last executing test programs:

42.532351121s ago: executing program 2 (id=1059):
syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

42.46943043s ago: executing program 2 (id=1061):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$getown(r0, 0x9)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000010400000000fddb", @ANYRES32=0x0], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20004004)
open_by_handle_at(r1, &(0x7f0000001080)=@OVL_FILEID_V1={0x1018, 0xf8, {'\x00', {0x0, 0xfb, 0x1015, 0x5, 0x4, "b3dd20514edcaff4566caa3b2247d096", "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"}}}, 0x2000)
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

42.469048949s ago: executing program 2 (id=1063):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x3c, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x20, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})
timer_create(0x2, &(0x7f00000005c0)={0x0, 0x12, 0x1, @thr={&(0x7f0000000300)="99e041e72029e902193a987327b138d7ac0b19573767ce1f2d40211814a37e0abe6457716f53a89354cf0d860223a5f0bf8b8f6b6a17133dc1f97b5799f4a1b7e3ae21439995ecb44904e8e70c4aa9b488f2a30c19485870ec613c19dba80497a8c6d8b594edb867660418f827489f0ec9c26d736f16bcb27e35b581c953044f04761d9c6c8f5dbd007004ea6c091e29cac07466b3f2afd0d8df22d8ca572cb015c4f971ca3f6329c7b48ecfbea145699304315a0ad487ccaf8293ca49d9f11be1ef70ff5bfcf76ec100cb38d1cd4e111db900caec494d16d89dff99423bb151f8a763c0546ba2d76fdaa9657a2c9d2f7d", &(0x7f0000000400)="b8eeb4797973de525d8aeaaf8dc9d4"}}, &(0x7f0000000600))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000200)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x7, 0x8, 0x1e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x8, 0x780f, 0xfffffffc, 0x58c}})
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0xd4, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x5c, 0x2, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40084}, 0x4000080)

42.400040062s ago: executing program 2 (id=1065):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000700000138000000090a010400000000000000000700000008000a400000000008000640ffffff110900010073797a300000000008000540000000216c0000000c0a01030000000000000000070000080900020073797a0073797a3000000000400003803c000080080003400000200230000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140000001000010000000000000000000084000a00"/224], 0xe0}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x200dc91, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r4=>0x0})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl(r5, 0xfffff000, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="0700000090000000feffffff0000000012100fb45e739d21baecf90261eb75e76693d78881ec3208ab10e6b009b91bc37cea8c7d67dddb4c62308e7fa056a725b449b42c6c1dff930a04d5281a34799153b6467bf1b497ea5747e3", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="020000800100000004000080040000007839f6a95b581f0d"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)

42.399211899s ago: executing program 2 (id=1067):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$getown(r0, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r6, 0x0, &(0x7f0000579000/0x2000)=nil, 0x2000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r6, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f00000005c0)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x5})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001440), 0x49001, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r8, 0x3ba0, &(0x7f0000000480)={0x48, 0x8, r7, 0x0, 0x201, 0xe00, &(0x7f0000001480)="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", 0x4})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x64, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97bf38b07526ba74"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="676bf8adf76ef9239f76ade5982263631eb98641e02fecfa3f463b4e05635455"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e6df37f420b09048b71a51816d112969"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x840)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x5, 0x1e92d8, 0x3dc92f})

42.068886615s ago: executing program 2 (id=1075):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r2 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)

41.997939871s ago: executing program 32 (id=1075):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r2 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)

4.210416654s ago: executing program 0 (id=1819):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) (async)
bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]})
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800)
close_range(r4, 0xffffffffffffffff, 0x0) (async)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000140)={0x18, 0x1, 0x0, 0x0, r2, 0x1})
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000340)=""/112, &(0x7f0000000100)=0x70) (async)
getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000340)=""/112, &(0x7f0000000100)=0x70)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
clock_gettime(0x0, &(0x7f0000001200)) (async)
clock_gettime(0x0, &(0x7f0000001200)={<r7=>0x0, <r8=>0x0})
recvmmsg(r6, &(0x7f0000001040), 0x0, 0x2b90760db42614d4, &(0x7f0000001240)={r7, r8+10000000})
clock_gettime(0x0, &(0x7f0000001380))
r9 = socket$inet6_dccp(0xa, 0x6, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f0000002540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001b00)=""/203, 0xcb}], 0x1}, 0x40002000) (async)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001b00)=""/203, 0xcb}], 0x1}, 0x40002000)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'})
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, 0x0) (async)
ioctl$TUNSETIFF(r10, 0x400454ca, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x40}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x40}}, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0xfee5, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000010100800c0001000000000000000000140003"], 0x114}], 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=r5, @ANYBLOB="c5c876d700000000240012800b00010067726574617000001400028008000100", @ANYRES32=r5, @ANYBLOB="06000e0007"], 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)

4.06570753s ago: executing program 0 (id=1822):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001800010000000000000000000a0000000000fd00002c00003800160034000100090000000000000000041002fc000000ff020000000000000000006558000001fe8000000000000000000000000000aa060015000300000008000400", @ANYRES32=r1, @ANYBLOB], 0x64}}, 0x0)

4.064423048s ago: executing program 0 (id=1825):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000000100)={&(0x7f0000000800)=[0x7f, 0x14, 0x1, 0x1, 0x7, 0xffffffff, 0x2, 0x7, 0x59, 0xfffffff1, 0x3, 0xfffffffe, 0x81, 0x0, 0x1, 0x2, 0x101, 0x0, 0x3, 0x8, 0x4, 0x6, 0x6, 0x7, 0x3, 0x7f, 0xc3a, 0x6, 0x9, 0x400, 0x8, 0x44a8ffb, 0xa2, 0x9, 0x5, 0x1, 0x1, 0xad0, 0x9, 0x7, 0x1, 0x8, 0x10, 0x1, 0x1ff, 0x1, 0x1, 0x8, 0x3ff, 0x2, 0x7, 0x2, 0x9, 0x3, 0x992d, 0xc00000, 0xfffffffa, 0x0, 0x3, 0x1, 0x9, 0x1, 0x1, 0x7, 0x4, 0x81, 0x0, 0x6, 0x9, 0x101, 0xc2e3, 0x2, 0x8, 0x0, 0xc, 0xfb8d, 0x6, 0x5, 0x12, 0x1000, 0x81, 0x7, 0x6, 0x800, 0x9, 0x0, 0x2, 0xfffffffe, 0xb, 0xe49, 0x9, 0x1, 0x3ff, 0xf36f, 0xe, 0x6, 0x1, 0x5, 0x0, 0x5, 0x1, 0x7fffffff, 0x8, 0x34c, 0xc86, 0x2, 0x7ff, 0x1ff, 0x0, 0x4d, 0x4, 0x3, 0x9, 0x34f4, 0x80000001, 0xfffffff9, 0x1000, 0x6, 0x8001, 0x2c91, 0x81, 0x3, 0x3, 0x5, 0x8, 0x47, 0x58, 0x1ff, 0xa, 0x17, 0x5, 0x0, 0xc, 0x4e6, 0x3, 0x4, 0x3, 0x7, 0x5, 0x835, 0x350a, 0x8000, 0x8001, 0x81, 0x6, 0x4, 0x5, 0x1, 0x23c, 0xfffffff8, 0x3, 0xffff, 0x10, 0xd, 0x7, 0x10001, 0x9, 0xffff2996, 0x10001, 0xd, 0x5, 0x3, 0x3, 0x6, 0x8, 0x5, 0x1000, 0x67, 0x8, 0x5, 0x389, 0x4, 0x2, 0x3ff, 0xa4, 0x8, 0x3, 0x7, 0x6, 0x5, 0x7ff, 0x5b, 0x400, 0xffff, 0x8, 0x71, 0x4, 0x9, 0x1, 0x5, 0xaf, 0x0, 0xffff, 0x5, 0x0, 0x2, 0x1, 0x8, 0x505ad8c0, 0x4, 0xfffff27e, 0x3, 0x2, 0x200, 0x7745dedb, 0x6, 0x80000000, 0xd, 0x2, 0x3a, 0x4, 0x3, 0x4, 0x3, 0x4, 0x5, 0x6, 0x9, 0x7, 0x1000, 0x6, 0x0, 0x0, 0x3, 0x7, 0x2, 0x7, 0x2, 0x1, 0x401, 0xfffffffd, 0x3, 0x4, 0x7e, 0x9, 0x5, 0x5, 0x5, 0xfffffff7, 0x6, 0x2, 0x8, 0x9, 0x1, 0x80000001, 0x80000001, 0x2520, 0x5, 0x4, 0x7, 0x6, 0x8, 0x7, 0x52, 0x0, 0x8, 0x3, 0xe8f4, 0x5, 0x3, 0x3, 0x1000, 0x6, 0x8001, 0x1, 0x1, 0x4e, 0x5, 0x8, 0x9, 0x3, 0x2, 0x5, 0x9, 0x2, 0x9, 0x9, 0x8, 0x2, 0x9, 0x3, 0x5, 0x8001, 0x7, 0x20004000, 0x80000001, 0x4, 0x2, 0x8001, 0x10000, 0x1, 0x9, 0x1, 0x4, 0xb040, 0x9c1, 0x3, 0x3, 0x5, 0x5, 0x2c, 0x8, 0x2c, 0x5, 0x2, 0x5, 0x2, 0x9000, 0x6, 0x9, 0x9b, 0x1, 0x0, 0x2, 0x514c, 0x6, 0x51, 0x7, 0x5, 0x1, 0x10000, 0x6, 0x2, 0x9, 0x7dd6, 0x7, 0x75, 0x0, 0x6, 0x8, 0x4254, 0x8000, 0x1, 0xa8fd, 0x9, 0x1, 0x0, 0x6, 0xfffffff9, 0x7ff, 0xaa51, 0x3a, 0x3ff, 0x56c, 0x1, 0x0, 0x9, 0x800, 0x0, 0x5, 0x4, 0x440, 0xfff, 0x1, 0x0, 0xed, 0x4, 0x1, 0x96e99f7, 0x2400000, 0x4, 0x7, 0x7ff, 0x8, 0x4e, 0x7, 0x7f, 0x2, 0x0, 0x6, 0x4, 0x2, 0x0, 0x7, 0xfffffff8, 0xd, 0x5, 0x2, 0x2, 0x7, 0x4, 0x5, 0x3, 0x7, 0xfffffc59, 0x1, 0x8000, 0xf716, 0x6, 0x4, 0x2, 0xaa, 0xffffffff, 0xffffff67, 0x5, 0x3, 0x7f, 0x9, 0x1, 0xdf5, 0x4, 0xfffffffc, 0x6, 0x0, 0x5, 0x3ff, 0xcb0, 0x2, 0x7a96, 0x467, 0x0, 0xdac, 0xffffffff, 0xffff, 0x7fffffff, 0x0, 0x5, 0x7ff, 0x6c, 0x800, 0xa, 0x2, 0x6, 0x8, 0x0, 0xd673, 0x10001, 0x8, 0x0, 0x80000001, 0x1, 0xd27, 0x8, 0xfff, 0x9, 0x18c2, 0x5, 0x2, 0x2, 0x9, 0x59, 0x8854, 0x0, 0x273b, 0x3, 0x400, 0x0, 0x5b, 0xa, 0x0, 0x3, 0x2, 0x0, 0x7ff, 0x5, 0xfffffffc, 0x3, 0x3, 0x8, 0x6, 0x9, 0x6a2, 0x8, 0x7, 0x13, 0xdae, 0x3, 0x1ff, 0x4, 0x1, 0x1, 0x5, 0x4, 0x0, 0x0, 0x6, 0x5, 0x1, 0x8001, 0x8, 0x0, 0x1, 0x5, 0x81, 0x0, 0x80000001, 0x84, 0x0, 0xdd7, 0xa2, 0x3, 0xe166, 0x5, 0x1, 0xfffffffa, 0x9, 0xe6, 0x7c53, 0x4, 0x450, 0x6, 0x7fff, 0x7, 0xd, 0xcbf8, 0x8, 0x8, 0x16de, 0xfffffb9a, 0x8001, 0x6, 0x7ff, 0xf, 0x6, 0x3, 0x7, 0xe40, 0x1, 0x3, 0x72, 0x10, 0xcc3, 0x86c00000, 0x3, 0xc0000000, 0x9, 0x0, 0x3, 0x2, 0xc826, 0x9, 0xfffffff1, 0x6, 0xfffffffb, 0x1, 0x8e8, 0x9, 0x4, 0x6, 0x3, 0x3, 0x59b3, 0x3, 0x2, 0x9, 0x400, 0x5, 0x28, 0x5, 0x8001, 0x2, 0xffffffff, 0x10, 0x3, 0x8, 0x0, 0x5cd4, 0xfffffffb, 0x4, 0x0, 0x100, 0x0, 0x5, 0xfffffffb, 0x2, 0x9, 0x7, 0x6, 0x2, 0x688d, 0x100, 0x7, 0x0, 0xc, 0x4, 0x3, 0x1fe3, 0x5, 0x3, 0x81, 0x4, 0x3, 0x9, 0x5, 0xf37a, 0x1, 0x6, 0x116, 0xc, 0x10001, 0x3, 0x0, 0x8000, 0x9, 0xfff, 0x4, 0x7, 0xa264, 0x7, 0x8000, 0x2, 0x6, 0xe, 0x0, 0x200, 0x101, 0x4, 0x4, 0x9, 0x6, 0x0, 0x7fff, 0x9, 0x81, 0xb, 0x9, 0x12f, 0x1, 0x0, 0x5, 0x9, 0xe7, 0x5, 0x401, 0x80000000, 0x0, 0x9, 0x7ff, 0xfffffffb, 0x7, 0x6a7, 0x9f69, 0xda, 0x10001, 0x9, 0x2, 0x8, 0x9de, 0x2, 0x10000, 0x8001, 0x5538, 0x9, 0x0, 0x9, 0x3, 0x310, 0x7, 0x5, 0x9, 0x5, 0x80000000, 0x8000, 0x5, 0xb9500000, 0x2, 0x1ff, 0x7, 0xdaf1, 0x4, 0x40, 0x3d8, 0x4, 0x9, 0x3a75, 0xb8, 0x7, 0x756, 0x6, 0xfff, 0x6, 0x8, 0x7, 0x0, 0x9, 0x1, 0xfffffffc, 0x2, 0x0, 0x4, 0x0, 0x6, 0x81, 0x8b7, 0x2, 0x2, 0xfff, 0x7f, 0x5, 0x6, 0x3b, 0x101, 0x10000000, 0x7, 0xf2c7, 0xbe, 0x26f, 0x6, 0xd1, 0x81, 0xc8f, 0x5, 0x9c2, 0xd66, 0x6, 0xc9b2, 0xf1, 0x101, 0x800, 0x4, 0x8001, 0x0, 0x4, 0x400, 0x2, 0x98d, 0xffff, 0x10001, 0x1, 0x5, 0xe, 0x741, 0x2, 0x4, 0x200, 0x6, 0x91, 0x6, 0x3, 0x7ff, 0x5, 0x81, 0xbb, 0x7, 0x3, 0x0, 0x0, 0x724, 0x3, 0x0, 0xf45, 0x2, 0x3, 0x400, 0x1, 0x7, 0x3, 0x2, 0x2, 0x7, 0xb5c, 0xfffffff8, 0xfffff000, 0x9, 0x9, 0x2, 0x200, 0x9, 0x8, 0xaf, 0x0, 0x3, 0x3, 0x0, 0x7ff, 0x7f, 0xffff0000, 0x1, 0x4, 0x0, 0xfffff019, 0xae, 0xb, 0x5, 0x3, 0xfffffffa, 0x0, 0x9, 0x7d6, 0x2, 0x5, 0x6, 0x7ff, 0xe0, 0x7fff, 0xfffffffb, 0xfffffffa, 0x8, 0x0, 0x3, 0x8, 0x4, 0x9, 0x7ff, 0x0, 0x8, 0x8, 0x10001, 0x10000, 0x8, 0x1, 0xc4, 0xffff, 0x7ff, 0x4, 0x6, 0xd, 0x1, 0x3, 0x5, 0x81, 0x85d, 0x1, 0x5, 0xffffffff, 0x2, 0x3e, 0x4e, 0x7f, 0xa, 0xfffffff3, 0x200, 0x0, 0x6, 0x8, 0xffff228c, 0x6, 0x418bf1a7, 0x3, 0x5967, 0x6, 0x4, 0x40, 0x100, 0x5, 0xb, 0xfff, 0x7, 0x9, 0x8, 0x0, 0xd, 0x7, 0x9, 0x3, 0x8, 0x8, 0x79ff, 0xfffffff9, 0xff, 0x0, 0x8, 0x0, 0x4, 0x64f, 0xb4e, 0x9, 0x10001, 0x7, 0xc9, 0xfffffffe, 0x8, 0x9, 0xc, 0x7, 0x8, 0x71d, 0xf, 0x40, 0x8, 0x1, 0x7544, 0x5, 0x0, 0x4, 0x9, 0xee9, 0xfffff40d, 0x5, 0xfffffffd, 0x7, 0x2, 0x107, 0x5, 0x7, 0x7, 0x1, 0x6, 0x8, 0x4, 0x10001, 0x1, 0x3, 0x2, 0x3, 0x6, 0x8, 0x5, 0xfffffffa, 0xe, 0xfaf, 0xfffffff8, 0x81, 0x7, 0xfff, 0xfffffbff, 0x8, 0x6, 0x3, 0x7ff, 0xffffffff, 0x9, 0x0, 0x1, 0x9, 0x0, 0x8, 0x3, 0x3, 0x5, 0x9, 0x0, 0x2, 0x8, 0x1, 0x9, 0xffff, 0x6, 0x2e1b, 0x63, 0x7c, 0x1000, 0x2, 0x3, 0x1, 0x80, 0x5c84c2f3, 0x138d, 0x10, 0x10, 0x1ad3, 0x2ac8, 0x1, 0xc, 0x8001, 0x2, 0x5, 0x6, 0x5, 0x101, 0x8, 0x5, 0x100, 0x64, 0x7, 0x7f, 0x2, 0xf, 0x6, 0xeb15, 0x3ff, 0x8, 0x200, 0x7, 0x6, 0x10, 0xffffff00, 0x5, 0x1000, 0x10, 0x8, 0x1, 0x101, 0x7, 0x1000, 0x7, 0x6, 0xfffffff1, 0x2, 0xb, 0x6, 0x4, 0x200, 0x9, 0x4, 0x1b, 0x4, 0xfffffffc, 0x401, 0x8, 0x7, 0x0, 0xb, 0x1, 0xb, 0x1, 0xffffffff, 0x7, 0x5, 0x8, 0x78, 0x0, 0x4, 0xa0, 0x2, 0x40, 0xd, 0x2, 0x6, 0xd5, 0x2, 0x4, 0x2, 0x1, 0x10, 0x44, 0x101, 0x2, 0x400, 0x1, 0x3, 0xbb, 0x4, 0xff], 0x2, 0x400, 0x4})
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x18c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}, {0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x9, 0x2, "7be70a83ca"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7f4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x144, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x5b, 0x2, "3d70b8975e7909e913b12c0565645ca478a68c042e118ddce53314ad73620d1e3bbeb6b1a43096c5a71d8e079d32feab4aaf64cf86a6d92c0406388140d245a7415f473e32c7e0b1ca480dd52658620d2487afbf9aa9c1"}}, {0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd9, 0x1, "b76b299fc6d32fc7cbbfae505f1480ed82c9deb1e4d37cb329599516b6ba464fe1d87c15525eaca7a6cf108565a66ecedee618d32da2caaac65570207a7d2f8529a09f8437d7a360a2a32eeb84f92e4e289409ba504245d01a9289bf669ab3c08baa4bd33bdba4e21f291e208f74b5e37ab4e8a47dab17cc0c40e761875282620341749409b522c1072d199f43e788fe3410373a7b0a280fb0419783313128eaadba9c0723a858899153e7ed89da512fd61d070975ba321c43e6de080dfb91d597318b8a9caafac1418b0f0685797f15fe95158c97"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
semget$private(0x0, 0x6, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x8c, r4, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x67, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x0, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

