0: persist enabled
[  202.131071][T12470] tun0: tun_chr_ioctl cmd 1074025675
[  202.132887][T12470] tun0: persist enabled
[  202.142249][T12472] netlink: 'syz.9.1546': attribute type 1 has an invalid length.
[  202.155357][T12472] 8021q: adding VLAN 0 to HW filter on device bond1
[  202.248519][T12481] netlink: 'syz.2.1548': attribute type 2 has an invalid length.
[  202.314260][T12483] syz.9.1549 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  202.391062][T12487] dlm: no locking on control device
[  202.408425][T12487] openvswitch: netlink: Message has 8 unknown bytes.
[  202.412308][T12482] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  202.639142][T12507] overlay: Unknown parameter 'euid'
[  202.852798][T12518] SELinux:  Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped).
[  203.028046][T12529] ip6tnl0: Caught tx_queue_len zero misconfig
[  203.283580][T12544] CIFS: Attempting to mount //127.0.0.1/test
[  203.344011][T12544] CIFS: VFS: cifs_mount failed w/return code = -112
[  203.386766][T12548] tipc: Failed to obtain node identity
[  203.389382][T12548] tipc: Enabling of bearer <ib:macvlan0> rejected, failed to enable media
[  203.432084][T12548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1569'.
[  203.464942][   T50] usb 11-1: new high-speed USB device number 16 using dummy_hcd
[  203.502546][T12554] openvswitch: netlink: ct_state flags 0001010a unsupported
[  203.633411][T12558] bond2: invalid ARP target 0.0.0.0 specified for addition
[  203.636705][   T50] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  203.639563][T12558] bond2: option arp_ip_target: invalid value (0)
[  203.644006][   T50] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.649127][T12558] bond2 (unregistering): Released all slaves
[  203.651242][   T50] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  203.656290][   T50] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.659462][   T50] usb 11-1: Product: syz
[  203.661132][   T50] usb 11-1: Manufacturer: syz
[  203.663066][   T50] usb 11-1: SerialNumber: syz
[  203.677590][   T50] cdc_mbim 11-1:1.0: skipping garbage
[  203.784931][T12562] could not open pipe file descriptor
[  203.885430][T12538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.888005][T12539] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  203.892807][T12538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.915575][   T50] cdc_mbim 11-1:1.0: bind() failure
[  203.934788][   T50] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found
[  203.936901][   T50] cdc_ncm 11-1:1.1: bind() failure
[  203.940332][   T50] usb 11-1: USB disconnect, device number 16
[  203.958420][T12575] tipc: Enabled bearer <udp:syz2>, priority 10
[  204.120806][T12571] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  204.125467][T12570] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  204.256282][T12590] cgroup: No subsys list or none specified
[  204.264792][ T5743] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  204.585223][   T50] usb 14-1: new full-speed USB device number 7 using dummy_hcd
[  204.768237][   T50] usb 14-1: not running at top speed; connect to a high speed hub
[  204.775307][   T50] usb 14-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  204.783157][   T50] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.786800][   T50] usb 14-1: Product: 혁긮ሪ謮鲟䐝娌셠⳱沂ල䦎堆巶ｍٿ♩ꃎ≉揊ꕐ｢㞪㩏羇ቺ︨玟龾㷟Ⓢ瞪ᨤ麳创咴⊺야ᶃ扥亁ホ᫐핮蜺뚦ᒏî㖮Ꮞꮛᢪ쁞엦ү睓ᱫ右｀䗎⃎㫘틇袮⚤懜믗ᑔ洊仵ᾇ뽗韕邇ߺ焬駃崷㾨몭浵
[  204.798333][   T50] usb 14-1: Manufacturer: 㫊ὧ뒻柏揗姡⃃赨謞＇ț꯵蚬鳞ﲠ栰ጼۣ욻ј풵硾痭퍴ɴᅣ綡꺩➴췜፥跊㋢遣㋼皶宩팈፣仿唒뷕≃宓隘逑넋镕嵰핤죎쇂Ճ湪룬⅏鰮᭡ﺘ防輳ᐰ힪뮝
[  204.806693][   T50] usb 14-1: SerialNumber: 皖欻ˆ࿉갱缟ꋥ♖鲅ߡ溍㟓୬᠟ꖨ㱃頧Ꮃ딖䳃Ⱀ安䍂芕臷
[  205.042344][   T50] usb 14-1: Audio class v2/v3 interfaces need an interface association
[  205.107846][   T50] snd-usb-audio 14-1:1.0: probe with driver snd-usb-audio failed with error -22
[  205.140272][ T6543] udevd[6543]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  205.247054][   T42] kauditd_printk_skb: 12 callbacks suppressed
[  205.247083][   T42] audit: type=1400 audit(1787359913.949:32711): avc:  denied  { setattr } for  pid=12594 comm="syz.9.1583" name="ttyprintk" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  205.253311][ T8703] usb 14-1: USB disconnect, device number 7
[  205.259450][   T42] audit: type=1400 audit(1787359913.958:32712): avc:  denied  { checkpoint_restore } for  pid=12594 comm="syz.9.1583" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  205.279230][T12634] autofs4:pid:12634:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375)
[  205.285322][T12634] autofs4:pid:12634:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[  205.517408][T12642] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  205.517408][T12642] 
[  205.523106][T12642] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  205.528931][T12642] CIFS: Attempting to mount //127.0.0.1/share
[  205.532608][T12642] CIFS: VFS: Error connecting to socket. Aborting operation.
[  205.535842][T12642] CIFS: VFS: cifs_mount failed w/return code = -101
[  205.654868][T12653] __nla_validate_parse: 3 callbacks suppressed
[  205.654891][T12653] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1602'.
[  205.660897][T12653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1602'.
[  205.760806][ T9005] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  205.774266][T12658] usb usb9: usbfs: process 12658 (syz.2.1604) did not claim interface 16 before use
[  205.832779][T12657] SELinux: failed to load policy
[  205.876281][T12662] bond2: (slave veth0_to_batadv): Device is not bonding slave
[  205.880567][T12662] bond2: option active_slave: invalid value (veth0_to_batadv)
[  205.888428][T12662] bond2 (unregistering): Released all slaves
[  205.897840][T12666] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  205.920975][ T8703] usb 11-1: new full-speed USB device number 17 using dummy_hcd
[  205.932967][ T9005] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  205.938201][ T9005] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.943313][ T9005] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.947169][ T9005] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  205.952589][ T9005] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.976591][ T9005] usb 10-1: config 0 descriptor??
[  206.000790][   T42] audit: type=1400 audit(1787359914.660:32713): avc:  denied  { map } for  pid=12673 comm="syz.9.1607" path="/213" dev="tmpfs" ino=1196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  206.009765][   T42] audit: type=1400 audit(1787359914.660:32714): avc:  denied  { execute } for  pid=12673 comm="syz.9.1607" path="/213" dev="tmpfs" ino=1196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  206.060155][ T5738] Bluetooth: hci0: command 0x0406 tx timeout
[  206.088153][ T8703] usb 11-1: unable to get BOS descriptor or descriptor too short
[  206.094291][ T8703] usb 11-1: not running at top speed; connect to a high speed hub
[  206.104063][ T8703] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  206.110891][ T8703] usb 11-1: config 14 has an invalid interface number: 57 but max is 1
[  206.114385][ T8703] usb 11-1: config 14 has an invalid interface number: 228 but max is 1
[  206.117776][ T8703] usb 11-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  206.117796][ T8703] usb 11-1: config 14 has no interface number 0
[  206.123913][ T8703] usb 11-1: config 14 has no interface number 1
[  206.126756][ T8703] usb 11-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  206.130953][ T8703] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  206.130969][ T8703] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  206.130983][ T8703] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64
[  206.145100][ T8703] usb 11-1: config 14 interface 57 has no altsetting 0
[  206.145121][ T8703] usb 11-1: config 14 interface 228 has no altsetting 0
[  206.158182][ T8703] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.161626][ T8703] usb 11-1: Product: syz
[  206.163413][ T8703] usb 11-1: Manufacturer: syz
[  206.165338][ T8703] usb 11-1: SerialNumber: syz
[  206.207529][   T42] audit: type=1804 audit(1787359914.847:32715): pid=12644 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1598" name="/newroot/416/file0" dev="tmpfs" ino=2258 res=1 errno=0
[  206.213206][ T9005] usbhid 10-1:0.0: can't add hid device: -71
[  206.219884][ T9005] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  206.229284][   T42] audit: type=1400 audit(1787359914.866:32716): avc:  denied  { create } for  pid=12684 comm="syz.2.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  206.230064][T12643] uprobe: syz.5.1598:12643 failed to unregister, leaking uprobe
[  206.230634][ T9005] usb 10-1: USB disconnect, device number 27
[  206.287215][ T5738] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9
[  206.430779][ T5880] hid_parser_main: 164 callbacks suppressed
[  206.430804][ T5880] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  206.439963][ T5880] hid-generic 0000:0000:0000.0006: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  206.603619][ T8703] legousbtower 11-1:14.57: interrupt endpoints not found
[  206.688919][T12694] program syz.2.1612 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  206.893059][T12702] syzkaller0: entered promiscuous mode
[  206.895536][T12702] syzkaller0: entered allmulticast mode
[  206.903145][T12702] tipc: Started in network mode
[  206.905604][T12702] tipc: Node identity b231b2eb96b5, cluster identity 4711
[  206.908646][T12702] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.913880][T12701] tipc: Resetting bearer <eth:syzkaller0>
[  206.933654][T12701] tipc: Disabling bearer <eth:syzkaller0>
[  207.033311][ T8703] legousbtower 11-1:14.228: LEGO USB Tower firmware version is 0.0 build 0
[  207.039517][ T8703] legousbtower 11-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  207.113123][T12712] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1617'.
[  207.647456][   T42] audit: type=1400 audit(1787359916.195:32717): avc:  denied  { ioctl } for  pid=12714 comm="syz.5.1620" path="socket:[55373]" dev="sockfs" ino=55373 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  207.660414][   T42] audit: type=1400 audit(1787359916.204:32718): avc:  denied  { accept } for  pid=12714 comm="syz.5.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  207.700176][T12719] input: syz0 as /devices/virtual/input/input25
[  207.861522][   T42] audit: type=1400 audit(1787359916.400:32719): avc:  denied  { mount } for  pid=12738 comm="syz.9.1626" name="/" dev="functionfs" ino=55400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1
[  207.904207][   T42] audit: type=1400 audit(1787359916.438:32720): avc:  denied  { unmount } for  pid=9506 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1
[  207.914874][ T9506] ffs_data_put(): freeing
[  208.011143][T12748] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1628'.
[  208.014934][T12748] netlink: 'syz.9.1628': attribute type 6 has an invalid length.
[  208.019375][T12748] netlink: 'syz.9.1628': attribute type 5 has an invalid length.