3.998551494s ago: executing program 0 (id=1827):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0)
fcntl$addseals(r1, 0x409, 0x3f)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="0a0006000802110000000000050019"], 0x44}}, 0x4000)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000), 0x4)
recvfrom(r2, &(0x7f00000002c0)=""/207, 0xcf, 0x0, 0x0, 0x0)
sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98", 0xa0}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558be", 0x25}], 0x2}}], 0x1, 0xc0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100027da8e340ba0d0050883d0000000109021200010100001008f58c000077b36a00"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x0, 0x60d, &(0x7f00000016c0)={{0x12, 0x1, 0x110, 0x20, 0x7a, 0xb1, 0x48, 0x1e59, 0x2, 0x6d55, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5fb, 0x4, 0x7, 0x7, 0x284305a163b4a462, 0x8, [{{0x9, 0x4, 0x1b, 0x4, 0x9, 0xaf, 0xee, 0x90, 0xf, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "6d54c283"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xa, 0xfe01, 0x1, 0x23}, [@country_functional={0xa, 0x24, 0x7, 0x4, 0x40, [0x509, 0x9]}, @dmm={0x7, 0x24, 0x14, 0x7, 0x7fff}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "e0218ff289"}, {0x5, 0x24, 0x0, 0x84a}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x80, 0x9, 0xa}, {0x6, 0x24, 0x1a, 0x8, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x27}, @dmm={0x7, 0x24, 0x14, 0x5e, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x1000, 0x84, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0x40}]}], [{{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x3, 0x4, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x2, 0x9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x401}]}}, {{0x9, 0x5, 0x80, 0x10, 0x240, 0x8, 0x74, 0x41, [@generic={0xa5, 0xc, "97319c382fe199463947b42a1a24e556caedbefb169f3d5209eeda4803870f2838ed4153e33298ce4df92062976d2e2b3efe43ba7ee22209bf6b2161b54d25c369701a0f8d48b5ea8cc0d2a045f5d88a2fc3f28265d0ba169d43fb56427a8754180bdc503eef084a941b0f18c78054f53aef14624542d2ba161a5eabc97ad870c0335ee492ba5ddd02cdb510065f70aefe78e5670cfc4c5d89baa4dd2c52737716e803"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x6, 0x8, 0x5}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x9, 0x4, 0x8}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0x1, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x4, 0xd, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x66, 0x8000}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x2, 0x7, 0x3, [@generic={0xa7, 0x9, "251bee4bce667ef5121d62af97f38e03ad37deef6c7cab51d55c7e06eca4d5bcad0be71fc53fd6159eeabe1ca160b438e51365e66dd42a93ea606bbef1f37b9f48421d6127e18efbba0954f5b8173508b44db8d9e35b326cd6e067dfdd46b2a7c36867b8cf5024c3f5ecc2b93f9c0be40dbbdb7fd27ff52d966e2e1c7c82f6cb21b1a6e74ba0450ce300cbb81e9c44362eb9a3ede227106b2bc215115dbd15c6590c45702f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x5}]}}, {{0x9, 0x5, 0x7, 0xc, 0x40, 0x2, 0x1, 0x4}}]}}, {{0x9, 0x4, 0x0, 0x8, 0x4, 0xff, 0xff, 0xff, 0x2, [@generic={0x13, 0xf, "c6f0bcc7689308cfe7c8ba647b38127045"}], [{{0x9, 0x5, 0x5, 0x2, 0x18, 0x4, 0x1, 0x9, [@generic={0x80, 0x22, "3f85b9f94c65564b41f8b7b4abdb465e5a57dde3d18fab0a18e2449860dcaf35a706975a92e4c162ca24c365805a38506c5cea43ad22b001c8c122133132a8c1e5f753d055739c7a0eb2c3cce2df432df3a67bd63b19c8df7f85c58fd33abe185cf5e7d82171a17d24fda679cf2594844a1878949076e391db4a2d47f83e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x9, 0xf7, 0x2e}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x19, 0x9, 0x0, [@generic={0xf, 0x11, "9e1b3e6727fbb4710db3ebc4fd"}, @generic={0x56, 0xc, "fcc9dea4d6862fadf83f0318eb98fec81dd624b15d5e9b304ba579c1c70985730d0e45da8b46ff91b1a14d640d975511eb877e0601b28dc8f146cb431180642f33d08f67c65aa547c46846f18572c50f0102b3d1"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x610, 0x81, 0x2, 0x90, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0xa}]}}]}}, {{0x9, 0x4, 0xa8, 0x9, 0xe, 0xff, 0x47, 0xd0, 0x8, [], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0xe0, 0x4, 0xbf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x81}]}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x1, 0x8, 0xa, [@generic={0x70, 0xe, "b2285760f1bf8777d7f8e9420dc433a5c3914716940e20cccc4f09fccc8e7a9a0baa8d871072ae460c9fa96221086de154d0d96d3cc872c0129eb644bd5bedc36914029b8cbf31683faf53c0f1844b59e1a47b0d3097c262445510889c34ae2821474dc2dd9c79106ca5efd940df"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0xb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xa, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0x8, 0x10}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x34, 0xc5, 0x1}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0xc, 0xe, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x21}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x2, 0xb, 0xd7}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x9, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6f, 0x10}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x8, 0xa1, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xe, 0x4, 0xb}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x1b, 0x5, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x0, 0x6, 0x0, [@generic={0x47, 0x10, "bcfd1f0b0c746c5f5768e2abc0732a38c51b27b76f7cb5aa2b6a76d19749d55ee6cfc2b979cec8bb5347a00c69f583caa8612e757281810214ec8e4a77ac3159322cbdd675"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x200}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x8c, 0x0, 0x2}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x8, 0xa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4a, 0x81}]}}]}}, {{0x9, 0x4, 0x8b, 0x5, 0x9, 0xa2, 0xed, 0x69, 0x2, [@hid_hid={0x9, 0x21, 0x81, 0x14, 0x1, {0x22, 0x582}}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x7, 0x0, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2d3}]}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x7, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0x3, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x9c}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf3, 0x2}]}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0xe, 0x4, 0x3d, [@generic={0x76, 0x21, "a7b477487b21775c6cb6719bf3b9ed728a5d21271db00b789e0db0f39ff299c3c9220e5eb7cd67a5e90fe022e07633e26196ee95abe1d52e74bfbb5613273221bdc33ce37bda7316b3c9f86b8e021053f4b585f9aedd9789a6536803240948c4d5df7be933f353b00b6f3cac439145f53f3d0152"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x2, 0x8, 0x9}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0xc8, 0xb, 0xfc}}, {{0x9, 0x5, 0x4, 0x1, 0x0, 0x51, 0xb, 0x3}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x3, 0xc8, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x8}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0xfb, 0xfa, 0x1}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x7, 0x0, 0x3, 0x8, 0x50}, 0x21, &(0x7f0000000200)={0x5, 0xf, 0x21, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x8, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1e, 0x84, 0x2, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x92, 0x9f, 0x4, 0x1}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44a}}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001340)="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", 0x341, 0x20000000, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x398, @empty}, 0x1c)

1.167287189s ago: executing program 3 (id=1856):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
r2 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040))
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
read$FUSE(r4, &(0x7f0000000880)={0x2020}, 0x2020)
syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="f3660f01df2e670f0f06a466b9c40900000f320f5f0abaf80c66b8a80a428f66efbafc0c66b8ffff000066ef8b5ee8f30f1ecc0fc71fb800008ed80fb56455", 0xffffffffffffffd2}], 0x1, 0xa, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x38, 0x69, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.02014615s ago: executing program 3 (id=1859):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001800010000000000000000000a0000000000fd00002c00003800160034000100090000000000000000041002fc000000ff020000000000000000000081000001fe8000000000000000000000000000aa060015000300000008000400", @ANYRES32=r1, @ANYBLOB], 0x64}}, 0x0)

1.019961376s ago: executing program 3 (id=1860):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x18c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}, {0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x9, 0x2, "7be70a83ca"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7f4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x144, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x5b, 0x2, "3d70b8975e7909e913b12c0565645ca478a68c042e118ddce53314ad73620d1e3bbeb6b1a43096c5a71d8e079d32feab4aaf64cf86a6d92c0406388140d245a7415f473e32c7e0b1ca480dd52658620d2487afbf9aa9c1"}}, {0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd9, 0x1, "b76b299fc6d32fc7cbbfae505f1480ed82c9deb1e4d37cb329599516b6ba464fe1d87c15525eaca7a6cf108565a66ecedee618d32da2caaac65570207a7d2f8529a09f8437d7a360a2a32eeb84f92e4e289409ba504245d01a9289bf669ab3c08baa4bd33bdba4e21f291e208f74b5e37ab4e8a47dab17cc0c40e761875282620341749409b522c1072d199f43e788fe3410373a7b0a280fb0419783313128eaadba9c0723a858899153e7ed89da512fd61d070975ba321c43e6de080dfb91d597318b8a9caafac1418b0f0685797f15fe95158c97"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
semget$private(0x0, 0x6, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x8e88, &(0x7f0000000000)={&(0x7f00000006c0)={0x8c, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x67, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x0, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

1.018585564s ago: executing program 0 (id=1861):
r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x6, 0x12d600)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000240)=""/90)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x400}, 0x18)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000040))
write$binfmt_misc(r2, &(0x7f0000001000), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}})

947.657067ms ago: executing program 3 (id=1862):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
capget(&(0x7f0000000100)={0x20071026}, &(0x7f0000000240)={0x3, 0x667, 0xbda, 0x4, 0x0, 0x5})
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x82842)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000541100fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22"], 0x0)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r6)
sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x70, r7, 0x4483fb19ecd4d5f, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:tmp_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x40000)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000600108805400078008000500000000000800050000000000080006000000"], 0x1a0}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x90, r5, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xda4cc99}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f676c62}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb14c}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfdb4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x253cab4f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x68c5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x17fc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0bd}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

947.324996ms ago: executing program 3 (id=1863):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r2=>0x0], &(0x7f0000000180)=[<r3=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2, r3], 0x2, 0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000004c0)={0x1, 0x0, &(0x7f0000000240)=[0x0]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0)
pipe2(&(0x7f0000000200)={0x0, <r5=>0x0}, 0x0)
pipe2(&(0x7f0000000000)={<r6=>0x0, 0x0}, 0x0)
tee(r6, r5, 0x8, 0x4)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={<r7=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000000c0)=[r7], &(0x7f00000002c0)=[0x0, 0x6, 0xff, 0x22, 0x45e, 0x9, 0x101, 0x8001, 0x3, 0xe], 0x1})
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000080)=0x9, 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r10, 0xc00864bf, &(0x7f0000000140)={<r11=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r10, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000000)=[r11], 0x80000000001, 0x1, 0xb})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000540)={&(0x7f0000000380)=[r7, r7, r11], &(0x7f0000000500), 0x3})
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002100010000000000000000000a800000000000000000000014001100fc0100"/48], 0x30}}, 0x4000)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @random="0005d70000fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @remote, @dev, @remote}}}}, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0x16c, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x5, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2a, 0x1}}, @sec_ctx={0xa1, 0x8, {0x9d, 0x8, 0x0, 0x0, 0x95, "f3947746243662c16df8d5c6a11206fb00da8e2e2402b33e3205185971b1697adcb2015456f318cb09113fb2b875d93b2d461a0b5cf2a06865a15e9186e482dc2849ee096157088bc5bf015fb56648f39bf01d332d818815e78f8967f434618ead915a328e4d8dd1f47a15cd05e8fb1d1f8ce4ab91e97d921da38da0d61c870a7eeed609f91759a467bae2d48ba8e404244d4015e1"}}]}, 0x16c}}, 0x0)
r13 = socket$packet(0x11, 0x3, 0x300)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r15=>0x0})
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r14)
sendmsg$NL80211_CMD_JOIN_MESH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0x40, r16, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xffffffa8}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xfd}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x7}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x5c}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r17=>0x0})
sendto$packet(r13, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r17, 0x1, 0x0, 0x6, @link_local}, 0x14)
poll(&(0x7f0000001b00)=[{0xffffffffffffffff, 0x100}], 0x1, 0x8c)

797.386081ms ago: executing program 4 (id=1866):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt(r0, 0x0, 0x32, 0x0, &(0x7f0000000040))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x18, 0x55, 0x701}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40440c0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1000000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000780)={0x18c, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}, {0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x9, 0x2, "7be70a83ca"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7f4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x144, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x5b, 0x2, "3d70b8975e7909e913b12c0565645ca478a68c042e118ddce53314ad73620d1e3bbeb6b1a43096c5a71d8e079d32feab4aaf64cf86a6d92c0406388140d245a7415f473e32c7e0b1ca480dd52658620d2487afbf9aa9c1"}}, {0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd9, 0x1, "b76b299fc6d32fc7cbbfae505f1480ed82c9deb1e4d37cb329599516b6ba464fe1d87c15525eaca7a6cf108565a66ecedee618d32da2caaac65570207a7d2f8529a09f8437d7a360a2a32eeb84f92e4e289409ba504245d01a9289bf669ab3c08baa4bd33bdba4e21f291e208f74b5e37ab4e8a47dab17cc0c40e761875282620341749409b522c1072d199f43e788fe3410373a7b0a280fb0419783313128eaadba9c0723a858899153e7ed89da512fd61d070975ba321c43e6de080dfb91d597318b8a9caafac1418b0f0685797f15fe95158c97"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008010)
semget$private(0x0, 0x6, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x84, r5, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x5f, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @void, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x0, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r6 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000240), 0x282000, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f7400000000000000000000000c0003800400038004000100"], 0x38}}, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000480)={@local}, &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r9 = io_uring_setup(0x579f, &(0x7f0000000500)={0x0, 0x27f, 0x4005, 0x4000, 0x1e4, 0x0, r6})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x5)
ioctl$KVM_SET_CPUID2(r12, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"])
close_range(r9, 0xffffffffffffffff, 0x0)
r13 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r13, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)

795.387946ms ago: executing program 0 (id=1867):
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c)
listen(r0, 0x20000005)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @empty, 0x5000000}, 0x22)

619.758576ms ago: executing program 4 (id=1868):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x2001)
ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000040))
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x4001)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x4, {0x0, 0x0, 0x0, 0x9, 0x77, 0x0, 0x4, 0xb, 0x11, "183df68306f682ae10443cfacdd9ffad733879384c88298b53cf8c395cd3595f2524b7034601181042a251093909e7eb84c86eb4dd6a63152fe0ce2146c383ba", "0b92d759c87b9ab0c3af86a4d9c22c76424a4d53f042ae84130c96425a2df863deb4151b2e4a46695b3e377982a9914e32bdad74da8d8c6469310ec99f619bcd", "e9f8437089292217ce775da15fed0425e7d3e5a310702ae9c65ff0b40e183425", [0xa1, 0x9]}})
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)={0x62, @rand_addr=0x64010102, 0x4e23, 0x2, 'lblcr\x00', 0x14, 0x2, 0xd}, 0x2c)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x1, 0x4e21, 0x0, 0xa, 0x80, 0xa0, 0x2b, r3, r4}, {0x4, 0xd, 0xfffffffeffffffff, 0xc3a1, 0x1, 0xa6bd, 0x3, 0x8}, {0x3ce55d38, 0x100000000, 0x2, 0x80}, 0x4, 0x6e6bb8, 0x1, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d2, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x3500, 0x4, 0x1, 0x6, 0x1e1, 0x15, 0xc5c}}, 0xe8)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000480)='vlan0\x00', 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x1]}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004004}, 0x800)
r7 = dup(r1)
syz_emit_ethernet(0x1c, &(0x7f0000000600)={@multicast, @random="7951de2fa4c6", @void, {@llc_tr={0x11, {@snap={0x155, 0x1, "b0d5", "5b7f5d", 0x15, "0866d2a97b"}}}}}, &(0x7f0000000640)={0x0, 0x1, [0x71a, 0x546, 0x898, 0x171]})
ppoll(&(0x7f0000000680)=[{r7, 0x20}, {r7, 0x122}, {r2, 0x111}], 0x3, &(0x7f00000006c0)={0x0, 0x3938700}, &(0x7f0000000700)={[0x800]}, 0x8)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r7)
sendmsg$ETHTOOL_MSG_RINGS_GET(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r8, 0x200, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44000090)
fsetxattr(r0, &(0x7f0000000880)=@known='user.incfs.metadata\x00', &(0x7f00000008c0)='\x00', 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'})
ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f0000000980)={0x1, &(0x7f0000000940)=[{<r9=>0x0}]})
ioctl$DRM_IOCTL_UNLOCK(r7, 0x4008642b, &(0x7f00000009c0)={r9, 0x10})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r7, 0x4010641c, &(0x7f0000000a80)={r9, &(0x7f0000000a00)=""/77})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000b00)={0x4, &(0x7f0000000ac0)=[{0x7, 0x0, 0x0, 0xe}, {0x2, 0x5, 0x0, 0x800}, {0x3, 0x4, 0x8, 0x1}, {0x6, 0x5, 0x0, 0x4}]})
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000b40)=<r10=>0x0)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000b80)={0x27, r10, 0x1, 0x3, 0x2, 0x1, "79d9b0f39066290187f7881e5672c5e8d5e0bef37920c8672094910f59b812feb13c1d303136f20bde668cf64467cbfd5642dd7416cdc0e99607f3d9b11e62", 0x37}, 0x60)
close_range(r7, r1, 0x2)
r11 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000000c00))
sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x74}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xce}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0xb97e0d01cda1bce)
ptrace$getenv(0x4201, 0x0, 0x5, &(0x7f0000000d80))

548.987045ms ago: executing program 4 (id=1869):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001800010000000000000000000a0000000000fd00002c00003800160034000100090000000000000000041002fc000000ff02000000000000000000a888000001fe8000000000000000000000000000aa060015000300000008000400", @ANYRES32=r1, @ANYBLOB], 0x64}}, 0x0)

548.38117ms ago: executing program 4 (id=1870):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x18c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}, {0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x9, 0x2, "7be70a83ca"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7f4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x144, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x5b, 0x2, "3d70b8975e7909e913b12c0565645ca478a68c042e118ddce53314ad73620d1e3bbeb6b1a43096c5a71d8e079d32feab4aaf64cf86a6d92c0406388140d245a7415f473e32c7e0b1ca480dd52658620d2487afbf9aa9c1"}}, {0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd9, 0x1, "b76b299fc6d32fc7cbbfae505f1480ed82c9deb1e4d37cb329599516b6ba464fe1d87c15525eaca7a6cf108565a66ecedee618d32da2caaac65570207a7d2f8529a09f8437d7a360a2a32eeb84f92e4e289409ba504245d01a9289bf669ab3c08baa4bd33bdba4e21f291e208f74b5e37ab4e8a47dab17cc0c40e761875282620341749409b522c1072d199f43e788fe3410373a7b0a280fb0419783313128eaadba9c0723a858899153e7ed89da512fd61d070975ba321c43e6de080dfb91d597318b8a9caafac1418b0f0685797f15fe95158c97"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
semget$private(0x0, 0x6, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0xff03, &(0x7f0000000000)={&(0x7f00000006c0)={0x8c, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x67, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x0, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

480.39545ms ago: executing program 4 (id=1871):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x2, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

388.678127ms ago: executing program 1 (id=1874):
sched_setscheduler(0x0, 0x2, 0x0)
mlockall(0x2)
shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp\x00')
preadv(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x96, 0x0)
shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r1, 0x4, 0x1, 0x10})
msync(&(0x7f00006d7000/0x2000)=nil, 0x2000, 0x6)
socket$kcm(0x29, 0x5, 0x0)
syz_clone(0x48000000, &(0x7f00000000c0)="1ee869664ae7b2624c5a3bde1b2fa8f4978e7f05ddb075e4b90769da7571f1459e755eca4ac8de8ef25b3a7f585065e0d31afb738de7dcdab74bc995c811dfc9fb3dc50b3945871e72d0f12d222afcecdfbfcbc711e2cced6de583a63a06fff9979bf9a1424f405f1067a3b1fc365d9096795b49ca75288d2aaf035f05e5baf693518e31ebaaf1b893a8a39bcc2a135e42b35af75ed86cee70900fd95bb3fdac099e202a64bf4a7cc61194b21f5e12e661509567a852659217ad", 0xba, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0)