[  208.024008][T12748] netlink: 'syz.9.1628': attribute type 4 has an invalid length.
[  208.071352][T12753] netlink: 'syz.9.1630': attribute type 11 has an invalid length.
[  208.345844][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1633'.
[  208.348737][T12763] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1633'.
[  208.378800][ T8703] usb 14-1: new high-speed USB device number 8 using dummy_hcd
[  208.539884][ T8703] usb 14-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  208.545077][ T8703] usb 14-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  208.549771][ T8703] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.554193][ T8703] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.558265][ T8703] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  208.564970][ T8703] usb 14-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  208.569146][ T8703] usb 14-1: Manufacturer: syz
[  208.574482][ T8703] usb 14-1: config 0 descriptor??
[  209.017678][ T8703] appleir 0003:05AC:8243.0007: unknown main item tag 0x0
[  209.051261][ T8703] appleir 0003:05AC:8243.0007: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0
[  209.126415][ T5880] usb 11-1: USB disconnect, device number 17
[  209.146426][ T5880] legousbtower 11-1:14.228: LEGO USB Tower #-160 now disconnected
[  209.196260][T12761] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  209.323660][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'.
[  209.327457][T12770] nbd: must specify a size in bytes for the device
[  209.381178][T12783] jffs2: notice: (12783) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 4 orphan) and 6 of xref (1 dead, 3 orphan) found.
[  209.401554][T12786] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1641'.
[  209.401860][T12783] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR
[  209.608257][T12801] netlink: 'syz.9.1631': attribute type 21 has an invalid length.
[  209.611672][T12801] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1631'.
[  209.615612][T12801] netlink: 'syz.9.1631': attribute type 4 has an invalid length.
[  209.620068][T12801] netlink: 'syz.9.1631': attribute type 5 has an invalid length.
[  209.623765][T12801] netlink: 3 bytes leftover after parsing attributes in process `syz.9.1631'.
[  209.687012][T12794] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  209.736585][T12805] ubi0: attaching mtd0
[  209.740384][T12805] ubi0: scanning is finished
[  209.742277][T12805] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  209.892810][T12805] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  209.907024][ T1037] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  210.067425][ T1037] usb 10-1: Using ep0 maxpacket: 8
[  210.070133][ T1037] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  210.077773][ T1037] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.081158][ T1037] usb 10-1: Product: 즑틱踺᩹ㆉ什῭軌狃⸉䘂떯䜪ꮿ᫴쌊⨓ᶊࡼʌ嫝౺氣㞘
[  210.085732][ T1037] usb 10-1: Manufacturer: 奢㗠㉖繉鸏쐒ᾴ篱ำӛ鴉ῐ䢈滌鿌쥄흀嚕脷䯋沵볏ꭾﴼ
[  210.090280][ T1037] usb 10-1: SerialNumber: syz
[  210.318952][T12803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.350609][T12803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.372324][ T1037] usb 10-1: 1:1 : unknown format tag 0x3006 is detected.  processed as MPEG.
[  210.392654][ T1037] usb 10-1: found format II with max.bitrate = 23825, frame size=64596
[  210.397139][ T1037] usb 10-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  210.569668][T12803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.576642][ T9751] IPVS: starting estimator thread 0...
[  210.582250][T12803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.587453][T12815] ip6gretap1: entered promiscuous mode
[  210.589802][T12815] ip6gretap1: entered allmulticast mode
[  210.591605][T12803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.599018][T12803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.619830][ T1037] usb 10-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  210.629930][ T1037] usb 10-1: found format II with max.bitrate = 2, frame size=4096
[  210.636024][ T1037] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  210.636971][T12815] jffs2: notice: (12815) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (0 unchecked, 4 orphan) and 6 of xref (1 dead, 3 orphan) found.
[  210.649404][   T42] kauditd_printk_skb: 2 callbacks suppressed
[  210.649420][   T42] audit: type=1400 audit(1787359919.011:32723): avc:  denied  { write } for  pid=12814 comm="syz.2.1650" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  210.664796][   T42] audit: type=1400 audit(1787359919.011:32724): avc:  denied  { add_name } for  pid=12814 comm="syz.2.1650" name="del2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  210.671619][   T42] audit: type=1400 audit(1787359919.011:32725): avc:  denied  { create } for  pid=12814 comm="syz.2.1650" name="del2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  210.681126][   T42] audit: type=1400 audit(1787359919.011:32726): avc:  denied  { read write open } for  pid=12814 comm="syz.2.1650" path="/73/mnt/del2" dev="jffs2" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  210.686014][ T1037] usb 10-1: USB disconnect, device number 28
[  210.690336][T12816] IPVS: using max 46 ests per chain, 110400 per kthread
[  210.697689][   T42] audit: type=1400 audit(1787359919.011:32727): avc:  denied  { setattr } for  pid=12814 comm="syz.2.1650" name="del2" dev="jffs2" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  210.769455][T12824] TCP: TCP_TX_DELAY enabled
[  211.028880][ T9005] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  211.199863][ T9005] usb 7-1: Using ep0 maxpacket: 16
[  211.204820][ T9005] usb 7-1: unable to get BOS descriptor or descriptor too short
[  211.209541][ T9005] usb 7-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2
[  211.225057][ T9005] usb 7-1: config 1 has an invalid interface number: 232 but max is 0
[  211.231072][ T9005] usb 7-1: config 1 has no interface number 0
[  211.237968][T12826] x_tables: duplicate underflow at hook 1
[  211.240488][ T9005] usb 7-1: config 1 interface 232 altsetting 93 endpoint 0xE has an invalid bInterval 0, changing to 7
[  211.247928][ T9005] usb 7-1: config 1 interface 232 altsetting 93 endpoint 0xE has invalid wMaxPacketSize 0
[  211.256489][ T9005] usb 7-1: config 1 interface 232 has no altsetting 0
[  211.265149][ T9005] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.268931][ T9005] usb 7-1: Product: syz
[  211.271378][ T9005] usb 7-1: Manufacturer: syz
[  211.276972][ T9005] usb 7-1: SerialNumber: syz
[  211.356564][ T8703] usb 14-1: USB disconnect, device number 8
[  211.515333][ T9005] hub 7-1:1.232: bad descriptor, ignoring hub
[  211.520479][ T9005] hub 7-1:1.232: probe with driver hub failed with error -5
[  211.527324][ T9005] option 7-1:1.232: GSM modem (1-port) converter detected
[  211.535353][T12839] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  211.564563][ T9005] usb 7-1: USB disconnect, device number 5
[  211.573475][ T9005] option 7-1:1.232: device disconnected
[  212.130447][T12869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1660'.
[  212.204923][T12871] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1661'.
[  212.369196][ T5880] usb 14-1: new high-speed USB device number 9 using dummy_hcd
[  212.514517][T12887] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  212.536672][ T5880] usb 14-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  212.541844][ T5880] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  212.546789][ T5880] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  212.551226][ T5880] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  212.557749][ T5880] usb 14-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  212.569758][ T5880] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.588392][T12895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1668'.
[  212.600467][T12865] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  212.607006][T12865] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  212.617027][ T5880] keyspan 14-1:1.0: Keyspan 2 port adapter converter detected
[  212.622699][   T42] audit: type=1400 audit(1787359920.855:32728): avc:  denied  { bind } for  pid=12892 comm="syz.6.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  212.629891][ T5880] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 84
[  212.640818][ T5880] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 2
[  212.641988][   T42] audit: type=1400 audit(1787359920.855:32729): avc:  denied  { listen } for  pid=12892 comm="syz.6.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  212.649667][ T5880] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  212.663937][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1668'.
[  212.677821][ T5880] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 88
[  212.687222][ T5880] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 6
[  212.700813][ T5880] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  212.824819][   T42] audit: type=1400 audit(1787359921.033:32730): avc:  denied  { write } for  pid=12902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  212.848327][T12906] Device name not specified.
[  212.848327][T12906] 
[  212.966959][   T42] audit: type=1400 audit(1787359921.173:32731): avc:  denied  { write } for  pid=12910 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  213.157854][   T42] audit: type=1400 audit(1787359921.341:32732): avc:  denied  { write } for  pid=12916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  213.217985][ T5831] usb 14-1: USB disconnect, device number 9
[  213.253454][ T5831] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  213.282272][ T5831] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  213.291224][ T5831] keyspan 14-1:1.0: device disconnected
[  213.328734][T12932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1674'.
[  213.614309][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1677'.
[  213.625582][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1677'.
[  214.367324][T12979] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  214.880258][T13007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.994049][ T9005] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  215.155525][ T9005] usb 7-1: Using ep0 maxpacket: 8
[  215.158706][ T9005] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  215.166409][ T9005] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  215.169864][ T9005] usb 7-1: config 0 has no interface number 0
[  215.172538][ T9005] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  215.178761][ T9005] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  215.183818][ T9005] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  215.188654][ T9005] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  215.193858][ T9005] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.200528][ T9005] usb 7-1: config 0 descriptor??
[  215.215867][ T9005] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  215.327427][T13035] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  215.330016][T13035] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  215.334352][T13035] vhci_hcd vhci_hcd.0: Device attached
[  215.494751][ T7787] usb 7-1: USB disconnect, device number 6
[  215.494873][    C1] ldusb 7-1:0.55: usb_submit_urb failed (-19)
[  215.511678][ T7787] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  215.511798][T12999] ldusb: No device or device unplugged -19
[  215.602603][ T9005] usb 47-1: new high-speed USB device number 2 using vhci_hcd
[  215.697157][T13047] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  215.700056][T13047] /dev/nullb0: Can't open blockdev
[  216.127755][T13055] /dev/nullb0: Can't open blockdev
[  216.215589][T13036] vhci_hcd: connection closed
[  216.215921][ T5816] vhci_hcd vhci_hcd.5: stop threads
[  216.220991][ T5816] vhci_hcd vhci_hcd.5: release socket
[  216.223731][ T5816] vhci_hcd vhci_hcd.5: disconnect device
[  216.297439][T13055] usb 2-1: reset high-speed USB device number 2 using ehci-pci
[  216.618837][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1714'.
[  216.791200][T13065] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1707'.