292.881623ms ago: executing program 4 (id=1875):
socket$netlink(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/55}, 0x3f, 0x0, 0x86b1b18158a7cb82)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/94}, 0x66, 0x3, 0x2800)
syz_emit_ethernet(0xc3, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b0000"], 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/5107], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x35)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe80, 0x0, &(0x7f0000000140)="d510faffffdb674c5ae4000b0094", 0x0, 0xf001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000200000014000180060001000200000062905643018d08000300ac1414aa"], 0x28}}, 0x0)

249.46676ms ago: executing program 1 (id=1876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000a80)=ANY=[@ANYBLOB="ffffffffffff00000000002088a846008100380008004500002c000000007d11"], 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6fb, @void, @value}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', <r5=>0x0, 0x0, 0x40, 0xfffffff7, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfd, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @empty}}}})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={<r6=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000002c0)={r6})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000004c0)={0x40, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x40}}, 0x0)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84)
ioctl(r4, 0x8b1a, &(0x7f0000000040))
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000140)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8c010000", @ANYRES16=r1, @ANYRES64=r5, @ANYRES16=r11, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
semget$private(0x0, 0x6, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000005c0)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f0000000d00)={0x3b8, r8, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf6d}, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_b, @initial, {0x8, 0x9}, @value=@ver_80211n={0x0, 0xe, 0x0, 0x2, 0x0, 0x2, 0x1}}, 0x3c, @void}}, @NL80211_ATTR_FRAME={0x358, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xd}, @device_b, @device_a, @initial, {0xe, 0x3}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x6, @default, 0x1080, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x60}]}, @void, @val={0x4, 0x6, {0x5, 0x7, 0x9, 0x6}}, @void, @void, @void, @void, [{0xdd, 0x38, "2be41863075b06ae7e6d2c5031a4c5ba7f65483f5933222b16ac8d491912e143794d358004592a42bb7ad9688bb0809288281a28fca97b18"}, {0xdd, 0xe5, "53ee04f96e56e5fc74569286acfd394992ed9936ebc4576cfaceacdd4b14d29576eb4547ccb1f1e0a29d669804d13197b90b004a63baaa723fa2e21f034df3961f1a2773e121333d6332e9a9839939a069283584bfb9ddcdb9cee5349c069e50b1e57f2e7675a79f16843afb459d7706be070cacb9e98a79e932ab0fd5663225eb86002cb6fc12c067f67c707454a70a60edfc95b30092e465c9e30dc74943a1f8fc41a89319ca1600030ea536544b54a5ca57ca6ed418033ddcaa4a242ddae84e6f8a66c42eacc409384def5a8a8e08f459cbe083a24e5240aa5a77d0d89677ac550a311c"}, {0xdd, 0x28, "e7fc5725a373a115aaf322c5417c10a7aceb1904b5fc63661a47f47bfc8293a30253faaa869177f6"}, {0xdd, 0x6f, "ae7162bf8b66cfa77bda4bc338c93e18dce170aefa34e7441942764c4b788e1eda9bc0b24204eb9d48e0dcc96759b8715803e9b9131b0ac1de0241f0e0f1336c923cb2ddbc724f97874118cc4cd3f1a6ea9dbc11148ad7a2c065cc228e3488d096933274ce3ced2c0407d980d32bcc"}, {0xdd, 0x5d, "106a497748eafc46dbf634ee5a343a8e5d62bf4f0d498b498f06ed3764864153ab6128a322895bf55c8cfae94ee5f2d28fa2d91161e61b5c92440ef7f50af942e1fdcbf87cb0535b4ccad158a912c769422ada254b8384467e995120e0"}, {0xdd, 0x69, "bbf75214e571e2387ce0fd495727de6d7b2f2fb58ced5dd1474184a30a249966adecb81c93a6014d942b1e24ae0a14b3fe5e92f4c2f9b80abb35d227de2b98d9567a2292c2d556f94778146a6e03d25c47b8ee5467096f30ef0496658b706154e8f533475e15e0035a"}, {0xdd, 0x11, "0a3904e02c04e20fc586daeacd4f44cef6"}, {0xdd, 0x7e, "22ae521304d543847a625f396d2892aff5290be237b5edd53861997979d09c478412166ba28630d5397039de2c160d354382aaec5968ee4a3971164f15cd155bc29bc6f138b7cc24822f6f156ce946fb31791af78857256294ac3ddf687c5c677a2eb85d4b5d2bb9d399031504a2c4e2cd5be7fea38c85ba8e72b55858d6"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x35}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0xf, 0xef9, 0x27e, 0x8, 0x80, 0xfff]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x40000}, 0x4004980)
writev(r2, &(0x7f0000000700)=[{&(0x7f0000000780)="d22cd35bbe06ff91ed14cfec7b162cb9f82cbe6c7ba578895aa5aff9b0fd5f15a71f5d5fccc7f89956baef9b9c0a2450d0657ff209b1124e27a2581c9c248d06a1a985fcd611b34e583be5fa3d5adb7c0ff63f846d9eb24dbc26133dae1f461719e2d4eac5c819e4d07ec2f90fcbce7f40adfbc85a383b858ffaf26add8ed34d76c424e16836405d848b5cc73605ab973022f4f375964e1781f663747aad7f7710681a1e6ec64f9cd41d9edd2725af9d12ea53fbd989926871ad53bd36c8ac7249664ab19734c7d200c4553d868d4c", 0xcf}, {&(0x7f0000000300)="baeaca180993fcbfe89faefae5e895a585856f3e53e5dafe98e166b67381561b61d0f3c15cf8c28a7230745896e6a04465312f7ccfa85ff5e651d021c8abc2b776dc7e5d96b5799ba39803c43880b9d9dcf4283805e69850cc069112cb4704c9", 0x60}, {&(0x7f0000000880)="15e04155574787a7cda902e69ebea42a1cf8c5df62b6a63fddbdea40091f7f0efb2bb951a0f757298ecf208c0d132e807b92813fbab913e5d5ff72e02cdb2acdb0a4b5c66a082bc71f73e35407bbc5526d71302c493cb5203afeee27f2d99565f8cb219f04b03ae212c53dfbd8af6aeb899075ceb1bf9e26c0f940934068dc925e4cf0d379bc122626f8902cae229b534088a2c74dacad272ca44e532a81c299", 0xa0}, {&(0x7f0000000380)='\"', 0x1}, {&(0x7f0000000980)="09c7397e0d1588bff9e5f1cf0261bb5786030c4503f29949bcf28522e0c5affe108edb486aa58a50640539a7c4cfbf7f3cd44c17d230e8a0d261b1c3600f8c936426263b52a01a2c0486dfdac15ec65ec998c65a427fa553e895b8760627e07dd24a9a11a3911adf8fb7f52b94dd59f417736c4aa9a6451b3917f9f9d423a0767e126d3ae7b34ec6f7d2dbeae30965575e69327abca03ece71220e8d087b91530c9a5b75732cd9", 0xa7}, {&(0x7f00000010c0)="2455a8b9ae21b75fca1dac35c562af5f0885e57f85fb3834e507c4c82ec17ac7a134eb4742b57ef5b8ca3fd7f71079f8075c1d99a125a651ba4c44c5fd9680e767b8ea6597faa754512d0e7517e9edc1c3d194d42c536546fbd066623b8822387f7fe95a7697902b768c9212ebcc447448500870894e077c2c18273aa8861ff4541e9b5a954c4695a0f1b30d2cba269e767385f1e6ccb47f56f6032b98d6ea0cd3c71276dda1ee27c1ed2c8b57e75087b64ff02e470c59fb11e151cad6cab57c42f5556ea43ce44c79526eefee46986251f841987f1dd6e4ce53484d32cad6c78aae512dfa683afb15ff0b896f459fe55bd5290080", 0xf5}, {&(0x7f00000011c0)="088f96b49277fbed3fe787947b4c4b442c8ba8375ffeb97c910ba4a38d408f3610f4b274139091d7db82139394543e98f74dd2067a8204128bca60df06f0f0a69d73982c119d3e09b82bc59239c051eb0e5a38f052aa7951ec164271b549d80ce4f34c70d7e2c65482944c7c5a63dada16010670d247f484fce99505ff15d438d98bad4c929c5b8c2773ee5aba935065", 0x90}], 0x7)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="94000000", @ANYRESDEC=r9, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000006d003300802009000802110000000802110000005050505050505f00feffffffffff2c0602ff012a01043c0400f3a1dd2d1a00041602000000000000007b0047001100000000000001000001710769000000010720760603002f000600"/120], 0x94}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

160.265219ms ago: executing program 1 (id=1877):
sched_setscheduler(0x0, 0x2, 0x0)
kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08060001080006040002"], 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @multicast, 'ip6gretap0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000040)={0x18, 0x0, {0x2, @multicast, 'veth1_to_team\x00'}})
fcntl$setlease(0xffffffffffffffff, 0x403, 0x1)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

80.018095ms ago: executing program 1 (id=1878):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001800010000000000000000000a0000000000fd00002c00003800160034000100090000000000000000041002fc000000ff02000000000000000000ff9e000001fe8000000000000000000000000000aa060015000300000008000400", @ANYRES32=r1, @ANYBLOB], 0x64}}, 0x0)

76.060551ms ago: executing program 1 (id=1879):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x18c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}, {0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x9, 0x2, "7be70a83ca"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7f4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x144, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x5b, 0x2, "3d70b8975e7909e913b12c0565645ca478a68c042e118ddce53314ad73620d1e3bbeb6b1a43096c5a71d8e079d32feab4aaf64cf86a6d92c0406388140d245a7415f473e32c7e0b1ca480dd52658620d2487afbf9aa9c1"}}, {0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd9, 0x1, "b76b299fc6d32fc7cbbfae505f1480ed82c9deb1e4d37cb329599516b6ba464fe1d87c15525eaca7a6cf108565a66ecedee618d32da2caaac65570207a7d2f8529a09f8437d7a360a2a32eeb84f92e4e289409ba504245d01a9289bf669ab3c08baa4bd33bdba4e21f291e208f74b5e37ab4e8a47dab17cc0c40e761875282620341749409b522c1072d199f43e788fe3410373a7b0a280fb0419783313128eaadba9c0723a858899153e7ed89da512fd61d070975ba321c43e6de080dfb91d597318b8a9caafac1418b0f0685797f15fe95158c97"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
semget$private(0x0, 0x6, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x8c, r3, 0x3f, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x67, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x0, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

72.549851ms ago: executing program 3 (id=1880):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000002c0)={0x71e5b316, 0xfffffffc})
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x7, 0x9, 0x1, 0x8, 0x101})
chdir(&(0x7f00000000c0)='./file0\x00')
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
mq_timedsend(r7, &(0x7f0000000100)="856870cc7f2957c0c69e3974b4f03582831f", 0x12, 0x9, &(0x7f0000000140))
getdents64(r4, &(0x7f00000000c0)=""/55, 0x37)
getdents(r4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r8=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x8, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="00001500"}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

0s ago: executing program 1 (id=1881):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000101c0)={0x0, 0x0, &(0x7f0000010180)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x415, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x20000000, 0x100001, 0x400}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='bic\x00', 0x4)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000200001030100000000000000020000000000d813d5f001001400110076"], 0x30}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)

kernel console output (not intermixed with test programs):

m="syz.2.842" name="kcm" dev="proc" ino=4026533152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   77.838766][ T8501] syzkaller1: entered promiscuous mode
[   77.851186][ T8501] syzkaller1: entered allmulticast mode
[   77.879576][   T40] audit: type=1800 audit(1743741966.725:490): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.844" name="nullb0" dev="tmpfs" ino=563 res=0 errno=0
[   77.965825][ T8511] bridge0: entered promiscuous mode
[   77.969868][ T8511] bridge0: port 3(macsec1) entered blocking state
[   77.972645][ T8511] bridge0: port 3(macsec1) entered disabled state
[   77.974669][ T8511] macsec1: entered allmulticast mode
[   77.976254][ T8511] bridge0: entered allmulticast mode
[   77.983340][ T8511] macsec1: left allmulticast mode
[   77.985448][ T8511] bridge0: left allmulticast mode
[   77.995142][   T40] audit: type=1400 audit(1743741966.845:491): avc:  denied  { write } for  pid=8514 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   78.001374][ T8511] bridge0: left promiscuous mode
[   78.038621][ T8521] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[   78.041059][ T8521] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   78.043830][ T8521] vhci_hcd vhci_hcd.0: Device attached
[   78.057606][ T8521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.851'.
[   78.062483][ T8521] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   78.082070][ T8521] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   78.104649][ T8522] vhci_hcd: connection closed
[   78.105465][ T7187] vhci_hcd: stop threads
[   78.109194][ T7187] vhci_hcd: release socket
[   78.111470][ T7187] vhci_hcd: disconnect device
[   78.132129][   T40] audit: type=1400 audit(1743741966.985:492): avc:  denied  { listen } for  pid=8510 comm="syz.3.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   78.212144][   T40] audit: type=1400 audit(1743741967.065:493): avc:  denied  { getopt } for  pid=8529 comm="syz.0.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   78.242388][ T8537] overlayfs: failed to clone upperpath
[   78.247670][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'.
[   78.255228][ T8536] netlink: 17 bytes leftover after parsing attributes in process `syz.3.857'.
[   78.260011][ T8536] netlink: 32 bytes leftover after parsing attributes in process `syz.3.857'.
[   78.265026][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'.
[   78.313371][ T8546] netlink: 'syz.3.860': attribute type 1 has an invalid length.
[   78.343379][ T8546] bond19: (slave wireguard15): The slave device specified does not support setting the MAC address
[   78.347385][ T8546] bond19: (slave wireguard15): Setting fail_over_mac to active for active-backup mode
[   78.354087][ T8546] bond19: (slave wireguard15): making interface the new active one
[   78.357161][ T8546] bond19: (slave wireguard15): Enslaving as an active interface with an up link
[   78.621087][   T40] audit: type=1400 audit(1743741967.475:494): avc:  denied  { unmount } for  pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   79.067054][   T40] audit: type=1400 audit(1743741967.915:495): avc:  denied  { create } for  pid=8558 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   79.144363][   T40] audit: type=1400 audit(1743741967.995:496): avc:  denied  { module_request } for  pid=8570 comm="syz.0.869" kmod="crypto-authenc(digest_null,ecb(cipher_null))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   79.301789][ T8594] netlink: 228 bytes leftover after parsing attributes in process `syz.1.876'.
[   79.403688][   T40] audit: type=1400 audit(1743741968.255:497): avc:  denied  { read } for  pid=8604 comm="syz.1.879" name="msr" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   79.413537][   T40] audit: type=1400 audit(1743741968.255:498): avc:  denied  { open } for  pid=8604 comm="syz.1.879" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   79.501457][ T8609] mmap: syz.0.881 (8609): VmData 37597184 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data.
[   79.559667][ T8615] vlan2: entered promiscuous mode
[   79.561309][ T8615] bridge0: entered promiscuous mode
[   79.602014][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'.
[   79.603743][ T8619] cgroup: Need name or subsystem set
[   79.642285][ T8623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.886'.
[   79.662766][ T8628] rtc_cmos 00:05: Alarms can be up to one day in the future
[   79.717103][ T8632] bond18: (slave wireguard12): The slave device specified does not support setting the MAC address
[   79.720569][ T8632] bond18: (slave wireguard12): Setting fail_over_mac to active for active-backup mode
[   79.735929][ T8632] bond18: (slave wireguard12): making interface the new active one
[   79.738799][ T8632] bond18: (slave wireguard12): Enslaving as an active interface with an up link
[   79.872792][ T8648] Invalid source name
[   79.874386][ T8648] UBIFS error (pid: 8648): cannot open "ubifs", error -22
[   79.987635][ T8658] bond20: (slave wireguard16): The slave device specified does not support setting the MAC address
[   79.995435][ T8658] bond20: (slave wireguard16): Setting fail_over_mac to active for active-backup mode
[   80.003086][ T8658] bond20: (slave wireguard16): making interface the new active one
[   80.006479][ T8658] bond20: (slave wireguard16): Enslaving as an active interface with an up link
[   80.358492][ T8677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8677 comm=syz.1.905
[   80.658549][ T8683] pimreg: entered allmulticast mode
[   80.662559][ T8683] pimreg: left allmulticast mode
[   80.763745][ T8704] tmpfs: Unknown parameter 'quotae0'
[   80.831133][ T8713] bond9: entered promiscuous mode
[   80.831148][ T8713] bond9: entered allmulticast mode
[   80.831291][ T8713] 8021q: adding VLAN 0 to HW filter on device bond9
[   81.004912][    T9] Process accounting resumed
[   81.017024][ T8738] Process accounting resumed
[   81.394355][   T65] cfg80211: failed to load regulatory.db
[   81.498196][ T8772] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[   81.853512][ T8788] pimreg3: entered allmulticast mode
[   81.946332][ T8793] validate_nla: 5 callbacks suppressed
[   81.946343][ T8793] netlink: 'syz.2.945': attribute type 1 has an invalid length.
[   81.966077][ T8793] bond10: (slave wireguard8): The slave device specified does not support setting the MAC address
[   81.970228][ T8793] bond10: (slave wireguard8): Setting fail_over_mac to active for active-backup mode
[   81.977553][ T8793] bond10: (slave wireguard8): making interface the new active one
[   81.983834][ T8793] bond10: (slave wireguard8): Enslaving as an active interface with an up link
[   82.215237][ T8817] netlink: 'syz.2.952': attribute type 1 has an invalid length.
[   82.243422][ T8821] netlink: 'syz.2.954': attribute type 1 has an invalid length.
[   82.261420][ T8821] bond11: (slave wireguard9): The slave device specified does not support setting the MAC address
[   82.265820][ T8821] bond11: (slave wireguard9): Setting fail_over_mac to active for active-backup mode
[   82.273923][ T8821] bond11: (slave wireguard9): making interface the new active one
[   82.276601][ T8821] bond11: (slave wireguard9): Enslaving as an active interface with an up link
[   82.529376][ T8846] __nla_validate_parse: 5 callbacks suppressed
[   82.529391][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.962'.
[   82.773859][ T8853] netlink: 'syz.2.965': attribute type 1 has an invalid length.
[   82.808464][ T8857] netlink: 'syz.2.966': attribute type 1 has an invalid length.
[   82.837029][ T8857] bond12: (slave wireguard10): The slave device specified does not support setting the MAC address
[   82.842029][ T8857] bond12: (slave wireguard10): Setting fail_over_mac to active for active-backup mode
[   82.848462][ T8857] bond12: (slave wireguard10): making interface the new active one
[   82.852059][ T8857] bond12: (slave wireguard10): Enslaving as an active interface with an up link
[   82.931392][ T8871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.971'.
[   82.986264][ T8879] xt_socket: unknown flags 0x8
[   83.001642][ T8881] netlink: 'syz.1.975': attribute type 1 has an invalid length.
[   83.080026][ T8888] ksmbd: Unknown IPC event: 3, ignore.
[   83.207371][   T40] kauditd_printk_skb: 8 callbacks suppressed
[   83.207384][   T40] audit: type=1400 audit(1743741972.055:507): avc:  denied  { read } for  pid=8878 comm="syz.0.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   83.218593][ T8879] Cannot find add_set index 2 as target
[   83.371490][ T8913] netlink: 'syz.1.986': attribute type 1 has an invalid length.
[   83.398577][ T8917] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[   83.402648][ T8917] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.988'.
[   83.405528][ T8917] netlink: zone id is out of range
[   83.407441][ T8917] netlink: zone id is out of range
[   83.408894][ T8917] netlink: get zone limit has 8 unknown bytes
[   83.441255][   T40] audit: type=1400 audit(1743741972.285:508): avc:  denied  { mount } for  pid=8920 comm="syz.1.990" name="/" dev="configfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   83.451957][   T40] audit: type=1400 audit(1743741972.305:509): avc:  denied  { setattr } for  pid=8920 comm="syz.1.990" name="/" dev="configfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   83.471350][   T40] audit: type=1400 audit(1743741972.325:510): avc:  denied  { unmount } for  pid=7421 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   83.492223][ T8925] netlink: 'syz.1.992': attribute type 1 has an invalid length.
[   83.520362][ T8925] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[   83.524030][ T8925] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   83.528518][ T8925] bond1: (slave wireguard0): making interface the new active one
[   83.531457][ T8925] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[   83.559733][ T8929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.993'.
[   83.563278][ T8929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.993'.
[   83.566113][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'.
[   83.645650][   T40] audit: type=1400 audit(1743741972.495:511): avc:  denied  { setopt } for  pid=8928 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   83.653853][ T8930] bad cache= option: none