[  216.842737][T13067] binder: 13066:13067 ioctl c038586a 200000000300 returned -22
[  216.854361][T13067] binder: 13066:13067 ioctl c0306201 2000000001c0 returned -14
[  216.922712][T13049] Set syz1 is full, maxelem 65536 reached
[  217.055772][ T7787] usb 11-1: new high-speed USB device number 18 using dummy_hcd
[  217.143917][T13076] tmpfs: Invalid uid '0x00000000ffffffff'
[  217.146760][   T42] kauditd_printk_skb: 8 callbacks suppressed
[  217.146773][   T42] audit: type=1400 audit(1787359925.085:32741): avc:  denied  { getopt } for  pid=13075 comm="syz.2.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  217.227017][ T7787] usb 11-1: Using ep0 maxpacket: 8
[  217.231529][ T7787] usb 11-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  217.239010][ T7787] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  217.243639][ T7787] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1408, setting to 1024
[  217.249627][ T7787] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.262356][T13065] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  217.267085][ T7787] kobil_sct 11-1:1.0: KOBIL USB smart card terminal converter detected
[  217.280542][ T7787] usb 11-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  217.399261][   T42] audit: type=1400 audit(1787359925.328:32742): avc:  denied  { bind } for  pid=13082 comm="syz.2.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  217.407499][   T42] audit: type=1400 audit(1787359925.328:32743): avc:  denied  { write } for  pid=13082 comm="syz.2.1713" path="socket:[54956]" dev="sockfs" ino=54956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  217.680417][T13091] overlayfs: failed lookup in lower (newroot/96, name='file2', err=-40): overlapping layers
[  217.688340][T13091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8683 sclass=netlink_route_socket pid=13091 comm=syz.2.1716
[  218.259513][   T42] audit: type=1400 audit(1787359926.123:32744): avc:  denied  { write } for  pid=13104 comm="syz.2.1722" name="functions" dev="configfs" ino=13589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  218.272666][T13105] configfs-gadget.g1 gadget.0: FS Playback: Req. wMaxPacketSize 1792 at bInterval 1 > max ISOC 1023, may drop data!
[  218.279604][T13105] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  218.281986][   T42] audit: type=1400 audit(1787359926.133:32745): avc:  denied  { write } for  pid=13104 comm="syz.2.1722" name="c.1" dev="configfs" ino=21019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  218.289500][T13105] udc dummy_udc.0: failed to start g1: -19
[  218.298488][T13112] /dev/nullb0: Can't open blockdev
[  218.302921][   T42] audit: type=1400 audit(1787359926.133:32746): avc:  denied  { write } for  pid=13104 comm="syz.2.1722" name="c.1" dev="configfs" ino=21019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  218.320192][T13105] UDC core: g1: couldn't find an available UDC or it's busy
[  218.358364][T13114] nbd: socks must be embedded in a SOCK_ITEM attr
[  218.376919][T13114] Cannot find del_set index 2 as target
[  218.442164][T13116] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  218.470046][T13116] jffs2: notice: (13116) jffs2_build_xattr_subsystem: complete building xattr subsystem, 7 of xdatum (0 unchecked, 4 orphan) and 7 of xref (1 dead, 3 orphan) found.
[  218.483178][   T42] audit: type=1400 audit(1787359926.339:32747): avc:  denied  { write } for  pid=13115 comm="syz.9.1727" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  218.568755][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'.
[  218.574124][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1731'.
[  218.579296][T13128] netlink: 'syz.2.1731': attribute type 12 has an invalid length.
[  218.649184][T13136] iommufd_mock iommufd_mock0: Adding to iommu group 1
[  218.673373][T13137] iommufd_mock iommufd_mock1: Adding to iommu group 9
[  218.746346][   T42] audit: type=1400 audit(1787359926.582:32748): avc:  denied  { create } for  pid=13140 comm="syz.5.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  218.759485][   T42] audit: type=1400 audit(1787359926.591:32749): avc:  denied  { setopt } for  pid=13140 comm="syz.5.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  218.779440][ T5738] Bluetooth: min 9 > max 1
[  219.323821][T13155] can0: slcan on ttyS3.
[  219.362825][ T1037] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0
[  219.369582][ T1037] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0
[  219.375656][ T1037] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0
[  219.383282][ T1037] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0
[  219.387430][ T1037] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0
[  219.391794][ T1037] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0
[  219.397418][ T1037] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0
[  219.400838][ T1037] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0
[  219.407636][ T1037] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0
[  219.411448][ T1037] hid-generic 0006:0008:0008.0008: unknown main item tag 0x0
[  219.437101][ T1037] hid-generic 0006:0008:0008.0008: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz1
[  219.481650][T13155] can0 (unregistered): slcan off ttyS3.
[  219.499012][   T42] audit: type=1400 audit(1787359927.284:32750): avc:  denied  { write } for  pid=13159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  219.705085][T13172] No such timeout policy "syz1"
[  219.750513][T13168] lo speed is unknown, defaulting to 1000
[  219.857895][T13184] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  219.862125][T13184] UDF-fs: Scanning with blocksize 2048 failed
[  219.877861][T13184] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  219.883816][T13184] UDF-fs: Scanning with blocksize 4096 failed
[  219.944541][T13184] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  219.944609][ T8703] usb 11-1: USB disconnect, device number 18
[  219.973394][ T8703] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  219.988648][ T8703] kobil_sct 11-1:1.0: device disconnected
[  220.132860][T13196] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1747'.
[  220.147705][T13196] lo: entered allmulticast mode
[  220.458858][T13216] MTD: Couldn't look up 'mtd0/file0': -2
[  220.519535][T13204] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  220.537608][T13204] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  220.684073][T13222] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  220.787486][T13242] 8021q: VLANs not supported on syzkaller0
[  220.800471][T13244] FAULT_INJECTION: forcing a failure.
[  220.800471][T13244] name fail_futex, interval 1, probability 0, space 0, times 1
[  220.816535][T13244] CPU: 1 UID: 0 PID: 13244 Comm: syz.9.1759 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  220.816570][T13244] Tainted: [L]=SOFTLOCKUP
[  220.816576][T13244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  220.816597][T13244] Call Trace:
[  220.816614][T13244]  <TASK>
[  220.816622][T13244]  dump_stack_lvl+0x100/0x190
[  220.816665][T13244]  should_fail_ex.cold+0x5/0xa
[  220.816701][T13244]  get_futex_key+0x1d0/0x14f0
[  220.816737][T13244]  ? __pfx_get_futex_key+0x10/0x10
[  220.816762][T13244]  futex_wait_setup+0x91/0x540
[  220.816792][T13244]  __futex_wait+0x19f/0x300
[  220.816818][T13244]  ? __pfx___futex_wait+0x10/0x10
[  220.816841][T13244]  ? __pfx_try_to_wake_up+0x10/0x10
[  220.816869][T13244]  ? futex_hash+0x311/0x400
[  220.816889][T13244]  ? __pfx_futex_wake_mark+0x10/0x10
[  220.816917][T13244]  ? find_held_lock+0x2b/0x80
[  220.816946][T13244]  ? futex_wake+0x4ea/0x5e0
[  220.816976][T13244]  futex_wait+0xe6/0x370
[  220.817000][T13244]  ? __pfx_futex_wait+0x10/0x10
[  220.817027][T13244]  ? rcu_read_lock_any_held+0x6a/0x90
[  220.817047][T13244]  ? find_held_lock+0x2b/0x80
[  220.817064][T13244]  ? ksys_write+0x190/0x250
[  220.817094][T13244]  ? ksys_write+0x190/0x250
[  220.817115][T13244]  do_futex+0x265/0x440
[  220.817134][T13244]  ? __pfx_do_futex+0x10/0x10
[  220.817168][T13244]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  220.817282][T13244]  __x64_sys_futex+0x34f/0x4d0
[  220.817305][T13244]  ? fput+0x7c/0x100
[  220.817331][T13244]  ? __pfx___x64_sys_futex+0x10/0x10
[  220.817350][T13244]  ? ksys_write+0x1ac/0x250
[  220.817371][T13244]  ? __pfx_ksys_write+0x10/0x10
[  220.817402][T13244]  do_syscall_64+0x123/0x790
[  220.817424][T13244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.817443][T13244] RIP: 0033:0x7f9c5cd9e0d9
[  220.817462][T13244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.817486][T13244] RSP: 002b:00007f9c5dc7a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  220.817507][T13244] RAX: ffffffffffffffda RBX: 00007f9c5d025fa8 RCX: 00007f9c5cd9e0d9
[  220.817520][T13244] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9c5d025fa8
[  220.817530][T13244] RBP: 00007f9c5d025fa0 R08: 0000000000000000 R09: 0000000000000000
[  220.817540][T13244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.817550][T13244] R13: 00007f9c5d026038 R14: 00007fff9224a220 R15: 00007fff9224a308
[  220.817574][T13244]  </TASK>
[  220.924420][ T5738] Bluetooth: hci2: command tx timeout
[  221.090388][ T9005] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  221.410489][T13276] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1766'.
[  221.414750][T13276] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1766'.
[  221.465695][T13283] overlayfs: failed to resolve './file0': -2
[  221.509898][T13285] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1771'.
[  221.548899][T13288] jffs2: notice: (13288) jffs2_build_xattr_subsystem: complete building xattr subsystem, 7 of xdatum (0 unchecked, 4 orphan) and 7 of xref (1 dead, 3 orphan) found.
[  221.586189][T13288] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  222.056275][T13314] SET target dimension over the limit!
[  222.468606][T13348] netlink: 'syz.6.1791': attribute type 5 has an invalid length.
[  222.583088][T13352] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  222.775382][T13359] xt_connbytes: Forcing CT accounting to be enabled
[  222.795431][T13359] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=272 sclass=netlink_xfrm_socket pid=13359 comm=syz.6.1795
[  223.461569][T13380] binder: 13378:13380 ioctl c0502100 200000000500 returned -22
[  223.519658][   T42] kauditd_printk_skb: 12 callbacks suppressed
[  223.519678][   T42] audit: type=1400 audit(1787359931.046:32763): avc:  denied  { map } for  pid=13377 comm="syz.9.1801" path="/proc/869/task/870/environ" dev="proc" ino=58136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  223.532095][T13384] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1801'.
[  223.738242][ T9005] usb 11-1: new high-speed USB device number 19 using dummy_hcd
[  223.916259][ T9005] usb 11-1: Using ep0 maxpacket: 8
[  223.931863][ T9005] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  223.941425][ T9005] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  223.948143][ T9005] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  223.959060][ T9005] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  223.969695][ T9005] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  223.977263][ T9005] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  223.991037][ T9005] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  224.001847][ T9005] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  224.012406][ T9005] usb 11-1: config 168 interface 0 has no altsetting 0
[  224.019484][ T9005] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  224.024634][ T9005] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  224.033857][ T9005] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  224.044476][ T9005] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  224.055318][ T9005] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  224.061907][ T9005] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  224.076507][ T9005] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  224.082101][ T9005] usb 11-1: config 168 interface 0 has no altsetting 0
[  224.088183][ T9005] usb 11-1: config 168 descriptor has 1 excess byte, ignoring
[  224.093596][ T9005] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  224.108568][ T9005] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  224.112851][ T9005] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  224.117471][ T9005] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  224.129940][ T9005] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  224.140595][ T9005] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  224.147708][ T9005] usb 11-1: config 168 interface 0 has no altsetting 0
[  224.154596][ T9005] usb 11-1: string descriptor 0 read error: -22
[  224.156733][ T9005] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.180943][ T9005] adutux 11-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  224.450610][ T8703] usb 11-1: USB disconnect, device number 19
[  225.052182][   T42] audit: type=1400 audit(1787359932.477:32764): avc:  denied  { write } for  pid=6681 comm="syz-executor" name="465" dev="tmpfs" ino=2512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  225.066776][   T42] audit: type=1400 audit(1787359932.496:32765): avc:  denied  { write } for  pid=6681 comm="syz-executor" name="465" dev="tmpfs" ino=2512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  225.090421][   T42] audit: type=1400 audit(1787359932.496:32766): avc:  denied  { write } for  pid=6681 comm="syz-executor" name="465" dev="tmpfs" ino=2512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  225.096597][T13419] netlink: 'syz.5.1812': attribute type 1 has an invalid length.
[  225.102030][   T42] audit: type=1400 audit(1787359932.496:32767): avc:  denied  { write } for  pid=6681 comm="syz-executor" name="465" dev="tmpfs" ino=2512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  225.102078][   T42] audit: type=1400 audit(1787359932.524:32768): avc:  denied  { write } for  pid=13418 comm="syz.5.1812" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[  225.635162][   T42] audit: type=1400 audit(1787359933.030:32769): avc:  denied  { lock } for  pid=13432 comm="syz.6.1814" path="net:[4026532975]" dev="nsfs" ino=4026532975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  225.636425][T13433] CacheFiles: Empty directory specified
[  225.646043][   T42] audit: type=1400 audit(1787359933.030:32770): avc:  denied  { read write } for  pid=13432 comm="syz.6.1814" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  225.656253][   T42] audit: type=1400 audit(1787359933.030:32771): avc:  denied  { open } for  pid=13432 comm="syz.6.1814" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  226.690601][T13413] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  226.762320][   T42] audit: type=1400 audit(1787359934.087:32772): avc:  denied  { write } for  pid=13436 comm="syz.5.1817" name="strings" dev="configfs" ino=21020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  226.813013][T13403] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  226.867690][T13456] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1821'.
[  226.870657][T13456] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1821'.
[  226.873633][T13456] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22)
[  226.878788][T13456] iwpm_hello_cb: Unable to parse nlmsg
[  226.932773][    T9] libceph: connect (1)[c::]:6789 error -101
[  226.935452][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  227.023062][T13475] syz_tun: entered allmulticast mode
[  227.030261][T13475] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0)
[  227.034061][T13475] mroute: pending queue full, dropping entries
[  227.042335][T13459] ceph: No mds server is up or the cluster is laggy
[  227.144527][T13482] syzkaller0: left promiscuous mode
[  227.146849][T13482] syzkaller0: left allmulticast mode
[  227.166914][T13485] veth1_macvtap: left promiscuous mode
[  227.168991][T13485] macsec0: entered allmulticast mode
[  227.235681][T13485] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.1829'.
[  227.250822][T13485] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1829'.
[  227.262982][T13490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13490 comm=syz.9.1829
[  227.281489][T13490] veth1_macvtap: entered promiscuous mode
[  227.299953][T13490] veth1_macvtap: entered allmulticast mode
[  227.321499][T13490] macsec0: left allmulticast mode
[  227.324641][T13490] veth1_macvtap: left allmulticast mode
[  227.367776][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1833'.
[  227.498267][T13504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.502624][T13504] batadv_slave_1: entered promiscuous mode
[  227.582425][T13502] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  227.743628][T13515] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  227.881410][T13523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.891212][T13523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.899071][T13523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.908814][T13523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.231398][T13553] netlink: 1204 bytes leftover after parsing attributes in process `syz.6.1846'.
[  228.253729][T13554] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1844'.
[  228.290983][T13558] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1848'.
[  228.303370][T13558] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1848'.
[  228.318038][T13556] lo speed is unknown, defaulting to 1000
[  228.370653][T13562] iommufd_mock iommufd_mock0: Adding to iommu group 1
[  228.466379][T13568] binder: BINDER_SET_CONTEXT_MGR already set
[  228.479124][T13568] binder: 13565:13568 ioctl 4018620d 0 returned -16
[  228.486055][T13568] binder: BINDER_SET_CONTEXT_MGR already set
[  228.492158][T13568] binder: 13565:13568 ioctl 4018620d 0 returned -16
[  228.495536][T13568] binder: 13565:13568 ioctl c0306201 2000000000c0 returned -22
[  228.516919][T13568] binder: 13565:13568 ioctl c0306201 200000000180 returned -14
[  228.770965][T13595] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1859'.
[  228.813836][T13591] overlayfs: conflicting lowerdir path
[  228.858279][T13598] ip6t_rpfilter: unknown options
[  228.949374][ T1037] usb 14-1: new high-speed USB device number 10 using dummy_hcd
[  228.966524][   T42] kauditd_printk_skb: 4 callbacks suppressed
[  228.966547][   T42] audit: type=1400 audit(1787359936.146:32777): avc:  denied  { listen } for  pid=13607 comm="syz.6.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  228.975602][   T42] audit: type=1400 audit(1787359936.146:32778): avc:  denied  { accept } for  pid=13607 comm="syz.6.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  229.024202][ T5738] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  229.029930][ T5738] CPU: 2 UID: 0 PID: 5738 Comm: kworker/u34:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  229.029952][ T5738] Tainted: [L]=SOFTLOCKUP
[  229.029957][ T5738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  229.029971][ T5738] Workqueue: hci1 hci_rx_work
[  229.030045][ T5738] Call Trace:
[  229.030061][ T5738]  <TASK>
[  229.030076][ T5738]  dump_stack_lvl+0x100/0x190
[  229.030107][ T5738]  sysfs_warn_dup.cold+0x1c/0x28
[  229.030136][ T5738]  sysfs_create_dir_ns+0x24b/0x2b0
[  229.030179][ T5738]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  229.030208][ T5738]  ? find_held_lock+0x2b/0x80
[  229.030230][ T5738]  ? kobject_add_internal+0x25f/0x930
[  229.030255][ T5738]  ? kobject_add_internal+0x25f/0x930
[  229.030272][ T5738]  ? do_raw_spin_unlock+0x145/0x1e0
[  229.030285][ T5738]  kobject_add_internal+0x2c8/0x930
[  229.030307][ T5738]  kobject_add+0x16a/0x1e0
[  229.030323][ T5738]  ? __pfx_kobject_add+0x10/0x10
[  229.030339][ T5738]  ? class_to_subsys+0x10f/0x150
[  229.030364][ T5738]  ? kobject_put+0xb9/0x640
[  229.030377][ T5738]  ? _raw_spin_unlock+0x28/0x50
[  229.030417][ T5738]  device_add+0x294/0x1970
[  229.030440][ T5738]  ? __pfx_dev_set_name+0x10/0x10
[  229.030465][ T5738]  ? __pfx_device_add+0x10/0x10
[  229.030482][ T5738]  ? mgmt_send_event_skb+0x2fb/0x460
[  229.030507][ T5738]  hci_conn_add_sysfs+0x1a3/0x260
[  229.030523][ T5738]  le_conn_complete_evt+0x121b/0x2120
[  229.030546][ T5738]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  229.030562][ T5738]  ? hci_event_packet+0x186/0xcd0
[  229.030584][ T5738]  hci_le_conn_complete_evt+0x23c/0x3a0
[  229.030602][ T5738]  ? skb_pull_data+0x15f/0x1e0
[  229.030628][ T5738]  hci_le_meta_evt+0x34a/0x5f0
[  229.030639][ T5738]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  229.030659][ T5738]  hci_event_packet+0x51c/0xcd0
[  229.030676][ T5738]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  229.030687][ T5738]  ? __pfx_hci_event_packet+0x10/0x10
[  229.030712][ T5738]  ? kcov_remote_start+0x387/0x670
[  229.030754][ T5738]  ? lockdep_hardirqs_on+0x7d/0x110
[  229.030772][ T5738]  hci_rx_work+0x451/0xfc0
[  229.030793][ T5738]  process_one_work+0xac7/0x1b10
[  229.030822][ T5738]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  229.030841][ T5738]  ? __pfx_process_one_work+0x10/0x10
[  229.030861][ T5738]  ? __pfx_hci_rx_work+0x10/0x10
[  229.030880][ T5738]  worker_thread+0x5ef/0xe50
[  229.030912][ T5738]  ? kthread+0x13a/0x450
[  229.030932][ T5738]  ? __pfx_worker_thread+0x10/0x10
[  229.030953][ T5738]  kthread+0x373/0x450
[  229.030965][ T5738]  ? __pfx_kthread+0x10/0x10
[  229.030979][ T5738]  ret_from_fork+0x730/0xd60
[  229.031005][ T5738]  ? __pfx_ret_from_fork+0x10/0x10
[  229.031023][ T5738]  ? __switch_to+0x800/0x10f0
[  229.031043][ T5738]  ? __pfx_kthread+0x10/0x10
[  229.031057][ T5738]  ret_from_fork_asm+0x1a/0x30
[  229.031081][ T5738]  </TASK>
[  229.031098][ T5738] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  229.110368][ T1037] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  229.113143][ T5738] Bluetooth: hci1: failed to register connection device
[  229.116294][ T1037] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  229.129321][   T42] audit: type=1400 audit(1787359936.296:32779): avc:  denied  { listen } for  pid=13617 comm="syz.6.1866" lport=26081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  229.133006][ T1037] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.149664][ T1037] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66
[  229.152765][ T1037] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.158401][ T1037] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  229.161311][ T1037] usb 14-1: Product: syz
[  229.162672][ T1037] usb 14-1: Manufacturer: syz
[  229.181144][ T1037] cdc_wdm 14-1:1.0: skipping garbage
[  229.188079][ T1037] cdc_wdm 14-1:1.0: skipping garbage
[  229.191527][ T1037] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device
[  229.193485][ T1037] cdc_wdm 14-1:1.0: Unknown control protocol
[  229.271256][T13628] No control pipe specified
[  229.273125][T13626] pimreg: entered allmulticast mode
[  229.399112][    T9] usb 14-1: USB disconnect, device number 10
[  229.436606][   T42] audit: type=1400 audit(1787359936.586:32780): avc:  denied  { ioctl } for  pid=13588 comm="syz.9.1857" path="socket:[58899]" dev="sockfs" ino=58899 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  229.479672][T13638] cgroup: Need name or subsystem set
[  229.536675][T13641] syzkaller0: entered promiscuous mode
[  229.538767][T13641] syzkaller0: entered allmulticast mode
[  229.590507][ T5880] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  229.761567][ T5880] usb 7-1: Using ep0 maxpacket: 8
[  229.769080][ T5880] usb 7-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00
[  229.773731][ T5880] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  229.776494][ T5880] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  229.780503][ T5880] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  229.784158][ T5880] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  229.791344][ T5880] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  229.803420][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.911529][T13656] netlink: 'syz.9.1878': attribute type 7 has an invalid length.