[   83.653853][ T8930] 
[   83.656261][ T8930] CIFS: VFS: bad cache= option: none

[   83.658817][ T8930] tmpfs: Bad value for 'mpol'
[   83.717458][ T8928] delete_channel: no stack
[   83.916379][   T40] audit: type=1400 audit(1743741972.765:512): avc:  denied  { mounton } for  pid=8935 comm="syz.2.996" path="/209/file0" dev="tmpfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[   83.917842][ T8936] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[   83.971926][ T8940] netlink: 'syz.0.998': attribute type 10 has an invalid length.
[   83.980071][ T8940] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.984528][ T8940] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   83.987023][ T8942] netlink: 'syz.1.999': attribute type 1 has an invalid length.
[   84.046198][ T8946] bond13: (slave wireguard11): The slave device specified does not support setting the MAC address
[   84.050146][ T8946] bond13: (slave wireguard11): Setting fail_over_mac to active for active-backup mode
[   84.056990][ T8946] bond13: (slave wireguard11): making interface the new active one
[   84.059445][ T8946] bond13: (slave wireguard11): Enslaving as an active interface with an up link
[   84.093927][   T40] audit: type=1400 audit(1743741972.945:513): avc:  denied  { read } for  pid=8965 comm="syz.3.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   84.103480][ T8966] cgroup2: Unknown parameter 'euid'
[   84.195234][ T8977] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   84.273116][ T8987] bond14: (slave wireguard12): The slave device specified does not support setting the MAC address
[   84.275968][ T8987] bond14: (slave wireguard12): Setting fail_over_mac to active for active-backup mode
[   84.280566][ T8987] bond14: (slave wireguard12): making interface the new active one
[   84.284155][ T8987] bond14: (slave wireguard12): Enslaving as an active interface with an up link
[   84.286900][   T40] audit: type=1400 audit(1743741973.135:514): avc:  denied  { create } for  pid=8989 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   84.362659][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'.
[   84.560726][ T1334] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   84.698403][ T9014] pimreg: entered allmulticast mode
[   84.715020][ T1334] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   84.730917][ T1334] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   84.734544][ T1334] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   84.737366][ T1334] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.743210][ T9001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   84.749210][ T1334] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[   84.958226][ T9001] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[   84.960225][ T9001] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   84.965058][ T9001] vhci_hcd vhci_hcd.0: Device attached
[   84.967327][   T40] audit: type=1400 audit(1743741973.815:515): avc:  denied  { watch_mount } for  pid=9026 comm="syz.1.1027" path="/81" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   84.975759][ T9001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.978831][ T9001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.984510][ T9028] vhci_hcd: connection closed
[   84.985192][ T7187] vhci_hcd: stop threads
[   84.987254][   T58] usb 7-1: USB disconnect, device number 4
[   84.988750][ T7187] vhci_hcd: release socket
[   84.992179][ T7187] vhci_hcd: disconnect device
[   85.120421][ T9031] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address
[   85.124621][ T9031] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[   85.131906][ T9031] bond2: (slave wireguard1): making interface the new active one
[   85.134631][ T9031] bond2: (slave wireguard1): Enslaving as an active interface with an up link
[   85.176899][ T9039] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1030'.
[   85.182153][   T40] audit: type=1400 audit(1743741974.035:516): avc:  denied  { accept } for  pid=9038 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   85.213529][ T9039] /dev/nullb0: Can't lookup blockdev
[   85.250673][ T9049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1033'.
[   85.253354][ T9049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1033'.
[   85.372179][ T9064] misc userio: The device must be registered before sending interrupts
[   85.425418][ T9066] bond21: (slave wireguard17): The slave device specified does not support setting the MAC address
[   85.428588][ T9066] bond21: (slave wireguard17): Setting fail_over_mac to active for active-backup mode
[   85.435640][ T9066] bond21: (slave wireguard17): making interface the new active one
[   85.438556][ T9066] bond21: (slave wireguard17): Enslaving as an active interface with an up link
[   85.614598][ T9092] bond15: (slave wireguard13): The slave device specified does not support setting the MAC address
[   85.618569][ T9092] bond15: (slave wireguard13): Setting fail_over_mac to active for active-backup mode
[   85.621000][ T9095] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32
[   85.628638][ T9092] bond15: (slave wireguard13): making interface the new active one
[   85.633546][ T9092] bond15: (slave wireguard13): Enslaving as an active interface with an up link
[   85.646176][ T9103] sctp: [Deprecated]: syz.0.1052 (pid 9103) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.646176][ T9103] Use struct sctp_sack_info instead
[   85.754410][ T9121] overlayfs: failed to clone upperpath
[   85.764146][ T9122] SELinux: failed to load policy
[   85.843134][ T9131] bond22: (slave wireguard18): The slave device specified does not support setting the MAC address
[   85.846432][ T9131] bond22: (slave wireguard18): Setting fail_over_mac to active for active-backup mode
[   85.852571][ T9131] bond22: (slave wireguard18): making interface the new active one
[   85.855739][ T9131] bond22: (slave wireguard18): Enslaving as an active interface with an up link
[   86.181207][ T7722] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.215104][ T9161] bond23: (slave wireguard19): The slave device specified does not support setting the MAC address
[   86.218418][ T9161] bond23: (slave wireguard19): Setting fail_over_mac to active for active-backup mode
[   86.224840][ T9161] bond23: (slave wireguard19): making interface the new active one
[   86.227464][ T9161] bond23: (slave wireguard19): Enslaving as an active interface with an up link
[   86.263793][ T7722] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.332920][ T7722] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.401090][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.404477][ T5958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.407049][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.409680][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.412383][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.421898][ T9172] overlayfs: failed to clone upperpath
[   86.435681][ T9174] macsec0: entered promiscuous mode
[   86.464130][ T7722] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.471294][ T9180] xt_hashlimit: size too large, truncated to 1048576
[   86.479858][ T9180] syz.0.1083: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[   86.487236][ T9180] CPU: 3 UID: 0 PID: 9180 Comm: syz.0.1083 Not tainted 6.14.0-syzkaller-13183-g06a22366d6a1 #0 PREEMPT(full) 
[   86.487258][ T9180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   86.487268][ T9180] Call Trace:
[   86.487273][ T9180]  <TASK>
[   86.487278][ T9180]  dump_stack_lvl+0x16c/0x1f0
[   86.487326][ T9180]  warn_alloc+0x248/0x3a0
[   86.487345][ T9180]  ? __pfx_warn_alloc+0x10/0x10
[   86.487369][ T9180]  ? __get_vm_area_node+0x1b9/0x300
[   86.487404][ T9180]  ? __get_vm_area_node+0x1e5/0x300
[   86.487433][ T9180]  __vmalloc_node_range_noprof+0x1110/0x1540
[   86.487466][ T9180]  ? hashlimit_mt_check_common+0x8bb/0x1460
[   86.487495][ T9180]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   86.487550][ T9180]  __kvmalloc_node_noprof+0x2ff/0x600
[   86.487574][ T9180]  ? hashlimit_mt_check_common+0x8bb/0x1460
[   86.487598][ T9180]  ? net_generic+0xea/0x2a0
[   86.487618][ T9180]  ? hashlimit_mt_check_common+0x8bb/0x1460
[   86.487644][ T9180]  ? hashlimit_mt_check_common+0x8bb/0x1460
[   86.487665][ T9180]  hashlimit_mt_check_common+0x8bb/0x1460
[   86.487696][ T9180]  hashlimit_mt_check+0x71/0x90
[   86.487717][ T9180]  ? __pfx_hashlimit_mt_check+0x10/0x10
[   86.487739][ T9180]  xt_check_match+0x283/0xa50
[   86.487762][ T9180]  ? yield_to+0x2c2/0x7f0
[   86.487796][ T9180]  ? __pfx_xt_check_match+0x10/0x10
[   86.487822][ T9180]  ? xt_find_target+0x1f2/0x290
[   86.487845][ T9180]  ? xt_find_match+0x1f6/0x290
[   86.487873][ T9180]  find_check_entry.constprop.0+0x34e/0xa20
[   86.487903][ T9180]  ? __pfx_find_check_entry.constprop.0+0x10/0x10
[   86.487932][ T9180]  ? kasan_quarantine_put+0x10a/0x240
[   86.487948][ T9180]  ? lockdep_hardirqs_on+0x7c/0x110
[   86.487970][ T9180]  ? kfree+0x2b6/0x4d0
[   86.487992][ T9180]  ? translate_table+0xc0e/0x17b0
[   86.488017][ T9180]  translate_table+0xd0b/0x17b0
[   86.488050][ T9180]  ? __pfx_translate_table+0x10/0x10
[   86.488068][ T9180]  ? xt_alloc_table_info+0x3e/0xa0
[   86.488093][ T9180]  do_ip6t_set_ctl+0x570/0xb00
[   86.488115][ T9180]  ? nf_sockopt_find.constprop.0+0x222/0x290
[   86.488141][ T9180]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[   86.488165][ T9180]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   86.488200][ T9180]  ? nf_sockopt_find.constprop.0+0x222/0x290
[   86.488220][ T9180]  nf_setsockopt+0x8a/0xf0
[   86.488242][ T9180]  ipv6_setsockopt+0x135/0x170
[   86.488265][ T9180]  rawv6_setsockopt+0xc2/0x510
[   86.488284][ T9180]  ? __pfx_rawv6_setsockopt+0x10/0x10
[   86.488304][ T9180]  ? selinux_socket_setsockopt+0x6a/0x80
[   86.488331][ T9180]  ? sock_common_setsockopt+0x2e/0xf0
[   86.488354][ T9180]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   86.488377][ T9180]  do_sock_setsockopt+0x221/0x470
[   86.488398][ T9180]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   86.488436][ T9180]  __sys_setsockopt+0x1a0/0x230
[   86.488458][ T9180]  __x64_sys_setsockopt+0xbd/0x160
[   86.488475][ T9180]  ? do_syscall_64+0x91/0x260
[   86.488494][ T9180]  ? lockdep_hardirqs_on+0x7c/0x110
[   86.488511][ T9180]  do_syscall_64+0xcd/0x260
[   86.488531][ T9180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.488548][ T9180] RIP: 0033:0x7ff9a7d8d169
[   86.488561][ T9180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.488582][ T9180] RSP: 002b:00007ff9a8b39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   86.488597][ T9180] RAX: ffffffffffffffda RBX: 00007ff9a7fa6080 RCX: 00007ff9a7d8d169
[   86.488607][ T9180] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[   86.488617][ T9180] RBP: 00007ff9a7e0e2a0 R08: 0000000000000588 R09: 0000000000000000
[   86.488626][ T9180] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000
[   86.488636][ T9180] R13: 0000000000000000 R14: 00007ff9a7fa6080 R15: 00007ffeffebd7e8
[   86.488658][ T9180]  </TASK>
[   86.489050][ T9180] Mem-Info:
[   86.589367][ T9191] bond24: (slave wireguard20): The slave device specified does not support setting the MAC address
[   86.590164][ T9180] active_anon:15493 inactive_anon:0 isolated_anon:0
[   86.590164][ T9180]  active_file:16889 inactive_file:38463 isolated_file:0
[   86.590164][ T9180]  unevictable:10988 dirty:270 writeback:0
[   86.590164][ T9180]  slab_reclaimable:11548 slab_unreclaimable:86029
[   86.590164][ T9180]  mapped:24177 shmem:11293 pagetables:1116
[   86.590164][ T9180]  sec_pagetables:300 bounce:0
[   86.590164][ T9180]  kernel_misc_reclaimable:0
[   86.590164][ T9180]  free:416382 free_pcp:11151 free_cma:0
[   86.591891][ T9191] bond24: (slave wireguard20): Setting fail_over_mac to active for active-backup mode
[   86.594005][ T9180] Node 0 active_anon:61724kB inactive_anon:0kB active_file:67556kB inactive_file:153780kB unevictable:40416kB isolated(anon):0kB isolated(file):0kB mapped:96708kB dirty:1080kB writeback:0kB shmem:41388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16944kB pagetables:4464kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB
[   86.671485][ T9180] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   86.674735][ T9191] bond24: (slave wireguard20): making interface the new active one
[   86.686060][ T9180] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   86.687251][ T9191] bond24: (slave wireguard20): Enslaving as an active interface with an up link
[   86.694152][ T9180] lowmem_reserve[]: 0 1236 1236 1236 1236
[   86.697116][ T9169] chnl_net:caif_netlink_parms(): no params data found
[   86.698599][ T9180] Node 0 DMA32 free:104304kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB active_anon:30712kB inactive_anon:0kB active_file:67556kB inactive_file:153780kB unevictable:40416kB writepending:1080kB present:2080628kB managed:1265936kB mlocked:0kB bounce:0kB free_pcp:35520kB local_pcp:0kB free_cma:0kB
[   86.713058][ T9180] lowmem_reserve[]: 0 0 0 0 0
[   86.714736][ T9180] Node 1 Normal free:1584240kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:2404kB local_pcp:248kB free_cma:0kB
[   86.724536][ T9180] lowmem_reserve[]: 0 0 0 0 0
[   86.726331][ T9180] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   86.729921][ T9180] Node 0 DMA32: 142*4kB (UME) 124*8kB (UME) 434*16kB (UME) 464*32kB (UME) 244*64kB (UME) 31*128kB (UME) 22*256kB (UME) 23*512kB (UME) 8*1024kB (UME) 10*2048kB (UM) 7*4096kB (UM) = 117688kB
[   86.735018][ T9180] Node 1 Normal: 2*4kB (M) 9*8kB (UME) 4*16kB (ME) 83*32kB (UME) 56*64kB (UME) 19*128kB (UME) 6*256kB (UE) 6*512kB (UME) 4*1024kB (UE) 5*2048kB (UME) 380*4096kB (M) = 1584240kB
[   86.742916][ T9180] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   86.745739][ T9180] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   86.748242][ T9180] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   86.751347][ T9180] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   86.754040][ T9180] 67099 total pagecache pages
[   86.755470][ T9180] 0 pages in swap cache
[   86.756881][ T9180] Free swap  = 124996kB
[   86.758292][ T9180] Total swap = 124996kB
[   86.759457][ T9180] 1048443 pages RAM
[   86.760702][ T9180] 0 pages HighMem/MovableOnly
[   86.762003][ T9180] 282628 pages reserved
[   86.763157][ T9180] 0 pages cma reserved
[   86.831243][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.834414][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.836999][ T9169] bridge_slave_0: entered allmulticast mode
[   86.839764][ T9169] bridge_slave_0: entered promiscuous mode
[   86.855358][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.858126][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.861388][ T9169] bridge_slave_1: entered allmulticast mode
[   86.864259][ T9169] bridge_slave_1: entered promiscuous mode
[   86.905079][ T7722] bridge_slave_1: left allmulticast mode
[   86.907889][ T7722] bridge_slave_1: left promiscuous mode
[   86.918897][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.926220][ T7722] bridge_slave_0: left allmulticast mode
[   86.927835][ T7722] bridge_slave_0: left promiscuous mode
[   86.929706][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.210610][ T9234] validate_nla: 13 callbacks suppressed
[   87.210622][ T9234] netlink: 'syz.1.1101': attribute type 1 has an invalid length.
[   87.279089][ T7722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.283932][ T7722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.287047][ T7722] bond0 (unregistering): Released all slaves
[   87.293152][ T7722] bond1 (unregistering): (slave wireguard0): Releasing backup interface
[   87.296276][ T7722] bond1 (unregistering): Released all slaves
[   87.303444][ T7722] bond2 (unregistering): (slave wireguard1): Releasing backup interface
[   87.306463][ T7722] bond2 (unregistering): Released all slaves
[   87.313546][ T7722] bond3 (unregistering): (slave wireguard2): Releasing backup interface
[   87.316699][ T7722] bond3 (unregistering): Released all slaves
[   87.325398][ T7722] bond4 (unregistering): (slave wireguard3): Releasing backup interface
[   87.328480][ T7722] bond4 (unregistering): Released all slaves
[   87.336913][ T7722] bond5 (unregistering): (slave wireguard4): Releasing backup interface
[   87.339944][ T7722] bond5 (unregistering): Released all slaves
[   87.347403][ T7722] bond6 (unregistering): (slave wireguard5): Releasing backup interface
[   87.355330][ T7722] bond6 (unregistering): Released all slaves
[   87.366554][ T7722] bond7 (unregistering): (slave wireguard6): Releasing backup interface
[   87.372304][ T7722] bond7 (unregistering): Released all slaves
[   87.381647][ T7722] bond8 (unregistering): (slave wireguard7): Releasing backup interface
[   87.385652][ T7722] bond8 (unregistering): Released all slaves
[   87.444788][ T7722] bond9 (unregistering): Released all slaves
[   87.455585][ T7722] bond10 (unregistering): (slave wireguard8): Releasing backup interface
[   87.458932][ T7722] bond10 (unregistering): Released all slaves
[   87.467750][ T7722] bond11 (unregistering): (slave wireguard9): Releasing backup interface
[   87.471649][ T7722] bond11 (unregistering): Released all slaves
[   87.479832][ T7722] bond12 (unregistering): (slave wireguard10): Releasing backup interface
[   87.485563][ T7722] bond12 (unregistering): Released all slaves
[   87.496558][ T7722] bond13 (unregistering): (slave wireguard11): Releasing backup interface
[   87.501388][ T7722] bond13 (unregistering): Released all slaves
[   87.513487][ T7722] bond14 (unregistering): (slave wireguard12): Releasing backup interface
[   87.516979][ T7722] bond14 (unregistering): Released all slaves
[   87.523869][ T7722] bond15 (unregistering): (slave wireguard13): Releasing backup interface
[   87.527285][ T7722] bond15 (unregistering): Released all slaves
[   87.561480][ T9217] gre1: entered promiscuous mode
[   87.562886][ T9217] gre1: entered allmulticast mode
[   87.583195][ T9169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.599406][ T9169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.676095][ T9243] x_tables: duplicate underflow at hook 3
[   87.710035][ T9245] __nla_validate_parse: 13 callbacks suppressed
[   87.710049][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1103'.
[   87.749938][ T9249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1106'.
[   87.821969][ T9169] team0: Port device team_slave_0 added
[   87.825759][ T9253] netlink: 'syz.1.1107': attribute type 1 has an invalid length.
[   87.837422][ T9169] team0: Port device team_slave_1 added
[   87.884136][ T9257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   87.886753][ T9257] IPv6: NLM_F_CREATE should be set when creating new route
[   87.956740][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.958852][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.966180][ T9169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.969857][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.971819][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.977964][ T9169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.994813][ T9260] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1110'.
[   88.058906][ T9169] hsr_slave_0: entered promiscuous mode
[   88.061136][ T9169] hsr_slave_1: entered promiscuous mode
[   88.064737][ T9169] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.069524][ T9169] Cannot create hsr debugfs directory
[   88.081994][ T7722] hsr_slave_0: left promiscuous mode
[   88.084422][ T7722] hsr_slave_1: left promiscuous mode
[   88.086695][ T7722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.089343][ T7722] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.092716][ T7722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.095437][ T7722] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.109669][ T9283] 9pnet: Could not find request transport: v½{D
[   88.112775][ T7722] veth1_macvtap: left promiscuous mode
[   88.114453][ T7722] veth1_vlan: left promiscuous mode
[   88.115949][ T7722] veth0_vlan: left promiscuous mode
[   88.224772][ T7722] pimreg3 (unregistering): left allmulticast mode
[   88.502464][ T5958] Bluetooth: hci3: command tx timeout
[   88.771915][ T7722] team0 (unregistering): Port device team_slave_1 removed
[   88.831353][ T7722] team0 (unregistering): Port device team_slave_0 removed
[   89.271034][ T9288] netlink: 'syz.1.1118': attribute type 1 has an invalid length.
[   89.297663][   T40] kauditd_printk_skb: 15 callbacks suppressed
[   89.297676][   T40] audit: type=1326 audit(1743741978.145:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9297 comm="syz.1.1122" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1bdf8d169 code=0x0
[   89.443946][ T9169] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   89.447603][ T9169] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   89.451773][ T9169] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   89.462631][ T9169] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   89.542857][ T9169] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.553090][ T9169] 8021q: adding VLAN 0 to HW filter on device team0
[   89.555364][ T9323] netlink: 'syz.0.1129': attribute type 1 has an invalid length.
[   89.562988][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.565329][ T7719] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.572026][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.574206][ T7721] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.605470][   T40] audit: type=1400 audit(1743741978.455:533): avc:  denied  { bind } for  pid=9315 comm="syz.3.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   89.729209][ T9169] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.908765][ T9169] veth0_vlan: entered promiscuous mode
[   89.920157][ T9169] veth1_vlan: entered promiscuous mode
[   89.939635][ T9169] veth0_macvtap: entered promiscuous mode
[   89.941348][ T9364] netlink: 'syz.0.1136': attribute type 1 has an invalid length.
[   89.977831][ T9169] veth1_macvtap: entered promiscuous mode
[   89.996459][ T9364] bond19: (slave wireguard13): The slave device specified does not support setting the MAC address
[   89.999368][ T9364] bond19: (slave wireguard13): Setting fail_over_mac to active for active-backup mode
[   90.005863][ T9364] bond19: (slave wireguard13): making interface the new active one
[   90.009277][ T9364] bond19: (slave wireguard13): Enslaving as an active interface with an up link
[   90.045778][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.049732][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.053386][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.057413][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.061519][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.065682][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.071897][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.077969][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.082363][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.086442][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.090769][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.094143][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.097215][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.100323][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.103673][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.108174][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.117490][ T9169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.121522][ T9169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.125052][ T9169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.128259][ T9169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.186830][ T9372] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   90.211258][ T7719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.216378][ T7719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.228052][ T7721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.236519][ T7721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.337609][ T9392] netlink: 'syz.0.1142': attribute type 1 has an invalid length.
[   90.360564][   T40] audit: type=1400 audit(1743741979.205:534): avc:  denied  { map } for  pid=9393 comm="syz.4.1077" path="socket:[23718]" dev="sockfs" ino=23718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   90.377612][   T40] audit: type=1400 audit(1743741979.205:535): avc:  denied  { read accept } for  pid=9393 comm="syz.4.1077" path="socket:[23718]" dev="sockfs" ino=23718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   90.453432][ T9404] FAULT_INJECTION: forcing a failure.
[   90.453432][ T9404] name failslab, interval 1, probability 0, space 0, times 0
[   90.458482][ T9404] CPU: 1 UID: 0 PID: 9404 Comm: syz.4.1144 Not tainted 6.14.0-syzkaller-13183-g06a22366d6a1 #0 PREEMPT(full) 
[   90.458504][ T9404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   90.458513][ T9404] Call Trace:
[   90.458519][ T9404]  <TASK>
[   90.458525][ T9404]  dump_stack_lvl+0x16c/0x1f0
[   90.458551][ T9404]  should_fail_ex+0x512/0x640
[   90.458570][ T9404]  should_failslab+0xc2/0x120
[   90.458590][ T9404]  __kmalloc_cache_noprof+0x6a/0x3e0
[   90.458613][ T9404]  ? __sctp_v6_cmp_addr+0x206/0x530
[   90.458634][ T9404]  ? sctp_add_bind_addr+0xae/0x3f0
[   90.458655][ T9404]  sctp_add_bind_addr+0xae/0x3f0
[   90.458677][ T9404]  sctp_copy_local_addr_list+0x39d/0x5a0
[   90.458702][ T9404]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[   90.458728][ T9404]  ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360
[   90.458754][ T9404]  ? sctp_bind_addr_copy+0xe0/0x530
[   90.458771][ T9404]  sctp_bind_addr_copy+0xe0/0x530
[   90.458794][ T9404]  sctp_connect_new_asoc+0x1d7/0x790
[   90.458813][ T9404]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[   90.458830][ T9404]  ? sctp_endpoint_lookup_assoc+0x15c/0x2a0
[   90.458857][ T9404]  __sctp_connect+0x3f3/0xc60
[   90.458875][ T9404]  ? do_raw_spin_lock+0x12c/0x2b0
[   90.458894][ T9404]  ? __pfx___sctp_connect+0x10/0x10