[  229.915441][   T42] audit: type=1400 audit(1787359937.035:32781): avc:  denied  { remount } for  pid=13655 comm="syz.9.1878" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  230.199790][T13662] ipt_REJECT: ECHOREPLY no longer supported.
[  230.670762][   T42] audit: type=1400 audit(1787359937.746:32782): avc:  denied  { create } for  pid=13687 comm="syz.5.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  230.867342][ T5880] usb 7-1: USB disconnect, device number 7
[  230.967147][T13706] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4
[  230.997392][T13709] binder: 13708:13709 ioctl 4018620d 0 returned -22
[  231.032503][T13712] ehci-pci 0000:00:1d.7: remove, state 1
[  231.043575][T13712] usb usb2: USB disconnect, device number 1
[  231.046460][T13712] usb 2-1: USB disconnect, device number 2
[  231.238073][T13731] sctp: [Deprecated]: syz.9.1896 (pid 13731) Use of int in max_burst socket option.
[  231.238073][T13731] Use struct sctp_assoc_value instead
[  231.238667][T13712] ehci-pci 0000:00:1d.7: USB bus 2 deregistered
[  231.446946][   T42] audit: type=1400 audit(1787359938.467:32783): avc:  denied  { write } for  pid=13738 comm="syz.5.1900" name="c.1" dev="configfs" ino=21019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  231.455935][   T42] audit: type=1400 audit(1787359938.476:32784): avc:  denied  { write } for  pid=13738 comm="syz.5.1900" name="c.1" dev="configfs" ino=21019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  231.652243][T13757] /dev/sr0: Can't open blockdev
[  233.683075][    C2] vxcan1: j1939_tp_rxtimer: 0xffff8880519b7000: rx timeout, send abort
[  233.807681][T13818] binder: BINDER_SET_CONTEXT_MGR already set
[  233.809967][T13818] binder: 13816:13818 ioctl 4018620d 200000004a80 returned -16
[  233.850926][T13822] overlayfs: overlapping lowerdir path
[  233.859922][T13822] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  233.920593][ T5738] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  233.920788][ T5733] Bluetooth: hci3: command 0x1003 tx timeout
[  234.119505][T13833] kvm: pic: non byte write
[  234.220147][    C2] vxcan1: j1939_tp_rxtimer: 0xffff8880519b7400: rx timeout, send abort
[  234.223197][    C2] vxcan1: j1939_tp_rxtimer: 0xffff8880519b7000: abort rx timeout. Force session deactivation
[  234.262647][ T5733] Bluetooth: hci5: command 0xfc11 tx timeout
[  234.262992][ T5743] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  234.600557][T13852] block nbd9: not configured, cannot reconfigure
[  234.706911][T13865] bond2: entered promiscuous mode
[  234.711473][T13865] 8021q: adding VLAN 0 to HW filter on device bond2
[  234.731822][T13862] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  234.750034][T13865] 8021q: adding VLAN 0 to HW filter on device bond2
[  234.754204][T13865] bond2: (slave ipip0): The slave device specified does not support setting the MAC address
[  234.757484][    C2] vxcan1: j1939_tp_rxtimer: 0xffff8880519b7400: abort rx timeout. Force session deactivation
[  234.759180][T13865] bond2: (slave ipip0): Error -95 calling set_mac_address
[  234.794827][T13870] netlink: 'syz.6.1938': attribute type 29 has an invalid length.
[  234.885467][T13881] __nla_validate_parse: 8 callbacks suppressed
[  234.885481][T13881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1941'.
[  235.021564][T13884] lo: Caught tx_queue_len zero misconfig
[  235.328962][ T5880] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  235.468056][ T5880] usb 10-1: device descriptor read/64, error -71
[  235.735031][ T5880] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[  235.893599][T13909] netlink: 'syz.9.1948': attribute type 4 has an invalid length.
[  235.917929][ T5880] usb 10-1: device descriptor read/64, error -71
[  236.051565][ T5880] usb usb10-port1: attempt power cycle
[  236.093272][T13922] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1951'.
[  236.255796][T13933] lo speed is unknown, defaulting to 1000
[  236.330787][T13933] netlink: 5 bytes leftover after parsing attributes in process `syz.9.1953'.
[  236.335796][T13933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  236.429755][ T5880] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[  236.451749][ T5880] usb 10-1: device descriptor read/8, error -71
[  236.718154][ T5880] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[  236.751093][ T5880] usb 10-1: device descriptor read/8, error -71
[  236.868228][ T5880] usb usb10-port1: unable to enumerate USB device
[  236.905938][T13966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24080 sclass=netlink_route_socket pid=13966 comm=syz.9.1965
[  236.943603][T13971] /dev/nullb0: Can't open blockdev
[  236.957033][T13971] pim6reg1: entered promiscuous mode
[  236.958887][T13971] pim6reg1: entered allmulticast mode
[  236.973025][T13971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13971 comm=syz.9.1966
[  237.101974][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1967'.
[  237.223791][T13973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13973 comm=syz.9.1967
[  237.810792][    C3] vxcan1: j1939_tp_rxtimer: 0xffff888047443800: rx timeout, send abort
[  238.310141][T14010] MTD: Couldn't look up './file0': -15
[  238.312906][T14010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=14010 comm=syz.2.1974
[  238.345310][    C3] vxcan1: j1939_tp_rxtimer: 0xffff888047443400: rx timeout, send abort
[  238.349239][    C3] vxcan1: j1939_tp_rxtimer: 0xffff888047443800: abort rx timeout. Force session deactivation
[  238.537045][   T42] audit: type=1400 audit(1787359945.092:32785): avc:  denied  { write } for  pid=14024 comm="syz.9.1979" name="subsystems" dev="configfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  238.545403][T14025] nvmet: adding nsid 1 to subsystem testsubsys
[  238.550307][   T42] audit: type=1400 audit(1787359945.111:32786): avc:  denied  { write } for  pid=14024 comm="syz.9.1979" name="testsubsys" dev="configfs" ino=60978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  238.557543][   T42] audit: type=1400 audit(1787359945.111:32787): avc:  denied  { create } for  pid=14024 comm="syz.9.1979" name="attr_allow_any_host" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1
[  238.563737][T14026] nvmet: failed to open file ./file0: (-21)
[  238.564526][   T42] audit: type=1400 audit(1787359945.111:32788): avc:  denied  { write } for  pid=14024 comm="syz.9.1979" name="namespaces" dev="configfs" ino=60979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  238.574911][   T42] audit: type=1400 audit(1787359945.139:32789): avc:  denied  { write } for  pid=14024 comm="syz.9.1979" name="ports" dev="configfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  238.584682][   T42] audit: type=1400 audit(1787359945.139:32790): avc:  denied  { write } for  pid=14024 comm="syz.9.1979" name="subsystems" dev="configfs" ino=63541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  238.593788][   T42] audit: type=1400 audit(1787359945.139:32791): avc:  denied  { write } for  pid=14024 comm="syz.9.1979" name="subsystems" dev="configfs" ino=63541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  238.612740][ T6547] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:dd3b0205-4acd-42ae-829b-ead2ee318334 for subsystem testsubsys not allowed
[  238.623972][T14025] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:dd3b0205-4acd-42ae-829b-ead2ee318334
[  238.807264][T14034] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1982'.
[  238.883213][    C3] vxcan1: j1939_tp_rxtimer: 0xffff888047443400: abort rx timeout. Force session deactivation
[  238.942107][ T8703] libceph: connect (1)[c::]:6789 error -101
[  238.944689][ T8703] libceph: mon0 (1)[c::]:6789 connect error
[  238.969407][T14050] netlink: 'syz.5.1987': attribute type 8 has an invalid length.
[  239.050674][T14046] ceph: No mds server is up or the cluster is laggy
[  239.130048][T14046] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1986'.
[  239.258836][T14067] 9p: Could not find request transport: ��xe
�ifid=0x0000000000tB�>O00000c
[  239.368311][T14075] GUP no longer grows the stack in syz.9.1994 (14075): 200000004000-20000000a000 (200000002000)
[  239.374129][T14075] CPU: 3 UID: 0 PID: 14075 Comm: syz.9.1994 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  239.374152][T14075] Tainted: [L]=SOFTLOCKUP
[  239.374156][T14075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  239.374171][T14075] Call Trace:
[  239.374183][T14075]  <TASK>
[  239.374188][T14075]  dump_stack_lvl+0x100/0x190
[  239.374233][T14075]  gup_vma_lookup.cold+0x83/0x96
[  239.374258][T14075]  __get_user_pages+0x252/0x3280
[  239.374290][T14075]  ? __pfx___get_user_pages+0x10/0x10
[  239.374306][T14075]  ? mtree_load+0x311/0xa90
[  239.374338][T14075]  ? mtree_load+0x311/0xa90
[  239.374355][T14075]  get_user_pages_remote+0x3d2/0xb10
[  239.374373][T14075]  ? mas_root_expand+0x6f0/0x750
[  239.374387][T14075]  ? __pfx_get_user_pages_remote+0x10/0x10
[  239.374410][T14075]  __access_remote_vm+0x3bb/0x890
[  239.374429][T14075]  ? __pfx___access_remote_vm+0x10/0x10
[  239.374444][T14075]  ? proc_pid_cmdline_read+0x31b/0x9a0
[  239.374471][T14075]  ? proc_pid_cmdline_read+0x4aa/0x9a0
[  239.374490][T14075]  proc_pid_cmdline_read+0x552/0x9a0
[  239.374523][T14075]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  239.374542][T14075]  ? rw_verify_area+0xce/0x6d0
[  239.374564][T14075]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  239.374581][T14075]  vfs_readv+0x5d8/0x8d0
[  239.374598][T14075]  ? __pfx_vfs_readv+0x10/0x10
[  239.374620][T14075]  ? __fget_files+0x21f/0x3d0
[  239.374649][T14075]  ? do_preadv+0x1ac/0x270
[  239.374660][T14075]  do_preadv+0x1ac/0x270
[  239.374673][T14075]  ? __pfx_do_preadv+0x10/0x10
[  239.374689][T14075]  do_syscall_64+0x123/0x790
[  239.374710][T14075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.374721][T14075] RIP: 0033:0x7f9c5cd9e0d9
[  239.374732][T14075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.374743][T14075] RSP: 002b:00007f9c5dc7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  239.374756][T14075] RAX: ffffffffffffffda RBX: 00007f9c5d025fa0 RCX: 00007f9c5cd9e0d9
[  239.374764][T14075] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003
[  239.374770][T14075] RBP: 00007f9c5ce35024 R08: 00000000fffffff9 R09: 0000000000000000
[  239.374777][T14075] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  239.374784][T14075] R13: 00007f9c5d026038 R14: 00007f9c5d025fa0 R15: 00007fff9224a308
[  239.374797][T14075]  </TASK>
[  239.376060][T14075] netlink: 'syz.9.1994': attribute type 63 has an invalid length.