[   90.458911][ T9404]  ? __pfx_sctp_inet_connect+0x10/0x10
[   90.458928][ T9404]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   90.458948][ T9404]  ? __pfx_sctp_inet_connect+0x10/0x10
[   90.458961][ T9404]  sctp_inet_connect+0x15f/0x200
[   90.458977][ T9404]  __sys_connect_file+0x13e/0x1a0
[   90.458997][ T9404]  __sys_connect+0x14d/0x170
[   90.459014][ T9404]  ? __pfx___sys_connect+0x10/0x10
[   90.459039][ T9404]  ? __pfx_ksys_write+0x10/0x10
[   90.459061][ T9404]  __x64_sys_connect+0x72/0xb0
[   90.459076][ T9404]  ? lockdep_hardirqs_on+0x7c/0x110
[   90.459096][ T9404]  do_syscall_64+0xcd/0x260
[   90.459119][ T9404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.459135][ T9404] RIP: 0033:0x7f417638d169
[   90.459148][ T9404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.459163][ T9404] RSP: 002b:00007f417725c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   90.459178][ T9404] RAX: ffffffffffffffda RBX: 00007f41765a5fa0 RCX: 00007f417638d169
[   90.459187][ T9404] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003
[   90.459196][ T9404] RBP: 00007f417725c090 R08: 0000000000000000 R09: 0000000000000000
[   90.459205][ T9404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.459214][ T9404] R13: 0000000000000000 R14: 00007f41765a5fa0 R15: 00007ffe7fd03538
[   90.459236][ T9404]  </TASK>
[   90.562816][   T40] audit: type=1400 audit(1743741979.415:536): avc:  denied  { create } for  pid=9413 comm="syz.3.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   90.572171][ T5958] Bluetooth: hci3: command tx timeout
[   90.623373][ T9427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1151'.
[   90.681597][ T9434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1153'.
[   90.750178][ T9446] FAULT_INJECTION: forcing a failure.
[   90.750178][ T9446] name failslab, interval 1, probability 0, space 0, times 0
[   90.754381][ T9446] CPU: 0 UID: 0 PID: 9446 Comm: syz.1.1157 Not tainted 6.14.0-syzkaller-13183-g06a22366d6a1 #0 PREEMPT(full) 
[   90.754405][ T9446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   90.754414][ T9446] Call Trace:
[   90.754420][ T9446]  <TASK>
[   90.754426][ T9446]  dump_stack_lvl+0x16c/0x1f0
[   90.754448][ T9446]  should_fail_ex+0x512/0x640
[   90.754465][ T9446]  should_failslab+0xc2/0x120
[   90.754479][ T9446]  __kmalloc_cache_noprof+0x6a/0x3e0
[   90.754500][ T9446]  ? __sctp_v6_cmp_addr+0x206/0x530
[   90.754517][ T9446]  ? sctp_add_bind_addr+0xae/0x3f0
[   90.754535][ T9446]  sctp_add_bind_addr+0xae/0x3f0
[   90.754553][ T9446]  sctp_copy_local_addr_list+0x39d/0x5a0
[   90.754574][ T9446]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[   90.754594][ T9446]  ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360
[   90.754616][ T9446]  ? sctp_bind_addr_copy+0xe0/0x530
[   90.754631][ T9446]  sctp_bind_addr_copy+0xe0/0x530
[   90.754650][ T9446]  sctp_connect_new_asoc+0x1d7/0x790
[   90.754665][ T9446]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[   90.754678][ T9446]  ? sctp_endpoint_lookup_assoc+0x15c/0x2a0
[   90.754704][ T9446]  __sctp_connect+0x3f3/0xc60
[   90.754718][ T9446]  ? do_raw_spin_lock+0x12c/0x2b0
[   90.754734][ T9446]  ? __pfx___sctp_connect+0x10/0x10
[   90.754748][ T9446]  ? __pfx_sctp_inet_connect+0x10/0x10
[   90.754760][ T9446]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   90.754777][ T9446]  ? __pfx_sctp_inet_connect+0x10/0x10
[   90.754788][ T9446]  sctp_inet_connect+0x15f/0x200
[   90.754801][ T9446]  __sys_connect_file+0x13e/0x1a0
[   90.754818][ T9446]  __sys_connect+0x14d/0x170
[   90.754829][ T9446]  ? __pfx___sys_connect+0x10/0x10
[   90.754850][ T9446]  ? __pfx_ksys_write+0x10/0x10
[   90.754866][ T9446]  ? rcu_is_watching+0x12/0xc0
[   90.754890][ T9446]  __x64_sys_connect+0x72/0xb0
[   90.754902][ T9446]  ? lockdep_hardirqs_on+0x7c/0x110
[   90.754917][ T9446]  do_syscall_64+0xcd/0x260
[   90.754935][ T9446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.754948][ T9446] RIP: 0033:0x7fe1bdf8d169
[   90.754960][ T9446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.754972][ T9446] RSP: 002b:00007fe1bed70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   90.754989][ T9446] RAX: ffffffffffffffda RBX: 00007fe1be1a5fa0 RCX: 00007fe1bdf8d169
[   90.754997][ T9446] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003
[   90.755005][ T9446] RBP: 00007fe1bed70090 R08: 0000000000000000 R09: 0000000000000000
[   90.755013][ T9446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.755021][ T9446] R13: 0000000000000000 R14: 00007fe1be1a5fa0 R15: 00007ffe9d89a3d8
[   90.755041][ T9446]  </TASK>
[   91.012382][ T9465] pim6reg1: entered allmulticast mode
[   91.107633][ T9482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1165'.
[   91.108899][ T9485] netlink: 'syz.1.1166': attribute type 1 has an invalid length.
[   91.197611][ T9493] Bluetooth: MGMT ver 1.23
[   91.280647][   T40] audit: type=1400 audit(1743741980.125:537): avc:  denied  { read write } for  pid=9499 comm="syz.1.1171" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   91.288198][   T40] audit: type=1400 audit(1743741980.125:538): avc:  denied  { open } for  pid=9499 comm="syz.1.1171" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   91.297872][   T40] audit: type=1400 audit(1743741980.125:539): avc:  denied  { map } for  pid=9499 comm="syz.1.1171" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   91.306894][   T40] audit: type=1400 audit(1743741980.125:540): avc:  denied  { execute } for  pid=9499 comm="syz.1.1171" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   91.314466][   T40] audit: type=1400 audit(1743741980.125:541): avc:  denied  { write } for  pid=9499 comm="syz.1.1171" path="socket:[25649]" dev="sockfs" ino=25649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   91.345089][ T9508] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1174'.
[   91.348755][ T9508] 0·: renamed from hsr_slave_1 (while UP)
[   91.353411][ T9508] 0·: entered allmulticast mode
[   91.355598][ T9508] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[   91.361726][ T9512] netlink: 'syz.4.1175': attribute type 1 has an invalid length.
[   91.399717][ T9514] netlink: 'syz.4.1176': attribute type 6 has an invalid length.
[   91.403880][ T9514] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1176'.
[   91.448470][ T9518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1178'.
[   91.684327][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1188'.
[   91.949338][ T9559] netlink: 'syz.3.1194': attribute type 1 has an invalid length.
[   91.969630][ T9559] bond25: (slave wireguard21): The slave device specified does not support setting the MAC address
[   91.975253][ T9559] bond25: (slave wireguard21): Setting fail_over_mac to active for active-backup mode
[   91.983167][ T9559] bond25: (slave wireguard21): making interface the new active one
[   91.986719][ T9559] bond25: (slave wireguard21): Enslaving as an active interface with an up link
[   92.234493][ T9585] netlink: 'syz.3.1204': attribute type 1 has an invalid length.
[   92.253460][ T9585] bond26: (slave wireguard22): The slave device specified does not support setting the MAC address
[   92.257023][ T9585] bond26: (slave wireguard22): Setting fail_over_mac to active for active-backup mode
[   92.263514][ T9585] bond26: (slave wireguard22): making interface the new active one
[   92.270880][ T9585] bond26: (slave wireguard22): Enslaving as an active interface with an up link
[   92.471157][ T9616] overlayfs: failed to clone upperpath
[   92.535419][ T9624] netlink: 'syz.3.1216': attribute type 1 has an invalid length.
[   92.568615][ T9624] bond27: (slave wireguard23): The slave device specified does not support setting the MAC address
[   92.580734][ T9624] bond27: (slave wireguard23): Setting fail_over_mac to active for active-backup mode
[   92.587270][ T9624] bond27: (slave wireguard23): making interface the new active one
[   92.589900][ T9624] bond27: (slave wireguard23): Enslaving as an active interface with an up link
[   92.662329][ T5958] Bluetooth: hci3: command tx timeout
[   92.677223][ T9646] unsupported nla_type 14345
[   92.754226][ T9601] cgroup: fork rejected by pids controller in /syz4
[   92.769545][ T9662] vlan0: entered promiscuous mode
[   93.344856][ T9700] __nla_validate_parse: 3 callbacks suppressed
[   93.344879][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'.
[   93.497589][ T9713] usb usb9: usbfs: process 9713 (syz.4.1239) did not claim interface 47 before use
[   93.541633][ T9718] netlink: 'syz.4.1243': attribute type 1 has an invalid length.
[   94.144100][    T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!!
[   94.456427][ T9748] netlink: 'syz.4.1255': attribute type 4 has an invalid length.
[   94.471472][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'.
[   94.475229][ T9748] netlink: 'syz.4.1255': attribute type 8 has an invalid length.
[   94.482194][ T9748] netlink: 'syz.4.1255': attribute type 4 has an invalid length.
[   94.490964][    T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!!
[   94.508233][    T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!!
[   94.534106][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1256'.
[   94.566564][ T9728] delete_channel: no stack
[   94.611153][ T9754] netlink: 'syz.1.1258': attribute type 1 has an invalid length.
[   94.641054][ T9754] bond4: (slave wireguard2): The slave device specified does not support setting the MAC address
[   94.645845][ T9754] bond4: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[   94.663752][ T9754] bond4: (slave wireguard2): making interface the new active one
[   94.667344][ T9754] bond4: (slave wireguard2): Enslaving as an active interface with an up link
[   94.731210][ T5958] Bluetooth: hci3: command tx timeout
[   94.763720][   T40] kauditd_printk_skb: 9 callbacks suppressed
[   94.763738][   T40] audit: type=1400 audit(1743741983.615:551): avc:  denied  { listen } for  pid=9771 comm="syz.0.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   94.773200][ T9772] netlink: 'syz.1.1265': attribute type 1 has an invalid length.
[   94.897918][ T9787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58480 sclass=netlink_route_socket pid=9787 comm=syz.3.1266
[   94.898009][ T9794] netlink: 'syz.0.1271': attribute type 1 has an invalid length.
[   94.928819][ T9794] bond20: (slave wireguard14): The slave device specified does not support setting the MAC address
[   94.933310][ T9794] bond20: (slave wireguard14): Setting fail_over_mac to active for active-backup mode
[   94.940149][ T9794] bond20: (slave wireguard14): making interface the new active one
[   94.943131][ T9794] bond20: (slave wireguard14): Enslaving as an active interface with an up link
[   95.077647][ T9808] netlink: 'syz.1.1276': attribute type 11 has an invalid length.
[   95.080222][ T9808] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1276'.
[   95.088011][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'.
[   95.110639][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'.
[   95.173161][ T9815] netlink: 'syz.1.1278': attribute type 1 has an invalid length.
[   95.476171][ T9832] bridge2: entered promiscuous mode
[   95.486412][   T40] audit: type=1400 audit(1743741984.335:552): avc:  denied  { accept } for  pid=9831 comm="syz.4.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   95.488707][ T9829] bond5: (slave wireguard3): The slave device specified does not support setting the MAC address
[   95.497503][ T9829] bond5: (slave wireguard3): Setting fail_over_mac to active for active-backup mode
[   95.524588][ T9829] bond5: (slave wireguard3): making interface the new active one
[   95.547702][ T9829] bond5: (slave wireguard3): Enslaving as an active interface with an up link
[   95.624266][ T9839] ufs: You didn't specify the type of your ufs filesystem
[   95.624266][ T9839] 
[   95.624266][ T9839] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[   95.624266][ T9839] 
[   95.624266][ T9839] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[   95.642399][ T9839] ufs: ufstype=old is supported read-only
[   95.645910][ T9839] ufs: ufs_fill_super(): bad magic number
[   95.649472][ T9839] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[   95.743746][   T40] audit: type=1400 audit(1743741984.595:553): avc:  denied  { read } for  pid=9850 comm="syz.1.1290" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   95.752922][   T40] audit: type=1400 audit(1743741984.595:554): avc:  denied  { ioctl } for  pid=9850 comm="syz.1.1290" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   95.787685][   T40] audit: type=1400 audit(1743741984.635:555): avc:  denied  { getopt } for  pid=9852 comm="syz.4.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   95.796434][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'.
[   95.985611][ T9861] bond21: (slave wireguard15): The slave device specified does not support setting the MAC address
[   95.989916][ T9861] bond21: (slave wireguard15): Setting fail_over_mac to active for active-backup mode
[   95.998394][ T9861] bond21: (slave wireguard15): making interface the new active one
[   96.002135][ T9861] bond21: (slave wireguard15): Enslaving as an active interface with an up link
[   96.583288][ T9893] fuse: Bad value for 'fd'
[   96.720646][ T9908] 9pnet_virtio: no channels available for device syz
[   96.747300][ T9908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1309'.
[   96.797802][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1313'.
[   97.060763][ T5986] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   97.090828][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1322'.
[   97.153450][ T9938] bond22: (slave wireguard16): The slave device specified does not support setting the MAC address
[   97.157566][ T9938] bond22: (slave wireguard16): Setting fail_over_mac to active for active-backup mode
[   97.158584][   T40] audit: type=1400 audit(1743741986.005:556): avc:  denied  { write } for  pid=9942 comm="syz.4.1325" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   97.173437][ T9938] bond22: (slave wireguard16): making interface the new active one
[   97.176510][ T9938] bond22: (slave wireguard16): Enslaving as an active interface with an up link
[   97.212035][ T5986] usb 6-1: config 1 descriptor has 1 excess byte, ignoring
[   97.214384][ T5986] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[   97.217040][ T5986] usb 6-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[   97.219556][ T5986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.239139][ T9953] FAULT_INJECTION: forcing a failure.
[   97.239139][ T9953] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   97.247215][ T9953] CPU: 2 UID: 0 PID: 9953 Comm: syz.4.1329 Not tainted 6.14.0-syzkaller-13183-g06a22366d6a1 #0 PREEMPT(full) 
[   97.247233][ T9953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   97.247240][ T9953] Call Trace:
[   97.247244][ T9953]  <TASK>
[   97.247248][ T9953]  dump_stack_lvl+0x16c/0x1f0
[   97.247268][ T9953]  should_fail_ex+0x512/0x640
[   97.247283][ T9953]  _copy_from_user+0x2e/0xd0
[   97.247297][ T9953]  do_sock_getsockopt+0x5f4/0x800
[   97.247318][ T9953]  ? __pfx_do_sock_getsockopt+0x10/0x10
[   97.247332][ T9953]  ? __fget_files+0x204/0x3c0
[   97.247349][ T9953]  __sys_getsockopt+0x12f/0x260
[   97.247364][ T9953]  __x64_sys_getsockopt+0xbd/0x160
[   97.247375][ T9953]  ? do_syscall_64+0x91/0x260
[   97.247388][ T9953]  ? lockdep_hardirqs_on+0x7c/0x110
[   97.247401][ T9953]  do_syscall_64+0xcd/0x260
[   97.247435][ T9953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.247446][ T9953] RIP: 0033:0x7f417638d169
[   97.247455][ T9953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.247466][ T9953] RSP: 002b:00007f417725c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   97.247476][ T9953] RAX: ffffffffffffffda RBX: 00007f41765a5fa0 RCX: 00007f417638d169
[   97.247482][ T9953] RDX: 000000000000271b RSI: 0000200000000114 RDI: 0000000000000003
[   97.247488][ T9953] RBP: 00007f417725c090 R08: 0000200000000040 R09: 0000000000000000
[   97.247493][ T9953] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001
[   97.247499][ T9953] R13: 0000000000000000 R14: 00007f41765a5fa0 R15: 00007ffe7fd03538
[   97.247511][ T9953]  </TASK>
[   97.430159][ T9908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.436868][ T9908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.444306][   T29] usb 6-1: USB disconnect, device number 2
[   97.597730][ T9978] validate_nla: 6 callbacks suppressed
[   97.597748][ T9978] netlink: 'syz.3.1337': attribute type 1 has an invalid length.
[   97.642847][ T9978] bond29: (slave wireguard24): The slave device specified does not support setting the MAC address
[   97.647189][ T9978] bond29: (slave wireguard24): Setting fail_over_mac to active for active-backup mode
[   97.653944][ T9978] bond29: (slave wireguard24): making interface the new active one
[   97.656754][ T9978] bond29: (slave wireguard24): Enslaving as an active interface with an up link
[   98.038796][T10005] FAULT_INJECTION: forcing a failure.
[   98.038796][T10005] name failslab, interval 1, probability 0, space 0, times 0
[   98.043573][T10005] CPU: 2 UID: 0 PID: 10005 Comm: syz.1.1343 Not tainted 6.14.0-syzkaller-13183-g06a22366d6a1 #0 PREEMPT(full) 
[   98.043594][T10005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   98.043604][T10005] Call Trace:
[   98.043609][T10005]  <TASK>
[   98.043628][T10005]  dump_stack_lvl+0x16c/0x1f0
[   98.043655][T10005]  should_fail_ex+0x512/0x640
[   98.043673][T10005]  ? __kmalloc_noprof+0xbf/0x510
[   98.043691][T10005]  ? rds_info_getsockopt+0x377/0x4f0
[   98.043711][T10005]  should_failslab+0xc2/0x120
[   98.043729][T10005]  __kmalloc_noprof+0xd2/0x510
[   98.043749][T10005]  rds_info_getsockopt+0x377/0x4f0
[   98.043772][T10005]  ? __pfx_rds_info_getsockopt+0x10/0x10
[   98.043794][T10005]  ? find_held_lock+0x2b/0x80
[   98.043815][T10005]  ? __might_fault+0x13b/0x190
[   98.043837][T10005]  rds_getsockopt+0x173/0x2d0
[   98.043853][T10005]  ? __pfx_rds_getsockopt+0x10/0x10
[   98.043869][T10005]  do_sock_getsockopt+0x3fc/0x800
[   98.043895][T10005]  ? __pfx_do_sock_getsockopt+0x10/0x10
[   98.043914][T10005]  ? __fget_files+0x204/0x3c0
[   98.043940][T10005]  __sys_getsockopt+0x12f/0x260
[   98.043962][T10005]  __x64_sys_getsockopt+0xbd/0x160
[   98.043979][T10005]  ? do_syscall_64+0x91/0x260
[   98.043997][T10005]  ? lockdep_hardirqs_on+0x7c/0x110
[   98.044016][T10005]  do_syscall_64+0xcd/0x260
[   98.044036][T10005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.044052][T10005] RIP: 0033:0x7fe1bdf8d169
[   98.044064][T10005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.044079][T10005] RSP: 002b:00007fe1bed70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   98.044094][T10005] RAX: ffffffffffffffda RBX: 00007fe1be1a5fa0 RCX: 00007fe1bdf8d169
[   98.044104][T10005] RDX: 000000000000271b RSI: 0000200000000114 RDI: 0000000000000003
[   98.044113][T10005] RBP: 00007fe1bed70090 R08: 0000200000000040 R09: 0000000000000000
[   98.044123][T10005] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001
[   98.044132][T10005] R13: 0000000000000000 R14: 00007fe1be1a5fa0 R15: 00007ffe9d89a3d8
[   98.044152][T10005]  </TASK>
[   98.152489][T10011] netlink: 'syz.0.1346': attribute type 1 has an invalid length.
[   98.175602][T10014] netlink: 'syz.1.1347': attribute type 21 has an invalid length.
[   98.188333][T10011] bond23: (slave wireguard17): The slave device specified does not support setting the MAC address
[   98.192406][T10011] bond23: (slave wireguard17): Setting fail_over_mac to active for active-backup mode
[   98.198600][T10011] bond23: (slave wireguard17): making interface the new active one
[   98.201498][T10011] bond23: (slave wireguard17): Enslaving as an active interface with an up link
[   98.279544][T10026] netlink: 'syz.1.1358': attribute type 1 has an invalid length.
[   98.323715][T10026] bond6: (slave wireguard4): The slave device specified does not support setting the MAC address
[   98.326676][T10026] bond6: (slave wireguard4): Setting fail_over_mac to active for active-backup mode
[   98.331617][T10026] bond6: (slave wireguard4): making interface the new active one
[   98.334469][T10026] bond6: (slave wireguard4): Enslaving as an active interface with an up link
[   98.355559][   T40] audit: type=1400 audit(1743741987.205:557): avc:  denied  { remove_name } for  pid=10032 comm="syz.4.1351" name="file1" dev="9p" ino=37617739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   98.364030][   T40] audit: type=1400 audit(1743741987.205:558): avc:  denied  { unlink } for  pid=10032 comm="syz.4.1351" name="file1" dev="9p" ino=37617739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   98.368280][T10033] __nla_validate_parse: 3 callbacks suppressed
[   98.368290][T10033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1351'.
[   98.372598][   T40] audit: type=1400 audit(1743741987.205:559): avc:  denied  { associate } for  pid=10032 comm="syz.4.1351" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   98.680863][ T1334] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   98.695972][T10061] netlink: 'syz.0.1364': attribute type 1 has an invalid length.
[   98.749679][T10065] netlink: 'syz.0.1366': attribute type 1 has an invalid length.
[   98.781908][T10065] bond24: (slave wireguard18): The slave device specified does not support setting the MAC address
[   98.785609][T10065] bond24: (slave wireguard18): Setting fail_over_mac to active for active-backup mode
[   98.805057][T10065] bond24: (slave wireguard18): making interface the new active one
[   98.808224][T10065] bond24: (slave wireguard18): Enslaving as an active interface with an up link
[   98.831956][ T1334] usb 9-1: config 1 descriptor has 1 excess byte, ignoring
[   98.834652][ T1334] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[   98.838434][ T1334] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[   98.843875][ T1334] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.989118][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'.
[   99.068288][T10033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.072661][T10033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.078421][   T24] usb 9-1: USB disconnect, device number 2
[   99.383417][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   99.439760][T10084] ptrace attach of "/syz-executor exec"[5950] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                b\x0aøÿ\x0c  !¿¡      \x07
  øÿÿÿ·     ½      …   Ð   ·       •       ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09<YÖk^Ο6Ç\x0d
\x0cPwÚ€û˜,” ÆlêHJA[v–a¶Ou$\x1b\x07.�  -uY:(  É>dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ
[   99.551588][    T9] usb 6-1: Using ep0 maxpacket: 8
[   99.589894][    T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[   99.595260][    T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   99.598775][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   99.603245][    T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 18208, setting to 1024
[   99.608456][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   99.612987][    T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   99.619260][    T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   99.622929][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.755536][T10092] netlink: 'syz.0.1378': attribute type 1 has an invalid length.
[   99.835365][    T9] usb 6-1: usb_control_msg returned -32
[   99.837178][    T9] usbtmc 6-1:16.0: can't read capabilities
[  100.625194][T10107] netfs: Couldn't get user pages (rc=-14)
[  100.630329][   T40] audit: type=1400 audit(1743741989.475:560): avc:  denied  { map } for  pid=10081 comm="syz.1.1374" path="/164/file0/cpu.stat" dev="9p" ino=37617827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  100.641401][   T40] audit: type=1400 audit(1743741989.475:561): avc:  denied  { execute } for  pid=10081 comm="syz.1.1374" path="/164/file0/cpu.stat" dev="9p" ino=37617827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  101.557379][T10146] netlink: 'syz.0.1394': attribute type 1 has an invalid length.
[  101.577193][T10146] bond25: (slave wireguard19): The slave device specified does not support setting the MAC address
[  101.580562][T10146] bond25: (slave wireguard19): Setting fail_over_mac to active for active-backup mode
[  101.588061][T10146] bond25: (slave wireguard19): making interface the new active one
[  101.594012][T10146] bond25: (slave wireguard19): Enslaving as an active interface with an up link
[  101.709672][T10156] 9pnet_virtio: no channels available for device syz
[  101.714779][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1398'.
[  102.011802][   T58] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  102.172572][   T58] usb 9-1: config 1 descriptor has 1 excess byte, ignoring
[  102.175569][   T58] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  102.178224][   T58] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[  102.181174][   T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.387863][T10156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.392093][T10156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.396546][   T58] usb 9-1: USB disconnect, device number 3
[  102.502230][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'.
[  102.504804][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1408'.
[  102.785389][   T40] audit: type=1326 audit(1743741991.635:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10227 comm="syz.3.1416" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1b118d169 code=0x0
[  102.953768][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'.
[  102.956811][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1419'.
[  103.414411][T10271] 9pnet_virtio: no channels available for device syz
[  104.265688][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1430'.
[  104.269141][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1430'.