[  239.453590][T14075] netlink: 5 bytes leftover after parsing attributes in process `syz.9.1994'.
[  239.459526][T14075] netlink: 'syz.9.1994': attribute type 10 has an invalid length.
[  239.475143][T14075] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  239.478250][T14075] netdevsim netdevsim9 netdevsim1: entered promiscuous mode
[  239.480951][T14075] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  239.486587][   T42] audit: type=1400 audit(1787359946.000:32792): avc:  denied  { create } for  pid=14073 comm="syz.9.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  239.494203][   T42] audit: type=1400 audit(1787359946.000:32793): avc:  denied  { setopt } for  pid=14073 comm="syz.9.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  239.502944][T14075] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1994'.
[  239.576094][T14084] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1997'.
[  239.580345][T14085] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1997'.
[  239.623117][T14087] syzkaller1: entered promiscuous mode
[  239.625001][T14087] syzkaller1: entered allmulticast mode
[  239.680875][T14087] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  239.785579][ T9005] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  239.794488][T14095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=14095 comm=syz.9.2003
[  239.886292][T14097] gretap0: entered promiscuous mode
[  239.888541][   T42] audit: type=1400 audit(1787359946.365:32794): avc:  denied  { write } for  pid=14099 comm="syz.9.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  239.898217][T14097] gretap0: entered allmulticast mode
[  239.967749][ T9005] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  239.972245][ T9005] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  239.976667][ T9005] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.220749][ T9005] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device
[  240.247528][ T9005] wwan wwan0: port wwan0qmi0 attached
[  240.264942][ T5439] veth0_vlan: left promiscuous mode
[  240.282813][ T7787] veth0_vlan: entered promiscuous mode
[  240.330111][ T5809] usb 11-1: new high-speed USB device number 20 using dummy_hcd
[  240.433483][ T9005] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 1a:2c:0e:5d:aa:18
[  240.511912][ T5809] usb 11-1: Using ep0 maxpacket: 32
[  240.514245][ T5809] usb 11-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40
[  240.519699][ T5809] usb 11-1: config 1 interface 0 has no altsetting 0
[  240.525372][ T5809] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.528046][ T5809] usb 11-1: Product: Ч
[  240.529383][ T5809] usb 11-1: Manufacturer: и
[  240.530937][ T5809] usb 11-1: SerialNumber: 쁕ࡥ䶩딽ꃫՠ㲅瑇毃≵鑊ꀦ㕹䃇ꪺ哄쭚䂇寥츑牰솁꿿㔮⍟̧䂒⠀퓴◟㡶분¶ﯽ楀鰳啡藽黭癗嶰쯝ቑ䠶㗭⫋휲̺ᱣ쟾㓭ᆞ䤯岮ꂖᶰ蘦ᝒᖁ庳괃蟎멋祦ￊꔡꧨъ䝔ꔡꍟ৆㧫⛠헌⚣鵛儳鴴ᅡ
[  240.773508][ T5809] usbhid 11-1:1.0: can't add hid device: -71
[  240.775564][ T5809] usbhid 11-1:1.0: probe with driver usbhid failed with error -71
[  240.783376][ T5809] usb 11-1: USB disconnect, device number 20
[  241.037511][T14175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37338 sclass=netlink_route_socket pid=14175 comm=syz.2.1996
[  241.447535][T14181] loop4: detected capacity change from 0 to 2640
[  241.464818][T14181] buffer_io_error: 10 callbacks suppressed
[  241.464843][T14181] Buffer I/O error on dev loop4, logical block 0, lost async page write
[  241.484790][T14181] Buffer I/O error on dev loop4, logical block 1, lost async page write
[  241.487534][T14181] Buffer I/O error on dev loop4, logical block 2, lost async page write
[  241.490157][T14181] Buffer I/O error on dev loop4, logical block 3, lost async page write
[  241.492789][T14181] Buffer I/O error on dev loop4, logical block 4, lost async page write
[  241.496076][T14181] Buffer I/O error on dev loop4, logical block 5, lost async page write
[  241.498815][T14181] Buffer I/O error on dev loop4, logical block 6, lost async page write
[  241.501419][T14181] Buffer I/O error on dev loop4, logical block 7, lost async page write
[  241.503982][T14181] Buffer I/O error on dev loop4, logical block 8, lost async page write
[  241.507024][T14181] Buffer I/O error on dev loop4, logical block 9, lost async page write
[  241.647958][T14148] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  241.717739][T14189] device-mapper: ioctl: populate_table: no targets specified
[  241.845874][T14197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  242.194527][T14208] __nla_validate_parse: 2 callbacks suppressed
[  242.194550][T14208] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2024'.
[  242.293617][T14211] syzkaller1: entered promiscuous mode
[  242.308607][T14211] syzkaller1: entered allmulticast mode
[  242.381869][ T5743] Bluetooth: hci1: command 0x0405 tx timeout
[  242.386901][T14217] iommufd_mock iommufd_mock0: Adding to iommu group 1
[  242.432200][T14219] overlayfs: overlapping lowerdir path
[  242.448084][T14220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.466092][T14217] iommufd_mock iommufd_mock1: Adding to iommu group 9
[  242.617882][T14216] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  242.669274][T14222] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2028'.
[  242.679179][T14222] bond0: entered promiscuous mode
[  242.683256][T14222] bond0: left promiscuous mode
[  242.698129][T14235] sctp: [Deprecated]: syz.9.2032 (pid 14235) Use of struct sctp_assoc_value in delayed_ack socket option.
[  242.698129][T14235] Use struct sctp_sack_info instead
[  242.708596][T14235] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2032'.
[  242.733813][ T5809] usb 7-1: USB disconnect, device number 8
[  242.737846][ T5809] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device
[  242.755315][T14240] xt_l2tp: v2 tid > 0xffff: 4294967294
[  242.873529][T14250] siw: device registration error -23
[  242.877050][T14246] input: syz1 as /devices/virtual/input/input27
[  242.986408][T14240] lo speed is unknown, defaulting to 1000
[  243.027237][ T5809] wwan wwan0: port wwan0qmi0 disconnected
[  243.045190][T14261] tipc: Started in network mode
[  243.047250][T14261] tipc: Node identity 1000001, cluster identity 4369
[  243.049959][T14261] tipc: Node number set to 16777217
[  243.051858][T14261] tipc: Cannot configure node identity twice
[  243.060374][T14256] block nbd5: NBD_DISCONNECT
[  243.061352][T14261] tipc: New replicast peer: 127.0.0.1
[  243.069768][T14251] block nbd5: Disconnected due to user request.
[  243.074762][T14261] tipc: Enabled bearer <udp:syz0>, priority 10
[  243.076428][T14251] block nbd5: shutting down sockets
[  243.218689][T14240] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2033'.
[  243.222051][T14240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  243.316230][T14292] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  243.535805][    T9] usb 11-1: new high-speed USB device number 21 using dummy_hcd
[  243.696893][    T9] usb 11-1: Using ep0 maxpacket: 8
[  243.699853][    T9] usb 11-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  243.704901][    T9] usb 11-1: config index 0 descriptor too short (expected 5924, got 36)
[  243.708695][    T9] usb 11-1: config 250 has an invalid interface number: 228 but max is -1
[  243.712225][    T9] usb 11-1: config 250 has 1 interface, different from the descriptor's value: 0
[  243.716063][    T9] usb 11-1: config 250 has no interface number 0
[  243.718986][    T9] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  243.723901][    T9] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  243.729153][    T9] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  243.733546][    T9] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  243.737736][    T9] usb 11-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  243.744184][    T9] usb 11-1: config 250 interface 228 has no altsetting 0
[  243.750108][    T9] usb 11-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  243.753730][    T9] usb 11-1: Product: syz
[  243.755536][    T9] usb 11-1: SerialNumber: syz
[  243.768631][    T9] hub 11-1:250.228: bad descriptor, ignoring hub
[  243.772291][    T9] hub 11-1:250.228: probe with driver hub failed with error -5
[  243.861400][T14319] tmpfs: Unknown parameter 'ino`e32'
[  243.896526][T14322] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  243.982588][T14275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.989014][T14275] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.165264][T14324] virtio-fs: tag </dev/sr0> not found
[  244.214645][    T9] usblp 11-1:250.228: usblp0: USB Bidirectional printer dev 21 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  244.252736][    T9] usb 11-1: USB disconnect, device number 21
[  244.260712][    T9] usblp0: removed
[  244.297334][T14323] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  244.349342][T14330] netlink: 'syz.5.2051': attribute type 12 has an invalid length.
[  244.351931][T14330] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2051'.
[  244.367955][T14326] NILFS (nbd2): device size too small
[  244.431344][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2053'.
[  244.636627][  T848] usb 10-1: new full-speed USB device number 33 using dummy_hcd
[  244.781517][T14337] netlink: 'syz.6.2054': attribute type 1 has an invalid length.
[  244.792903][T14337] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.798472][  T848] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  244.803562][  T848] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  244.808147][  T848] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  244.813631][T14339] bond0: (slave geneve3): making interface the new active one
[  244.813797][  T848] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.820334][T14339] bond0: (slave geneve3): Enslaving as an active interface with an up link
[  244.933280][T14349] netlink: 'syz.6.2056': attribute type 30 has an invalid length.
[  244.952475][T14349] bond3: option arp_missed_max: invalid value (0)
[  244.955274][T14349] bond3: option arp_missed_max: allowed values 1 - 255
[  244.962338][T14349] bond3 (unregistering): Released all slaves
[  245.041546][  T848] usb 10-1: usb_control_msg returned -32
[  245.049029][  T848] usbtmc 10-1:16.0: can't read capabilities
[  245.286739][ T5733] Bluetooth: hci1: unexpected Set CIG Parameters response data
[  245.291682][ T5733] Bluetooth: hci1: unexpected event for opcode 0x2062
[  245.345828][T14366] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  245.746936][   T42] kauditd_printk_skb: 29 callbacks suppressed
[  245.746969][   T42] audit: type=1400 audit(1787359951.849:32824): avc:  denied  { accept } for  pid=14383 comm="syz.6.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  245.890773][T14388] iommufd_mock iommufd_mock0: Adding to iommu group 1
[  246.252549][T14405] jffs2: notice: (14405) jffs2_build_xattr_subsystem: complete building xattr subsystem, 7 of xdatum (0 unchecked, 4 orphan) and 7 of xref (1 dead, 3 orphan) found.
[  246.260748][   T42] audit: type=1400 audit(1787359952.326:32825): avc:  denied  { setattr } for  pid=14404 comm="syz.6.2073" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  246.293891][T14408] ubi0: attaching mtd0
[  246.300228][T14408] ubi0: scanning is finished
[  246.302306][T14408] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  246.345136][T14415] MTD: Couldn't look up 'mtd0/file0': -2
[  246.358562][T14415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14415 comm=syz.6.2075
[  246.373549][T14415] netlink: 'syz.6.2075': attribute type 1 has an invalid length.
[  246.502162][T14408] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  246.586653][T14419] erspan0: entered promiscuous mode
[  246.718884][T14422] binder: 14421:14422 ioctl 8912 200000001a00 returned -22
[  246.769939][   T42] audit: type=1400 audit(1787359952.803:32826): avc:  denied  { bind } for  pid=14423 comm="syz.6.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  246.779378][   T42] audit: type=1400 audit(1787359952.803:32827): avc:  denied  { name_bind } for  pid=14423 comm="syz.6.2078" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  246.787141][   T42] audit: type=1400 audit(1787359952.803:32828): avc:  denied  { node_bind } for  pid=14423 comm="syz.6.2078" saddr=172.30.1.7 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  247.022980][   T42] audit: type=1400 audit(1787359953.046:32829): avc:  denied  { remount } for  pid=14428 comm="syz.6.2080" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  247.340033][ T5879] usb 11-1: new high-speed USB device number 22 using dummy_hcd
[  247.425807][  T848] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  247.522551][ T5879] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  247.529540][ T5879] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  247.535779][ T5879] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  247.543387][ T5879] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.546896][ T5879] usb 11-1: Product: syz
[  247.548706][ T5879] usb 11-1: Manufacturer: syz
[  247.550782][ T5879] usb 11-1: SerialNumber: syz
[  247.559228][ T5879] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected
[  247.566537][ T5879] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  247.578672][ T5879] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  247.586558][  T848] usb 7-1: Using ep0 maxpacket: 8
[  247.593636][  T848] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  247.602088][  T848] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  247.604503][ T7787] usb 10-1: USB disconnect, device number 33
[  247.610506][  T848] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  247.620525][  T848] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  247.625233][  T848] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  247.629672][  T848] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  247.634453][  T848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.639563][T14436] Invalid argument reading file caps for ./file0
[  247.887984][  T848] usb 7-1: usb_control_msg returned -32
[  247.889893][  T848] usbtmc 7-1:16.0: can't read capabilities
[  247.988603][T14442] Bluetooth: hci3: Frame reassembly failed (-84)
[  247.998225][ T9756] Bluetooth: hci3: Frame reassembly failed (-84)
[  248.317221][T14443] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_IN returned 0
[  248.472082][T14445] device-mapper: ioctl: Invalid ioctl structure: uuid �, name , dev 30
[  248.501640][   T42] audit: type=1400 audit(1787359954.422:32830): avc:  denied  { read } for  pid=14433 comm="syz.2.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  249.660425][ T5743] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  249.664026][ T5743] Bluetooth: hci1: Injecting HCI hardware error event
[  249.670997][ T5738] Bluetooth: hci1: hardware error 0x00
[  250.161250][ T5743] Bluetooth: hci3: command 0xfc11 tx timeout
[  250.170266][ T5733] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  250.365357][ T2322] usb 7-1: USB disconnect, device number 9
[  250.390800][ T5733] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  250.393538][T14447] Bluetooth: hci0: unsupported parameter 256
[  250.395714][T14447] Bluetooth: hci0: invalid len left 4, exp >= 7
[  250.600948][T14455] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2087'.
[  250.792038][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2089'.
[  250.795117][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2089'.
[  251.090852][ T5733] Bluetooth: hci4: unexpected event for opcode 0x203e
[  251.106200][T14430] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110
[  251.116708][T14430] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32
[  251.123217][ T5879] usb 11-1: USB disconnect, device number 22
[  251.135800][ T5879] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  251.145626][ T5879] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  251.164809][ T5879] ti_usb_3410_5052 11-1:2.0: device disconnected
[  251.175441][T14478] netlink: 'syz.6.2092': attribute type 1 has an invalid length.
[  251.180312][T14479] netlink: 'syz.6.2092': attribute type 1 has an invalid length.
[  251.526296][   T57] libceph: mon0 (1)[c::]:6789 socket error on write
[  251.568949][T14499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2096'.
[  251.589095][T14499] bond3: Invalid ad_actor_system MAC address.
[  251.591177][T14499] bond3: option ad_actor_system: invalid value (65541)
[  251.595631][T14499] bond3 (unregistering): Released all slaves
[  251.623854][T14496] ceph: No mds server is up or the cluster is laggy
[  251.848960][   T42] audit: type=1400 audit(2000000001.066:32831): avc:  denied  { write } for  pid=14505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  251.863199][   T42] audit: type=1400 audit(2000000001.076:32832): avc:  denied  { ioctl } for  pid=14509 comm="syz.6.2098" path="socket:[64567]" dev="sockfs" ino=64567 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  251.876114][ T5738] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  251.911551][   T42] audit: type=1400 audit(2000000001.122:32833): avc:  denied  { write } for  pid=14512 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  252.537669][T14535] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  252.537669][T14536] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[  252.760067][   T42] audit: type=1400 audit(2000000001.927:32834): avc:  denied  { create } for  pid=14549 comm="syz.2.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  252.767032][   T42] audit: type=1400 audit(2000000001.927:32835): avc:  denied  { connect } for  pid=14549 comm="syz.2.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  252.773686][   T42] audit: type=1400 audit(2000000001.927:32836): avc:  denied  { write } for  pid=14549 comm="syz.2.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  252.785580][T14552] ==================================================================
[  252.788128][T14552] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0
[  252.790724][T14552] Read of size 8 at addr ffff88802e406c18 by task syz.6.2109/14552
[  252.793491][T14550] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  252.793830][T14552] 
[  252.793861][T14552] CPU: 1 UID: 0 PID: 14552 Comm: syz.6.2109 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  252.793882][T14552] Tainted: [L]=SOFTLOCKUP
[  252.793886][T14552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  252.793901][T14552] Call Trace:
[  252.793914][T14552]  <TASK>
[  252.793919][T14552]  dump_stack_lvl+0x100/0x190
[  252.793947][T14552]  print_report+0x13d/0x4b0
[  252.793974][T14552]  ? __virt_addr_valid+0x239/0x430
[  252.794000][T14552]  ? dvb_device_open+0x33f/0x3b0
[  252.794335][T14552]  kasan_report+0xdf/0x1c0
[  252.794441][T14552]  ? dvb_device_open+0x33f/0x3b0
[  252.794460][T14552]  ? __pfx_dvb_device_open+0x10/0x10
[  252.794478][T14552]  dvb_device_open+0x33f/0x3b0
[  252.794495][T14552]  ? __pfx_dvb_device_open+0x10/0x10
[  252.794512][T14552]  chrdev_open+0x234/0x6a0
[  252.794535][T14552]  ? __pfx_chrdev_open+0x10/0x10
[  252.794551][T14552]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  252.794571][T14552]  do_dentry_open+0x6ab/0x14d0
[  252.794586][T14552]  ? __pfx_chrdev_open+0x10/0x10
[  252.794602][T14552]  vfs_open+0x82/0x3f0
[  252.794612][T14552]  path_openat+0x19fa/0x2440
[  252.794633][T14552]  ? __pfx_path_openat+0x10/0x10
[  252.794653][T14552]  do_file_open+0x20e/0x430
[  252.794673][T14552]  ? __pfx_do_file_open+0x10/0x10
[  252.794697][T14552]  ? _raw_spin_unlock+0x28/0x50
[  252.794738][T14552]  ? alloc_fd+0x471/0x7a0
[  252.794759][T14552]  do_sys_openat2+0x10f/0x1e0
[  252.794770][T14552]  ? __pfx_do_sys_openat2+0x10/0x10
[  252.794782][T14552]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  252.794808][T14552]  __x64_sys_openat+0x12d/0x210
[  252.794819][T14552]  ? __pfx___x64_sys_openat+0x10/0x10
[  252.794833][T14552]  do_syscall_64+0x123/0x790
[  252.794846][T14552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.794858][T14552] RIP: 0033:0x7f073d55e90e
[  252.794869][T14552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  252.794880][T14552] RSP: 002b:00007f073e3b7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  252.794894][T14552] RAX: ffffffffffffffda RBX: 00007f073e3b86c0 RCX: 00007f073d55e90e
[  252.794902][T14552] RDX: 0000000000000002 RSI: 00007f073e3b7c00 RDI: ffffffffffffff9c
[  252.794910][T14552] RBP: 00007f073e3b7c00 R08: 0000000000000000 R09: 0000000000000000
[  252.794916][T14552] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  252.794923][T14552] R13: 00007f073d826038 R14: 00007f073d825fa0 R15: 00007fff72fe2f58
[  252.794933][T14552]  </TASK>
[  252.794937][T14552] 
[  252.847208][T14553] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2109'.