[  104.310320][   T40] audit: type=1400 audit(1743741993.155:563): avc:  denied  { ioctl } for  pid=10292 comm="syz.4.1431" path="socket:[25574]" dev="sockfs" ino=25574 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  104.386867][T10310] trusted_key: encrypted_key: keyword 'new0default' not recognized
[  105.290991][T10326] netlink: 'syz.3.1452': attribute type 1 has an invalid length.
[  105.310869][T10326] bond30: (slave wireguard25): The slave device specified does not support setting the MAC address
[  105.314685][T10326] bond30: (slave wireguard25): Setting fail_over_mac to active for active-backup mode
[  105.321780][T10326] bond30: (slave wireguard25): making interface the new active one
[  105.324609][T10326] bond30: (slave wireguard25): Enslaving as an active interface with an up link
[  105.620714][T10115] usbtmc 6-1:16.0: usb_control_msg returned -110
[  105.637989][   T58] usb 6-1: USB disconnect, device number 3
[  105.761598][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'.
[  105.764539][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1444'.
[  105.802575][T10351] netlink: 'syz.4.1454': attribute type 1 has an invalid length.
[  105.802585][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'.
[  105.869921][T10351] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  105.876892][T10351] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  105.883561][T10351] bond1: (slave wireguard0): making interface the new active one
[  105.886912][T10351] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  105.896417][T10359] netlink: 'syz.1.1457': attribute type 1 has an invalid length.
[  106.083599][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'.
[  106.087650][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1464'.
[  106.092182][   T40] audit: type=1400 audit(1743741994.945:564): avc:  denied  { write } for  pid=5340 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  106.098483][   T40] audit: type=1400 audit(1743741994.945:565): avc:  denied  { remove_name } for  pid=5340 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  106.105259][   T40] audit: type=1400 audit(1743741994.945:566): avc:  denied  { add_name } for  pid=5340 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  106.140931][T10394] netlink: 'syz.1.1468': attribute type 1 has an invalid length.
[  106.264992][   T40] audit: type=1400 audit(1743741995.115:567): avc:  denied  { watch } for  pid=10405 comm="syz.1.1473" path="/176/file0" dev="tmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  106.271926][   T40] audit: type=1400 audit(1743741995.115:568): avc:  denied  { watch_sb } for  pid=10405 comm="syz.1.1473" path="/176/file0" dev="tmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  106.305706][T10406] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  107.416078][T10470] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.419184][T10470] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.493338][T10477] netlink: 'syz.1.1501': attribute type 1 has an invalid length.
[  107.495528][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1501'.
[  107.505617][T10475] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  107.508762][T10475] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  107.511479][T10475] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  107.513917][T10475] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  107.516888][T10475] geneve3: entered promiscuous mode
[  107.518418][T10475] geneve3: entered allmulticast mode
[  107.556985][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1503'.
[  107.606071][T10486] netlink: 'syz.3.1505': attribute type 1 has an invalid length.
[  107.626090][T10490] syz.1.1506: attempt to access beyond end of device
[  107.626090][T10490] sr0: rw=4096, sector=0, nr_sectors = 4 limit=0
[  107.629779][T10490] EXT4-fs (sr0): unable to read superblock
[  107.630156][T10486] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1505'.
[  107.710094][   T40] audit: type=1326 audit(1743741996.555:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.3.1509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b118d169 code=0x7ff00000
[  107.717654][   T40] audit: type=1326 audit(1743741996.555:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.3.1509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b118d169 code=0x7ff00000
[  107.724293][   T40] audit: type=1326 audit(1743741996.555:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.3.1509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b118d169 code=0x7ff00000
[  107.731283][   T40] audit: type=1326 audit(1743741996.555:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.3.1509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b118d169 code=0x7ff00000
[  107.737573][   T40] audit: type=1326 audit(1743741996.555:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.3.1509" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b118d169 code=0x7ff00000
[  107.933260][T10512] netlink: 'syz.1.1516': attribute type 1 has an invalid length.
[  107.967024][T10515] FAULT_INJECTION: forcing a failure.
[  107.967024][T10515] name failslab, interval 1, probability 0, space 0, times 0
[  107.970739][T10515] CPU: 3 UID: 0 PID: 10515 Comm: syz.4.1517 Not tainted 6.14.0-syzkaller-13183-g06a22366d6a1 #0 PREEMPT(full) 
[  107.970753][T10515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  107.970760][T10515] Call Trace:
[  107.970764][T10515]  <TASK>
[  107.970768][T10515]  dump_stack_lvl+0x16c/0x1f0
[  107.970786][T10515]  should_fail_ex+0x512/0x640
[  107.970799][T10515]  should_failslab+0xc2/0x120
[  107.970811][T10515]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  107.970823][T10515]  ? __inet_hash_connect+0x7cb/0x1e30
[  107.970839][T10515]  __inet_hash_connect+0x7cb/0x1e30
[  107.970853][T10515]  ? __pfx___inet6_check_established+0x10/0x10
[  107.970868][T10515]  ? __pfx___inet_hash_connect+0x10/0x10
[  107.970880][T10515]  ? inet6_hash_connect+0xe2/0x180
[  107.970893][T10515]  dccp_v6_connect+0x9fa/0x1570
[  107.970907][T10515]  ? __pfx_dccp_v6_connect+0x10/0x10
[  107.970919][T10515]  ? register_lock_class+0x41/0x4c0
[  107.970934][T10515]  ? __lock_acquire+0xaa4/0x1ba0
[  107.970945][T10515]  __inet_stream_connect+0x3c5/0x1020
[  107.970963][T10515]  ? __pfx___inet_stream_connect+0x10/0x10
[  107.970978][T10515]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  107.970991][T10515]  ? __pfx_inet_stream_connect+0x10/0x10
[  107.971006][T10515]  ? __local_bh_enable_ip+0xa4/0x120
[  107.971022][T10515]  ? __pfx_inet_stream_connect+0x10/0x10
[  107.971035][T10515]  inet_stream_connect+0x57/0xa0
[  107.971051][T10515]  __sys_connect_file+0x13e/0x1a0
[  107.971063][T10515]  __sys_connect+0x14d/0x170
[  107.971073][T10515]  ? __pfx___sys_connect+0x10/0x10
[  107.971087][T10515]  ? __pfx_ksys_write+0x10/0x10
[  107.971096][T10515]  ? rcu_is_watching+0x12/0xc0
[  107.971114][T10515]  __x64_sys_connect+0x72/0xb0
[  107.971124][T10515]  ? lockdep_hardirqs_on+0x7c/0x110
[  107.971136][T10515]  do_syscall_64+0xcd/0x260
[  107.971150][T10515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.971161][T10515] RIP: 0033:0x7f417638d169
[  107.971170][T10515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.971179][T10515] RSP: 002b:00007f417725c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  107.971189][T10515] RAX: ffffffffffffffda RBX: 00007f41765a5fa0 RCX: 00007f417638d169
[  107.971196][T10515] RDX: 0000000000000022 RSI: 0000200000000000 RDI: 0000000000000004
[  107.971202][T10515] RBP: 00007f417725c090 R08: 0000000000000000 R09: 0000000000000000
[  107.971207][T10515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.971213][T10515] R13: 0000000000000000 R14: 00007f41765a5fa0 R15: 00007ffe7fd03538
[  107.971225][T10515]  </TASK>
[  108.001145][T10517] netlink: 'syz.1.1518': attribute type 1 has an invalid length.
[  108.397553][T10543] netlink: 'syz.4.1528': attribute type 1 has an invalid length.
[  108.474529][T10545] delete_channel: no stack
[  108.498259][T10548] FAULT_INJECTION: forcing a failure.
[  108.498259][T10548] name failslab, interval 1, probability 0, space 0, times 0
[  108.502582][T10548] CPU: 0 UID: 0 PID: 10548 Comm: syz.4.1530 Not tainted 6.14.0-syzkaller-13183-g06a22366d6a1 #0 PREEMPT(full) 
[  108.502598][T10548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  108.502606][T10548] Call Trace:
[  108.502610][T10548]  <TASK>
[  108.502615][T10548]  dump_stack_lvl+0x16c/0x1f0
[  108.502636][T10548]  should_fail_ex+0x512/0x640
[  108.502651][T10548]  should_failslab+0xc2/0x120
[  108.502664][T10548]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  108.502676][T10548]  ? do_raw_spin_lock+0x12c/0x2b0
[  108.502688][T10548]  ? inet_bind2_bucket_create+0x36/0x580
[  108.502700][T10548]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  108.502713][T10548]  inet_bind2_bucket_create+0x36/0x580
[  108.502724][T10548]  __inet_hash_connect+0x1501/0x1e30
[  108.502738][T10548]  ? __pfx___inet6_check_established+0x10/0x10
[  108.502754][T10548]  ? __pfx___inet_hash_connect+0x10/0x10
[  108.502766][T10548]  ? inet6_hash_connect+0xe2/0x180
[  108.502779][T10548]  dccp_v6_connect+0x9fa/0x1570
[  108.502795][T10548]  ? __pfx_dccp_v6_connect+0x10/0x10
[  108.502807][T10548]  ? register_lock_class+0x41/0x4c0
[  108.502821][T10548]  ? __lock_acquire+0xaa4/0x1ba0
[  108.502832][T10548]  __inet_stream_connect+0x3c5/0x1020
[  108.502851][T10548]  ? __pfx___inet_stream_connect+0x10/0x10
[  108.502865][T10548]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  108.502882][T10548]  ? __pfx_inet_stream_connect+0x10/0x10
[  108.502901][T10548]  ? __local_bh_enable_ip+0xa4/0x120
[  108.502965][T10548]  ? __pfx_inet_stream_connect+0x10/0x10
[  108.502995][T10548]  inet_stream_connect+0x57/0xa0
[  108.503019][T10548]  __sys_connect_file+0x13e/0x1a0
[  108.503037][T10548]  __sys_connect+0x14d/0x170
[  108.503051][T10548]  ? __pfx___sys_connect+0x10/0x10
[  108.503071][T10548]  ? __pfx_ksys_write+0x10/0x10
[  108.503084][T10548]  ? rcu_is_watching+0x12/0xc0
[  108.503101][T10548]  __x64_sys_connect+0x72/0xb0
[  108.503119][T10548]  ? lockdep_hardirqs_on+0x7c/0x110
[  108.503136][T10548]  do_syscall_64+0xcd/0x260
[  108.503157][T10548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.503171][T10548] RIP: 0033:0x7f417638d169
[  108.503184][T10548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.503198][T10548] RSP: 002b:00007f417725c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  108.503213][T10548] RAX: ffffffffffffffda RBX: 00007f41765a5fa0 RCX: 00007f417638d169
[  108.503221][T10548] RDX: 0000000000000022 RSI: 0000200000000000 RDI: 0000000000000004
[  108.503227][T10548] RBP: 00007f417725c090 R08: 0000000000000000 R09: 0000000000000000
[  108.503233][T10548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.503238][T10548] R13: 0000000000000000 R14: 00007f41765a5fa0 R15: 00007ffe7fd03538
[  108.503251][T10548]  </TASK>
[  108.912857][T10571] netlink: 'syz.0.1540': attribute type 1 has an invalid length.
[  109.449954][T10612] __nla_validate_parse: 6 callbacks suppressed
[  109.449965][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'.
[  109.879847][T10638] ip6tnl1: entered promiscuous mode
[  109.881835][T10638] ip6tnl1: entered allmulticast mode
[  109.884628][T10638] team0: Device ip6tnl1 is of different type
[  109.984219][T10647] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1571'.
[  110.196346][T10656] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1574'.
[  110.758781][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'.
[  110.883518][T10671] validate_nla: 4 callbacks suppressed
[  110.883529][T10671] netlink: 'syz.4.1579': attribute type 1 has an invalid length.
[  110.941236][T10676] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1581'.
[  111.024563][T10680] input: syz1 as /devices/virtual/input/input13
[  111.097651][T10683] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1583'.
[  111.100572][T10683] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1583'.
[  111.309273][T10697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1590'.
[  111.823334][T10724] netlink: 'syz.3.1602': attribute type 21 has an invalid length.
[  111.826426][T10724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1602'.
[  111.871498][T10726] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  111.921587][T10730] FAULT_INJECTION: forcing a failure.
[  111.921587][T10730] name failslab, interval 1, probability 0, space 0, times 0
[  111.926459][T10730] CPU: 1 UID: 0 PID: 10730 Comm: syz.4.1605 Not tainted 6.14.0-syzkaller-13183-g06a22366d6a1 #0 PREEMPT(full) 
[  111.926482][T10730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  111.926491][T10730] Call Trace:
[  111.926498][T10730]  <TASK>
[  111.926505][T10730]  dump_stack_lvl+0x16c/0x1f0
[  111.926530][T10730]  should_fail_ex+0x512/0x640
[  111.926548][T10730]  ? fs_reclaim_acquire+0xae/0x150
[  111.926571][T10730]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  111.926594][T10730]  should_failslab+0xc2/0x120
[  111.926613][T10730]  __kmalloc_noprof+0xd2/0x510
[  111.926635][T10730]  tomoyo_realpath_from_path+0xc2/0x6e0
[  111.926661][T10730]  ? tomoyo_profile+0x47/0x60
[  111.926678][T10730]  tomoyo_path_number_perm+0x245/0x580
[  111.926698][T10730]  ? tomoyo_path_number_perm+0x237/0x580
[  111.926718][T10730]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  111.926743][T10730]  ? find_held_lock+0x2b/0x80
[  111.926786][T10730]  ? find_held_lock+0x2b/0x80
[  111.926806][T10730]  ? hook_file_ioctl_common+0x145/0x410
[  111.926827][T10730]  ? __fget_files+0x20e/0x3c0
[  111.926846][T10730]  security_file_ioctl+0x9b/0x240
[  111.926870][T10730]  __x64_sys_ioctl+0xb7/0x200
[  111.926892][T10730]  do_syscall_64+0xcd/0x260
[  111.926915][T10730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.926931][T10730] RIP: 0033:0x7f417638d169
[  111.926945][T10730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.926959][T10730] RSP: 002b:00007f417725c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  111.926975][T10730] RAX: ffffffffffffffda RBX: 00007f41765a5fa0 RCX: 00007f417638d169
[  111.926986][T10730] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003
[  111.926995][T10730] RBP: 00007f417725c090 R08: 0000000000000000 R09: 0000000000000000
[  111.927004][T10730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.927014][T10730] R13: 0000000000000000 R14: 00007f41765a5fa0 R15: 00007ffe7fd03538
[  111.927035][T10730]  </TASK>
[  111.927042][T10730] ERROR: Out of memory at tomoyo_realpath_from_path.
[  112.243865][T10756] netlink: 'syz.3.1616': attribute type 1 has an invalid length.
[  112.273837][T10756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1616'.
[  112.343181][   T40] kauditd_printk_skb: 32110 callbacks suppressed
[  112.343192][   T40] audit: type=1400 audit(1743742001.195:32684): avc:  denied  { shutdown } for  pid=10762 comm="syz.0.1619" lport=46883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  112.468688][T10778] overlayfs: failed to resolve './file0': -2
[  112.937514][T10799] syz.1.1634: attempt to access beyond end of device
[  112.937514][T10799] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0
[  112.941471][T10799] syz.1.1634: attempt to access beyond end of device
[  112.941471][T10799] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0
[  112.945102][T10799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  112.947877][T10799] syz.1.1634: attempt to access beyond end of device
[  112.947877][T10799] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0
[  112.952806][T10799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  112.956433][T10799] syz.1.1634: attempt to access beyond end of device
[  112.956433][T10799] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0
[  112.960927][T10799] syz.1.1634: attempt to access beyond end of device
[  112.960927][T10799] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0
[  112.964569][T10799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  112.967284][T10799] syz.1.1634: attempt to access beyond end of device
[  112.967284][T10799] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0
[  112.971030][T10799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  112.975907][T10799] syz.1.1634: attempt to access beyond end of device
[  112.975907][T10799] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0
[  112.979967][T10799] syz.1.1634: attempt to access beyond end of device
[  112.979967][T10799] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0
[  112.983973][T10799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  112.986745][T10799] syz.1.1634: attempt to access beyond end of device
[  112.986745][T10799] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0
[  112.990430][T10799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  112.993623][T10799] syz.1.1634: attempt to access beyond end of device
[  112.993623][T10799] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[  112.998263][T10799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  113.001143][T10799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  113.003730][T10799] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[  113.278885][   T40] audit: type=1400 audit(1743742002.125:32685): avc:  denied  { ioctl } for  pid=10822 comm="syz.1.1644" path="socket:[28028]" dev="sockfs" ino=28028 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  113.666850][   T40] audit: type=1400 audit(1743742002.515:32686): avc:  denied  { create } for  pid=10862 comm="syz.1.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  113.965067][   T40] audit: type=1400 audit(1743742002.815:32687): avc:  denied  { nlmsg_write } for  pid=10883 comm="syz.1.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  114.240575][ T1334] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  114.390616][ T1334] usb 6-1: Using ep0 maxpacket: 32
[  114.403929][ T1334] usb 6-1: unable to get BOS descriptor or descriptor too short
[  114.408194][ T1334] usb 6-1: config 1 interface 0 altsetting 14 endpoint 0x81 has invalid maxpacket 18347, setting to 1024
[  114.412828][ T1334] usb 6-1: config 1 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  114.417677][ T1334] usb 6-1: config 1 interface 0 has no altsetting 0
[  114.424112][ T1334] usb 6-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.40
[  114.427637][ T1334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.431613][ T1334] usb 6-1: Product: syz
[  114.433224][ T1334] usb 6-1: Manufacturer: syz
[  114.434982][ T1334] usb 6-1: SerialNumber: syz
[  114.443368][T10890] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  114.521604][T10908] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  114.662916][ T1334] usbhid 6-1:1.0: can't add hid device: -71
[  114.664679][ T1334] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  114.668366][ T1334] usb 6-1: USB disconnect, device number 4
[  114.692750][T10913] batman_adv: batadv0: Adding interface: dummy0
[  114.694511][T10913] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.702391][T10913] batman_adv: batadv0: Interface activated: dummy0
[  114.705585][   T40] audit: type=1400 audit(1743742003.555:32688): avc:  denied  { ioctl } for  pid=10912 comm="syz.4.1679" path="socket:[27410]" dev="sockfs" ino=27410 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  114.708392][T10913] batadv0: mtu less than device minimum
[  114.719050][T10913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.723596][T10913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.727049][T10913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.730668][T10913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.735129][T10913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.739803][T10913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.744448][T10913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.749046][T10913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.754242][T10913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  114.776557][   T40] audit: type=1400 audit(1743742003.625:32689): avc:  denied  { map } for  pid=10912 comm="syz.4.1679" path="socket:[27408]" dev="sockfs" ino=27408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  114.784841][   T40] audit: type=1400 audit(1743742003.625:32690): avc:  denied  { setopt } for  pid=10912 comm="syz.4.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  114.814491][T10916] dns_resolver: Unsupported content type (234)
[  115.109306][T10927] __nla_validate_parse: 3 callbacks suppressed
[  115.109321][T10927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1685'.
[  115.196460][T10935] netlink: 'syz.1.1688': attribute type 1 has an invalid length.
[  115.389384][T10945] netlink: 'syz.3.1692': attribute type 1 has an invalid length.
[  115.410549][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1692'.
[  115.413152][T10945] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1692'.
[  115.622663][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1698'.
[  115.746744][T10968] netlink: 'syz.1.1701': attribute type 1 has an invalid length.
[  115.776979][T10970] fuse: Unknown parameter '�'
[  115.864100][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  115.867860][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  115.872221][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  115.876614][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  115.879069][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  115.915762][T10976] netlink: 'syz.1.1704': attribute type 1 has an invalid length.
[  115.941982][T10976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1704'.
[  115.944996][T10976] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1704'.
[  115.975813][   T40] audit: type=1400 audit(1743742004.825:32691): avc:  denied  { setopt } for  pid=10980 comm="syz.1.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  116.002256][T10971] chnl_net:caif_netlink_parms(): no params data found
[  116.107121][T10971] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.109417][T10971] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.112804][T10971] bridge_slave_0: entered allmulticast mode
[  116.116576][T10971] bridge_slave_0: entered promiscuous mode
[  116.122255][T10971] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.125128][T10971] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.127941][T10971] bridge_slave_1: entered allmulticast mode
[  116.131609][T10971] bridge_slave_1: entered promiscuous mode
[  116.140562][ T1334] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  116.170299][T10971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.174770][T10971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.207387][T10971] team0: Port device team_slave_0 added
[  116.210630][T10971] team0: Port device team_slave_1 added
[  116.244724][T10971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.246698][T10971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.254999][T10971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.258918][T10971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.260958][T10971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.268217][T10971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.290550][ T1334] usb 9-1: Using ep0 maxpacket: 32
[  116.294752][ T1334] usb 9-1: config index 0 descriptor too short (expected 35577, got 27)
[  116.298178][ T1334] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  116.301637][ T1334] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92
[  116.305110][ T1334] usb 9-1: config 1 has no interface number 0
[  116.307585][ T1334] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  116.309069][T10971] hsr_slave_0: entered promiscuous mode
[  116.312309][ T1334] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  116.312336][ T1334] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  116.312347][ T1334] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.323161][T10971] hsr_slave_1: entered promiscuous mode
[  116.324315][ T1334] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found
[  116.325052][T10971] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.328712][T10971] Cannot create hsr debugfs directory
[  116.426437][T10971] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.429391][T10971] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  116.498430][T10971] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.501684][T10971] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  116.563122][T10971] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.566076][T10971] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  116.670343][T10971] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.673787][T10971] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  116.847744][T10971] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  116.857047][T10971] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  116.861718][T10971] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  116.865764][T10971] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  116.876678][ T1334] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached
[  116.920000][T10971] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.928911][T10971] 8021q: adding VLAN 0 to HW filter on device team0
[  116.934020][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.936059][ T7721] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.943752][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.946424][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.044170][T10971] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.067759][T10971] veth0_vlan: entered promiscuous mode
[  117.072707][T10971] veth1_vlan: entered promiscuous mode
[  117.087246][T10971] veth0_macvtap: entered promiscuous mode
[  117.092776][T10971] veth1_macvtap: entered promiscuous mode
[  117.094487][ T1334] usb 9-1: USB disconnect, device number 4
[  117.098220][ T1334] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected
[  117.106488][T10971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.110170][T10971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.115788][T10971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.119784][T10971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.123777][T10971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.127888][T10971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.133189][T10971] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.140118][T10971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.144056][T10971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.146897][T10971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.149796][T10971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.152599][T10971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.155516][T10971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.158204][T10971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.161479][T10971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.164234][T10971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.167123][T10971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.171181][T10971] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.175969][T10971] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.178395][T10971] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.181456][T10971] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.184022][T10971] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.217523][ T7714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.222680][ T7714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.242080][ T7721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.245205][ T7721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.785896][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1716'.
[  117.930845][ T5956] Bluetooth: hci2: command tx timeout
[  118.095558][ T5984] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  118.163919][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1731'.
[  118.200008][   T40] audit: type=1400 audit(1743742007.045:32692): avc:  denied  { shutdown } for  pid=11064 comm="syz.3.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  118.208449][   T40] audit: type=1400 audit(1743742007.055:32693): avc:  denied  { read } for  pid=11064 comm="syz.3.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  118.253649][ T5984] usb 9-1: config 1 descriptor has 1 excess byte, ignoring
[  118.256155][ T5984] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  118.259426][ T5984] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[  118.262307][ T5984] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.471624][T11024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.475183][T11024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.483904][    T9] usb 9-1: USB disconnect, device number 5
[  118.861765][T11096] hugetlbfs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™�…EŸ8-ö¤ ™�ŠÇÅ–èEeÕ¬'
[  119.299149][T11119] netlink: 'syz.4.1752': attribute type 1 has an invalid length.
[  119.301513][T11119] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1752'.
[  119.309180][   T40] audit: type=1400 audit(1743742008.155:32694): avc:  denied  { view } for  pid=11118 comm="syz.4.1752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  119.575838][T11127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1755'.
[  119.870534][    T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  120.013142][ T5956] Bluetooth: hci2: command tx timeout
[  120.041747][    T9] usb 9-1: config 1 descriptor has 1 excess byte, ignoring
[  120.044020][    T9] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  120.046671][    T9] usb 9-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[  120.049437][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.061114][   T40] audit: type=1400 audit(1743742008.915:32695): avc:  denied  { read } for  pid=11146 comm="syz.0.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  120.256002][T11127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.260383][T11127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.268873][ T5947] usb 9-1: USB disconnect, device number 6
[  120.650251][T11156] warn_alloc: 1 callbacks suppressed
[  120.650267][T11156] syz.3.1766: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  120.660307][T11156] CPU: 2 UID: 0 PID: 11156 Comm: syz.3.1766 Not tainted 6.14.0-syzkaller-13183-g06a22366d6a1 #0 PREEMPT(full) 
[  120.660330][T11156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  120.660341][T11156] Call Trace:
[  120.660347][T11156]  <TASK>
[  120.660354][T11156]  dump_stack_lvl+0x16c/0x1f0
[  120.660380][T11156]  warn_alloc+0x248/0x3a0
[  120.660399][T11156]  ? __pfx_warn_alloc+0x10/0x10
[  120.660422][T11156]  ? __get_vm_area_node+0x1b9/0x300
[  120.660460][T11156]  ? __get_vm_area_node+0x1e5/0x300
[  120.660486][T11156]  __vmalloc_node_range_noprof+0x1110/0x1540
[  120.660516][T11156]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  120.660539][T11156]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  120.660570][T11156]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  120.660590][T11156]  vmalloc_user_noprof+0x6b/0x90
[  120.660613][T11156]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  120.660632][T11156]  vb2_vmalloc_alloc+0x135/0x3f0
[  120.660651][T11156]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  120.660671][T11156]  __vb2_queue_alloc+0x8c6/0x1280
[  120.660702][T11156]  vb2_core_reqbufs+0xa90/0xfe0
[  120.660727][T11156]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  120.660745][T11156]  ? __pfx___mutex_trylock_common+0x10/0x10
[  120.660763][T11156]  ? __pfx___might_resched+0x10/0x10
[  120.660790][T11156]  ? trace_contention_end+0xdd/0x130
[  120.660807][T11156]  ? __mutex_lock+0x1ca/0xb90
[  120.660830][T11156]  vb2_reqbufs+0x1a3/0x1f0
[  120.660844][T11156]  ? __pfx_vb2_reqbufs+0x10/0x10
[  120.660857][T11156]  ? __pfx_avc_has_extended_perms+0x10/0x10
[  120.660875][T11156]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  120.660896][T11156]  v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0
[  120.660915][T11156]  v4l_reqbufs+0x14f/0x1e0
[  120.660937][T11156]  __video_do_ioctl+0xb3d/0xfc0
[  120.660964][T11156]  ? __might_fault+0xe3/0x190
[  120.660982][T11156]  ? __pfx___video_do_ioctl+0x10/0x10
[  120.661021][T11156]  video_usercopy+0x4cd/0x1720
[  120.661047][T11156]  ? __pfx___video_do_ioctl+0x10/0x10
[  120.661070][T11156]  ? selinux_bprm_creds_for_exec+0xc10/0xc60
[  120.661096][T11156]  ? __pfx_video_usercopy+0x10/0x10
[  120.661137][T11156]  v4l2_ioctl+0x1ba/0x250
[  120.661159][T11156]  ? __pfx_v4l2_ioctl+0x10/0x10
[  120.661183][T11156]  __x64_sys_ioctl+0x190/0x200
[  120.661209][T11156]  do_syscall_64+0xcd/0x260
[  120.661233][T11156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.661248][T11156] RIP: 0033:0x7f6ee698d169
[  120.661262][T11156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.661278][T11156] RSP: 002b:00007f6ee47f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  120.661294][T11156] RAX: ffffffffffffffda RBX: 00007f6ee6ba6160 RCX: 00007f6ee698d169
[  120.661304][T11156] RDX: 0000200000000040 RSI: 00000000c0145608 RDI: 0000000000000004
[  120.661314][T11156] RBP: 00007f6ee6a0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  120.661323][T11156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.661332][T11156] R13: 0000000000000001 R14: 00007f6ee6ba6160 R15: 00007ffdcbfcc238
[  120.661354][T11156]  </TASK>
[  120.776779][    C2] vkms_vblank_simulate: vblank timer overrun
[  120.784037][T11156] Mem-Info:
[  120.785368][T11156] active_anon:7101 inactive_anon:0 isolated_anon:0
[  120.785368][T11156]  active_file:17159 inactive_file:38481 isolated_file:0
[  120.785368][T11156]  unevictable:10988 dirty:347 writeback:0
[  120.785368][T11156]  slab_reclaimable:11887 slab_unreclaimable:90973
[  120.785368][T11156]  mapped:24431 shmem:2461 pagetables:1095
[  120.785368][T11156]  sec_pagetables:302 bounce:0
[  120.785368][T11156]  kernel_misc_reclaimable:0
[  120.785368][T11156]  free:426791 free_pcp:953 free_cma:0
[  120.804460][T11156] Node 0 active_anon:28156kB inactive_anon:0kB active_file:68636kB inactive_file:153852kB unevictable:40416kB isolated(anon):0kB isolated(file):0kB mapped:97724kB dirty:1384kB writeback:0kB shmem:6308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:17680kB pagetables:4256kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB
[  120.817347][T11156] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  120.829520][T11156] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  120.839883][T11156] lowmem_reserve[]: 0 1236 1236 1236 1236
[  120.843182][T11156] Node 0 DMA32 free:106752kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB active_anon:28156kB inactive_anon:0kB active_file:68636kB inactive_file:153852kB unevictable:40416kB writepending:1384kB present:2080628kB managed:1265936kB mlocked:0kB bounce:0kB free_pcp:2636kB local_pcp:1308kB free_cma:0kB
[  120.854496][T11156] lowmem_reserve[]: 0 0 0 0 0
[  120.856315][T11156] Node 1 Normal free:1585796kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:724kB local_pcp:176kB free_cma:0kB
[  120.867375][T11156] lowmem_reserve[]: 0 0 0 0 0
[  120.869624][T11156] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  120.874522][T11156] Node 0 DMA32: 289*4kB (UME) 359*8kB (UME) 477*16kB (UME) 347*32kB (UME) 357*64kB (UME) 43*128kB (UM) 52*256kB (UM) 31*512kB (UM) 9*1024kB (UME) 9*2048kB (UM) 0*4096kB = 107948kB
[  120.882091][T11156] Node 1 Normal: 3*4kB (UM) 9*8kB (UME) 5*16kB (UME) 113*32kB (UME) 57*64kB (UME) 23*128kB (UME) 6*256kB (UE) 6*512kB (UME) 4*1024kB (UE) 5*2048kB (UME) 380*4096kB (M) = 1585796kB
[  120.888880][T11156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  120.893433][T11156] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  120.896850][T11156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  120.900316][T11156] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  120.903883][T11156] 67321 total pagecache pages
[  120.905527][T11156] 0 pages in swap cache
[  120.907120][T11156] Free swap  = 124996kB
[  120.908592][T11156] Total swap = 124996kB
[  120.910085][T11156] 1048443 pages RAM
[  120.911669][T11156] 0 pages HighMem/MovableOnly
[  120.913318][T11156] 282628 pages reserved
[  120.914814][T11156] 0 pages cma reserved
[  121.048361][T11166] gtp0: entered promiscuous mode
[  121.704353][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'.
[  121.759506][T11186] nfs4: Unknown parameter '
PL'
[  121.874020][T11189] netlink: 'syz.1.1779': attribute type 1 has an invalid length.
[  121.897829][T11191] netlink: 'syz.3.1780': attribute type 1 has an invalid length.
[  121.923849][T11191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1780'.
[  121.927518][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1780'.
[  121.962125][T11198] tmpfs: Bad value for 'mpol'
[  121.965271][T11200] tmpfs: Bad value for 'mpol'
[  122.017284][   T40] audit: type=1400 audit(1743742010.865:32696): avc:  denied  { append } for  pid=11201 comm="syz.3.1784" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  122.101324][ T5956] Bluetooth: hci2: command tx timeout
[  122.134321][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1785'.
[  122.474590][T11216] lo: entered promiscuous mode
[  122.477812][T11216] tunl0: entered promiscuous mode
[  122.481233][T11216] gre0: entered promiscuous mode
[  122.486639][T11216] gretap0: entered promiscuous mode
[  122.490795][T11216] erspan0: entered promiscuous mode
[  122.494227][T11216] ip_vti0: entered promiscuous mode
[  122.496750][T11216] ip6_vti0: entered promiscuous mode
[  122.499592][T11216] sit0: entered promiscuous mode
[  122.503087][T11216] ip6tnl0: entered promiscuous mode
[  122.505836][T11216] ip6gre0: entered promiscuous mode
[  122.511851][T11216] syz_tun: entered promiscuous mode
[  122.515139][T11216] ip6gretap0: entered promiscuous mode
[  122.519387][T11216] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.523774][T11216] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.529619][T11216] bridge0: entered promiscuous mode
[  122.534591][T11216] vcan0: entered promiscuous mode
[  122.537823][T11216] bond0: entered promiscuous mode
[  122.539256][T11216] bond_slave_0: entered promiscuous mode
[  122.541415][T11216] bond_slave_1: entered promiscuous mode
[  122.546332][T11216] team0: entered promiscuous mode
[  122.547880][T11216] team_slave_0: entered promiscuous mode
[  122.549651][T11216] team_slave_1: entered promiscuous mode
[  122.554399][T11216] batman_adv: batadv0: Interface deactivated: dummy0
[  122.556538][T11216] dummy0: entered promiscuous mode
[  122.558640][T11216] nlmon0: entered promiscuous mode
[  122.562678][T11216] caif0: entered promiscuous mode
[  122.564376][T11216] batadv0: entered promiscuous mode
[  122.568405][T11216] vxcan0: entered promiscuous mode
[  122.571140][T11216] vxcan1: entered promiscuous mode
[  122.573759][T11216] veth0: entered promiscuous mode
[  122.577762][T11216] veth1: entered promiscuous mode
[  122.584288][T11216] wg0: entered promiscuous mode
[  122.587253][T11216] wg1: entered promiscuous mode
[  122.590957][T11216] wg2: entered promiscuous mode
[  122.593999][T11216] veth0_to_bridge: entered promiscuous mode
[  122.600015][T11216] veth1_to_bridge: entered promiscuous mode
[  122.607039][T11216] veth0_to_bond: entered promiscuous mode
[  122.613651][T11216] veth1_to_bond: entered promiscuous mode
[  122.619198][T11216] veth0_to_team: entered promiscuous mode
[  122.626367][T11216] veth1_to_team: entered promiscuous mode
[  122.635274][T11216] veth0_to_batadv: entered promiscuous mode
[  122.640565][T11216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.645006][T11216] batadv_slave_0: entered promiscuous mode
[  122.651303][T11216] veth1_to_batadv: entered promiscuous mode
[  122.656184][T11216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.659041][T11216] batadv_slave_1: entered promiscuous mode
[  122.663604][T11216] xfrm0: entered promiscuous mode
[  122.666815][T11216] veth0_to_hsr: entered promiscuous mode
[  122.672043][T11216] veth1_to_hsr: entered promiscuous mode
[  122.681506][T11216] hsr0: entered promiscuous mode
[  122.687084][T11216] veth1_virt_wifi: entered promiscuous mode
[  122.693879][T11216] veth0_virt_wifi: entered promiscuous mode
[  122.698808][T11216] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  122.717787][T11216] vlan0: entered promiscuous mode
[  122.720100][T11216] vlan1: entered promiscuous mode
[  122.722496][T11216] macvlan0: entered promiscuous mode
[  122.729119][T11216] macvlan1: entered promiscuous mode
[  122.734539][T11216] ipvlan0: entered promiscuous mode
[  122.736711][T11216] ipvlan1: entered promiscuous mode
[  122.748006][T11216] macvtap0: entered promiscuous mode
[  122.753176][T11216] macsec0: entered promiscuous mode
[  122.762106][T11216] geneve0: entered promiscuous mode
[  122.768795][T11216] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.772965][T11216] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.775974][T11216] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.778125][T11216] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.782387][T11216] geneve1: entered promiscuous mode
[  122.786276][T11216] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  122.792972][T11216] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[  122.798374][T11216] netdevsim netdevsim4 netdevsim2: entered promiscuous mode
[  122.806379][T11216] netdevsim netdevsim4 netdevsim3: entered promiscuous mode
[  122.821348][T11216] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  122.833611][T11216] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode
[  122.838224][T11216] bridge1: entered promiscuous mode
[  122.842936][T11216] vxlan0: entered promiscuous mode
[  122.844860][T11216] bond1: entered promiscuous mode
[  122.846706][T11216] wireguard0: entered promiscuous mode
[  122.853259][T11216] bond2: entered promiscuous mode
[  122.855401][T11216] veth2: entered promiscuous mode
[  122.856938][T11222] netlink: 'syz.1.1791': attribute type 39 has an invalid length.
[  122.857483][T11216] veth3: entered promiscuous mode
[  122.862115][T11216] bond3: entered promiscuous mode
[  122.867304][T11220] netlink: 'syz.0.1790': attribute type 1 has an invalid length.
[  122.986922][T11231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11231 comm=syz.0.1792
[  123.070099][T11235] netlink: 'syz.4.1794': attribute type 1 has an invalid length.
[  123.098378][T11235] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address
[  123.103079][T11235] bond4: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  123.111815][T11235] bond4: (slave wireguard1): making interface the new active one
[  123.115085][T11235] bond4: (slave wireguard1): Enslaving as an active interface with an up link
[  123.140292][   T40] audit: type=1400 audit(1743742011.985:32697): avc:  denied  { accept } for  pid=11238 comm="syz.1.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  123.164767][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1796'.
[  123.217778][   T40] audit: type=1400 audit(1743742012.065:32698): avc:  denied  { setopt } for  pid=11247 comm="syz.1.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  123.246720][T11252] netlink: 'syz.1.1801': attribute type 1 has an invalid length.
[  123.310179][   T40] audit: type=1400 audit(1743742012.155:32699): avc:  denied  { append } for  pid=11255 comm="syz.1.1803" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  123.517423][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1806'.
[  123.545303][T11272] netlink: 'syz.1.1807': attribute type 1 has an invalid length.
[  123.577342][T11272] bond10: (slave wireguard5): The slave device specified does not support setting the MAC address
[  123.581971][T11272] bond10: (slave wireguard5): Setting fail_over_mac to active for active-backup mode
[  123.588409][T11272] bond10: (slave wireguard5): making interface the new active one
[  123.592920][T11272] bond10: (slave wireguard5): Enslaving as an active interface with an up link
[  123.792646][T11288] netlink: 'syz.0.1812': attribute type 1 has an invalid length.
[  123.824621][T11291] overlayfs: failed to clone upperpath
[  123.874769][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1815'.
[  123.904959][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1816'.
[  123.939915][T11303] netlink: 'syz.0.1818': attribute type 1 has an invalid length.
[  123.956346][T11303] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1818'.
[  123.964951][T11303] bond28: (slave wireguard20): The slave device specified does not support setting the MAC address
[  123.968259][T11303] bond28: (slave wireguard20): Setting fail_over_mac to active for active-backup mode
[  123.976962][T11303] bond28: (slave wireguard20): making interface the new active one
[  123.979474][T11303] bond28: (slave wireguard20): Enslaving as an active interface with an up link
[  124.007687][   T40] audit: type=1326 audit(1743742012.855:32700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.0.1819" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9a7d8d169 code=0x0
[  124.114929][   T40] audit: type=1400 audit(1743742012.965:32701): avc:  denied  { ioctl } for  pid=11308 comm="syz.0.1819" path="socket:[31796]" dev="sockfs" ino=31796 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  124.153155][T11326] netlink: 'syz.0.1822': attribute type 1 has an invalid length.
[  124.184167][ T5956] Bluetooth: hci2: command tx timeout
[  124.201589][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1826'.
[  125.110666][   T40] audit: type=1400 audit(1743742013.955:32702): avc:  denied  { append } for  pid=11347 comm="syz.4.1832" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  125.117336][T11348] @: renamed from vlan0
[  125.499204][T11372] bond11: (slave wireguard6): The slave device specified does not support setting the MAC address
[  125.503327][T11372] bond11: (slave wireguard6): Setting fail_over_mac to active for active-backup mode
[  125.508238][T11372] bond11: (slave wireguard6): making interface the new active one
[  125.511105][T11372] bond11: (slave wireguard6): Enslaving as an active interface with an up link
[  126.155952][   T40] audit: type=1400 audit(1743742015.005:32703): avc:  denied  { append } for  pid=11384 comm="syz.4.1843" name="hidraw0" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  126.284759][   T40] audit: type=1400 audit(1743742015.135:32704): avc:  denied  { listen } for  pid=11391 comm="syz.4.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  126.291401][   T40] audit: type=1400 audit(1743742015.135:32705): avc:  denied  { accept } for  pid=11391 comm="syz.4.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  126.535502][T11397] fuse: Bad value for 'user_id'
[  126.536988][T11397] fuse: Bad value for 'user_id'
[  126.587714][T11399] bond12: (slave wireguard7): The slave device specified does not support setting the MAC address
[  126.591036][T11399] bond12: (slave wireguard7): Setting fail_over_mac to active for active-backup mode
[  126.597945][T11399] bond12: (slave wireguard7): making interface the new active one
[  126.601138][T11399] bond12: (slave wireguard7): Enslaving as an active interface with an up link
[  126.634832][   T40] audit: type=1400 audit(1743742015.485:32706): avc:  denied  { ioctl } for  pid=11402 comm="syz.1.1849" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 ioctlcmd=0x9360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  126.648918][T11403] IPv6: sit2: Disabled Multicast RS
[  126.908292][   T40] audit: type=1400 audit(1743742015.755:32707): avc:  denied  { append } for  pid=11414 comm="syz.3.1853" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  127.046672][T11422] __nla_validate_parse: 2 callbacks suppressed
[  127.046684][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'.
[  127.111997][T11391] delete_channel: no stack
[  127.201760][T11430] validate_nla: 3 callbacks suppressed
[  127.201770][T11430] netlink: 'syz.3.1859': attribute type 1 has an invalid length.
[  127.265894][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1862'.
[  127.269132][T11436] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1862'.
[  127.273826][T11436] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1862'.
[  127.323190][T11441] block device autoloading is deprecated and will be removed.
[  127.791537][T11471] xt_l2tp: v2 doesn't support IP mode
[  127.984983][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'.
[  127.987502][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'.
[  128.139850][T11488] netlink: 'syz.1.1878': attribute type 1 has an invalid length.
[  128.262646][T11495] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  128.302541][T11495] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:321
[  128.306297][T11495] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 11495, name: syz.3.1880
[  128.312329][T11495] preempt_count: 0, expected: 0
[  128.314844][T11495] RCU nest depth: 1, expected: 0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  128.317583][T11495] 4 locks held by syz.3.1880/11495:
[  128.319781][T11495]  #0: ffff88802ae4f278 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[  128.324431][T11495]  #1: ffff888054bc9888 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}, at: wrap_directory_iterator+0x54/0xe0
[  128.328636][T11495]  #2: ffff888050030b88 (&type->i_mutex_dir_key#10){.+.+}-{4:4}, at: iterate_dir+0x18b/0xb40
[  128.333682][T11495]  #3: ffffffff8e3c1580 (rcu_read_lock){....}-{1:3}, at: afs_dynroot_readdir+0x619/0xf50
[  128.351730][T11495] CPU: 1 UID: 0 PID: 11495 Comm: syz.3.1880 Not tainted 6.14.0-syzkaller-13183-g06a22366d6a1 #0 PREEMPT(full) 
[  128.351776][T11495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  128.351786][T11495] Call Trace:
[  128.351793][T11495]  <TASK>
[  128.351800][T11495]  dump_stack_lvl+0x16c/0x1f0
[  128.351826][T11495]  __might_resched+0x3c0/0x5e0
[  128.351851][T11495]  ? find_held_lock+0x2b/0x80
[  128.351871][T11495]  ? __pfx___might_resched+0x10/0x10
[  128.351900][T11495]  ? ovl_cache_entry_new+0x3d/0x730
[  128.351922][T11495]  __kmalloc_noprof+0x386/0x510
[  128.351944][T11495]  ovl_cache_entry_new+0x3d/0x730
[  128.351974][T11495]  ovl_fill_merge+0x2c1/0xa90
[  128.352002][T11495]  afs_dynroot_readdir+0x9bb/0xf50
[  128.352025][T11495]  ? __pfx_ovl_fill_merge+0x10/0x10
[  128.352051][T11495]  ? __pfx_afs_dynroot_readdir+0x10/0x10
[  128.352070][T11495]  ? selinux_file_permission+0x11f/0x580
[  128.352101][T11495]  iterate_dir+0x293/0xb40
[  128.352128][T11495]  ovl_dir_read_merged+0x3ef/0x5d0
[  128.352148][T11495]  ? __pfx_ovl_dir_read_merged+0x10/0x10
[  128.352173][T11495]  ? __pfx_ovl_fill_merge+0x10/0x10
[  128.352202][T11495]  ? kasan_save_track+0x14/0x30
[  128.352221][T11495]  ovl_iterate+0x86c/0xe40
[  128.352243][T11495]  ? __pfx_down_read_killable+0x10/0x10
[  128.352269][T11495]  ? __pfx_ovl_iterate+0x10/0x10
[  128.352289][T11495]  wrap_directory_iterator+0x9f/0xe0
[  128.352313][T11495]  iterate_dir+0x293/0xb40
[  128.352340][T11495]  __x64_sys_getdents64+0x14d/0x2d0
[  128.352362][T11495]  ? __x64_sys_futex+0x1e0/0x4c0
[  128.352383][T11495]  ? __x64_sys_futex+0x1e9/0x4c0
[  128.352407][T11495]  ? __pfx___x64_sys_getdents64+0x10/0x10
[  128.352430][T11495]  ? __pfx_filldir64+0x10/0x10
[  128.352461][T11495]  do_syscall_64+0xcd/0x260
[  128.352484][T11495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.352500][T11495] RIP: 0033:0x7f6ee698d169
[  128.352513][T11495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.352528][T11495] RSP: 002b:00007f6ee7713038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  128.352544][T11495] RAX: ffffffffffffffda RBX: 00007f6ee6ba6080 RCX: 00007f6ee698d169
[  128.352555][T11495] RDX: 0000000000000037 RSI: 00002000000000c0 RDI: 0000000000000007
[  128.352565][T11495] RBP: 00007f6ee6a0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  128.352575][T11495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.352585][T11495] R13: 0000000000000000 R14: 00007f6ee6ba6080 R15: 00007ffdcbfcc238
[  128.352610][T11495]  </TASK>
[  132.575711][ T1420] ieee802154 phy0 wpan0: encryption failed: -22