[  252.848529][T14552] Allocated by task 1:
[  252.848556][T14552]  kasan_save_stack+0x30/0x50
[  252.851944][   T42] audit: type=1400 audit(2000000001.993:32837): avc:  denied  { map } for  pid=14551 comm="syz.6.2109" path="/461/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  252.853663][T14552]  kasan_save_track+0x14/0x30
[  252.855389][   T42] audit: type=1400 audit(2000000001.993:32838): avc:  denied  { execute } for  pid=14551 comm="syz.6.2109" path="/461/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  252.860684][T14552]  __kasan_kmalloc+0xaa/0xb0
[  252.860706][T14552]  __kmalloc_cache_noprof+0x2e7/0x6b0
[  252.860728][T14552]  dvb_register_device+0x1d6/0x1e20
[  252.860745][T14552]  dvb_register_frontend+0x552/0x820
[  252.912578][T14552]  vidtv_bridge_probe+0x44b/0xa30
[  252.914712][T14552]  platform_probe+0x106/0x1d0
[  252.916579][T14552]  really_probe+0x241/0xa60
[  252.918334][T14552]  __driver_probe_device+0x210/0x460
[  252.918396][T14554] device-mapper: ioctl: Invalid data size in the ioctl structure: 1426420478
[  252.920542][T14552]  driver_probe_device+0x4a/0x140
[  252.925195][T14552]  __driver_attach+0x21f/0x5b0
[  252.927234][T14552]  bus_for_each_dev+0x13e/0x1d0
[  252.929156][T14552]  bus_add_driver+0x305/0x5b0
[  252.931191][T14552]  driver_register+0x1e2/0x360
[  252.933147][T14552]  vidtv_bridge_init+0x52/0x80
[  252.935030][T14552]  do_one_initcall+0x11c/0x6f0
[  252.936804][T14552]  kernel_init_freeable+0x6ea/0x7b0
[  252.938650][T14552]  kernel_init+0x21/0x1e0
[  252.940210][T14552]  ret_from_fork+0x730/0xd60
[  252.942283][T14552]  ret_from_fork_asm+0x1a/0x30
[  252.944148][T14552] 
[  252.945206][T14552] Freed by task 14548:
[  252.946870][T14552]  kasan_save_stack+0x30/0x50
[  252.948762][T14552]  kasan_save_track+0x14/0x30
[  252.950801][T14552]  kasan_save_free_info+0x3b/0x70
[  252.952804][T14552]  __kasan_slab_free+0x5f/0x80
[  252.954888][T14552]  kfree+0x22b/0x6c0
[  252.956457][T14552]  dvb_device_put.part.0+0x57/0x90
[  252.958330][T14552]  dvb_device_open+0x2ba/0x3b0
[  252.959856][T14552]  chrdev_open+0x234/0x6a0
[  252.961317][T14552]  do_dentry_open+0x6ab/0x14d0
[  252.962818][T14552]  vfs_open+0x82/0x3f0
[  252.964094][T14552]  path_openat+0x19fa/0x2440
[  252.965860][T14552]  do_file_open+0x20e/0x430
[  252.967334][T14552]  do_sys_openat2+0x10f/0x1e0
[  252.968917][T14552]  __x64_sys_openat+0x12d/0x210
[  252.970529][T14552]  do_syscall_64+0x123/0x790
[  252.972011][T14552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.973898][T14552] 
[  252.974718][T14552] The buggy address belongs to the object at ffff88802e406c00
[  252.974718][T14552]  which belongs to the cache kmalloc-256 of size 256
[  252.979062][T14552] The buggy address is located 24 bytes inside of
[  252.979062][T14552]  freed 256-byte region [ffff88802e406c00, ffff88802e406d00)
[  252.983164][T14552] 
[  252.983963][T14552] The buggy address belongs to the physical page:
[  252.985932][T14552] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e406
[  252.988666][T14552] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  252.991341][T14552] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  252.993742][T14552] page_type: f5(slab)
[  252.995032][T14552] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122
[  252.997787][T14552] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  253.000425][T14552] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122
[  253.003070][T14552] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  253.005764][T14552] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[  253.009194][T14552] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  253.012562][T14552] page dumped because: kasan: bad access detected
[  253.015096][T14552] page_owner tracks the page as allocated
[  253.017479][T14552] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15109058917
[  253.024845][T14552]  post_alloc_hook+0xfd/0x120
[  253.026783][T14552]  get_page_from_freelist+0x110d/0x35b0
[  253.029011][T14552]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  253.031541][T14552]  new_slab+0xa5/0x640
[  253.033172][T14552]  refill_objects+0xe3/0x410
[  253.035073][T14552]  __pcs_replace_empty_main+0x372/0x680
[  253.037295][T14552]  __kmalloc_cache_noprof+0x47b/0x6b0
[  253.039438][T14552]  bus_add_driver+0x92/0x5b0
[  253.040978][T14552]  driver_register+0x1e2/0x360
[  253.042471][T14552]  usb_register_driver+0x21c/0x3e0
[  253.044065][T14552]  do_one_initcall+0x11c/0x6f0
[  253.045545][T14552]  kernel_init_freeable+0x6ea/0x7b0
[  253.047184][T14552]  kernel_init+0x21/0x1e0
[  253.048541][T14552]  ret_from_fork+0x730/0xd60
[  253.050019][T14552]  ret_from_fork_asm+0x1a/0x30
[  253.051565][T14552] page_owner free stack trace missing
[  253.053236][T14552] 
[  253.054043][T14552] Memory state around the buggy address:
[  253.055911][T14552]  ffff88802e406b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  253.058465][T14552]  ffff88802e406b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  253.061087][T14552] >ffff88802e406c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  253.064112][T14552]                             ^
[  253.065823][T14552]  ffff88802e406c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  253.068308][T14552]  ffff88802e406d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  253.070919][T14552] ==================================================================
[  253.077348][T14552] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  253.080289][T14552] CPU: 1 UID: 0 PID: 14552 Comm: syz.6.2109 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  253.084692][T14552] Tainted: [L]=SOFTLOCKUP
[  253.086436][T14552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  253.090552][T14552] Call Trace:
[  253.091827][T14552]  <TASK>
[  253.093100][T14552]  dump_stack_lvl+0x100/0x190
[  253.095053][T14552]  vpanic+0x553/0x970
[  253.096266][T14552]  ? __pfx_vpanic+0x10/0x10
[  253.097845][T14552]  ? mark_held_locks+0x40/0x70
[  253.099451][T14552]  ? dvb_device_open+0x33f/0x3b0
[  253.101085][T14552]  panic+0xd1/0xe0
[  253.102324][T14552]  ? __pfx_panic+0x10/0x10
[  253.103744][T14552]  ? dvb_device_open+0x33f/0x3b0
[  253.105375][T14552]  ? preempt_schedule_common+0x3c/0xb0
[  253.107206][T14552]  check_panic_on_warn.cold+0x19/0x34
[  253.108976][T14552]  end_report.part.0+0x3a/0x90
[  253.110630][T14552]  kasan_report.cold+0xe/0x18
[  253.112117][T14552]  ? dvb_device_open+0x33f/0x3b0
[  253.113667][T14552]  ? __pfx_dvb_device_open+0x10/0x10
[  253.115395][T14552]  dvb_device_open+0x33f/0x3b0
[  253.116968][T14552]  ? __pfx_dvb_device_open+0x10/0x10
[  253.118745][T14552]  chrdev_open+0x234/0x6a0
[  253.120197][T14552]  ? __pfx_chrdev_open+0x10/0x10
[  253.121819][T14552]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  253.123829][T14552]  do_dentry_open+0x6ab/0x14d0
[  253.125407][T14552]  ? __pfx_chrdev_open+0x10/0x10
[  253.127052][T14552]  vfs_open+0x82/0x3f0
[  253.128349][T14552]  path_openat+0x19fa/0x2440
[  253.129815][T14552]  ? __pfx_path_openat+0x10/0x10
[  253.131411][T14552]  do_file_open+0x20e/0x430
[  253.133166][T14552]  ? __pfx_do_file_open+0x10/0x10
[  253.135097][T14552]  ? _raw_spin_unlock+0x28/0x50
[  253.137279][T14552]  ? alloc_fd+0x471/0x7a0
[  253.139176][T14552]  do_sys_openat2+0x10f/0x1e0
[  253.141339][T14552]  ? __pfx_do_sys_openat2+0x10/0x10
[  253.143646][T14552]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  253.146413][T14552]  __x64_sys_openat+0x12d/0x210
[  253.148424][T14552]  ? __pfx___x64_sys_openat+0x10/0x10
[  253.150763][T14552]  do_syscall_64+0x123/0x790
[  253.152689][T14552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.155287][T14552] RIP: 0033:0x7f073d55e90e
[  253.157185][T14552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  253.164714][T14552] RSP: 002b:00007f073e3b7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  253.167434][T14552] RAX: ffffffffffffffda RBX: 00007f073e3b86c0 RCX: 00007f073d55e90e
[  253.170074][T14552] RDX: 0000000000000002 RSI: 00007f073e3b7c00 RDI: ffffffffffffff9c
[  253.172627][T14552] RBP: 00007f073e3b7c00 R08: 0000000000000000 R09: 0000000000000000
[  253.175248][T14552] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  253.177872][T14552] R13: 00007f073d826038 R14: 00007f073d825fa0 R15: 00007fff72fe2f58
[  253.180528][T14552]  </TASK>
[  253.182217][T14552] Kernel Offset: disabled
[  253.183620][T14552] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:48:33  Registers:
info registers vcpu 0

CPU#0
RAX=00000000dac32dd4 RBX=0000000000000001 RCX=00000000b5938ea7 RDX=000000000000000c
RSI=00000000feb19c6d RDI=0000000000000003 RBP=0000000000000cc0 RSP=ffffc9000c02f868
R8 =0000000000374d40 R9 =000000002df374d4 R10=0000000000000001 R11=0000000000000000
R12=ffffc9000c02f8c0 R13=000000000000000c R14=ffff88802e909cb0 R15=ffff88816cd74d40
RIP=ffffffff8559cda2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6023c3d6c0 ffffffff 00c00000
GS =0000 ffff8880d5ba2000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000001000 CR3=000000003d994000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000001800 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff389b72a6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff389b72a6 00007fff389b72ac
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6022e35607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6022e35647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6022e357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6022e35639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6022ff25f8 00007f6022ff25c8 00007f6022ff2600 00007f6022ff25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000012 RCX=ffffffff81febdf7 RDX=0000000000000012
RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff8daa339b RSP=ffffc9000d5fecc0
R8 =0000000000000006 R9 =0000000000000057 R10=00000000000000b5 R11=00000000000024a3
R12=0000000000000058 R13=00000000000000b5 R14=dffffc0000000000 R15=ffffc9000d5feda0
RIP=ffffffff820afa70 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f073e3b86c0 ffffffff 00c00000
GS =0000 ffff8880d5ca2000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f073d587700 CR3=0000000027dea000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000009eba 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff72fe3446
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff72fe3446 00007fff72fe344c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f073d635607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f073d635647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f073d6357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f073d635639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f073d7f25f8 00007f073d7f25c8 00007f073d7f2600 00007f073d7f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000001dc639 RBX=ffff88801f6b4b00 RCX=ffffffff8bc6f115 RDX=0000000000000001
RSI=ffffffff8e3d3fc0 RDI=ffffffff8c615f80 RBP=ffffed1003ed6960 RSP=ffffc90000187e00
R8 =0000000000000001 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000
RIP=ffffffff8bc6d6bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5da2000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fff389b7118 CR3=0000000057ce4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 676e697a65657266 5f746e657261702e
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff389b72a6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff389b72a6 00007fff389b72ac
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6022e35607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6022e35647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6022e357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6022e35639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000216ec5 RBX=ffff88801f6b2580 RCX=ffffffff8bc6f115 RDX=0000000000000001
RSI=ffffffff8e3d3fc0 RDI=ffffffff8c615f80 RBP=ffffed1003ed64b0 RSP=ffffc90000197e00
R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000
RIP=ffffffff8bc6d6bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5ea2000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c3639b2 CR3=0000000056d33000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000001800 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00307265646e6962 2f73667265646e69
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4b986706
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4b986706 00007ffd4b98670c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70e1835607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70e1835647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70e18357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f70e1835639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a47030da27bd0f7 71dfbc471c6642f9 83fd16f4abd9643a 33b2e857d7b35534
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c543d5e6deec569 27da0e936d201fe4 962a8ef19eb4b282 b8d2a86e63ce4b4a
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000