VM DIAGNOSIS:
04:46:57  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000166be7 RBX=0000000000000000 RCX=ffffffff8b71d419 RDX=0000000000000000
RSI=ffffffff8dbedd7b RDI=ffffffff8bf46000 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10
R8 =0000000000000001 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000
R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90864110 R15=0000000000000000
RIP=ffffffff8b71bcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d69b6000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fe1bdf72f00 CR3=0000000047b90000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000006000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417640f282
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417640f28f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417640f289
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417640f29d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417640f323
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417640f401
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 aa1414ac00030008 8d01435690620000 0002000100068001 0014000000020000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41770dd100 00007f417657c440 00007f4176570004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f417657c498 00007f417657c490 00007f417657c488 00007f417657c480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff854de305 RDI=ffffffff9ae224a0 RBP=ffffffff9ae22460 RSP=ffffc900202f7448
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=000000000000000a R14=ffffffff9ae22460 R15=ffffffff854de2a0
RIP=ffffffff854de32f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6ee77136c0 ffffffff 00c00000
GS =0000 ffff8880d6ab6000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fe1bed4fd58 CR3=00000000335ee000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ee6a0f282
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ee6a0f28f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ee6a0f289
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ee6a0f29d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ee6a0f323
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ee6a0f401
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ee6b7c488 00007f6ee6b7c480 00007f6ee6b7c478 00007f6ee6b7c450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ee76dd100 00007f6ee6b7c440 00007f6ee6b7c458 00007f6ee6b7c4a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ee6b7c498 00007f6ee6b7c490 00007f6ee6b7c488 00007f6ee6b7c480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000d0
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000003 RBX=ffff88806a632de8 RCX=ffffffff82129775 RDX=0000000000000000
RSI=ffffffff8bf45f80 RDI=ffffffff8dcf9d10 RBP=0000000000000002 RSP=ffffc900030ce898
R8 =0000000000000000 R9 =fffffbfff210c822 R10=ffffffff90864117 R11=dffffc0000000000
R12=ffffea000159dec0 R13=dffffc0000000000 R14=00000000ffffffff R15=0000000000000001
RIP=ffffffff81a0e92d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe1bed706c0 ffffffff 00c00000
GS =0000 ffff8880d6bb6000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00002000000002c0 CR3=0000000031394000 CR4=00352ef0
DR0=0100000100000000 DR1=0000000000000006 DR2=0000000000000005 DR3=0000000000000011 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeffebdb70 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9a7e0f282
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9a7e0f28f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9a7e0f289
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9a7e0f29d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9a7e0f323
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9a7e0f401
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000080000002 RBX=0000000008100071 RCX=ffffffff8208467e RDX=ffff888030440000
RSI=ffffffff8208537e RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc900033cf768
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=dffffc0000000000 R14=ffff88804b0e3ba0 R15=ffffea0001050380
RIP=ffffffff81bb40e7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 000055555cd45500 ffffffff 00c00000
GS =0000 ffff8880d6cb6000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ff9a8ad56c0 CR3=0000000032f92000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcbfcc5c0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ee6a0f282
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ee6a0f28f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ee6a0f289
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ee6a0f29d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ee6a0f323
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ee6a0f401
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000d0
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000