last executing test programs:

2m30.441461027s ago: executing program 3 (id=102):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5", "0000000000000500"}, 0x28)

2m30.431794889s ago: executing program 3 (id=103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000440)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000480)='L', 0x1, 0x2})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285628, &(0x7f0000000280)={0x3, @win={{0xd, 0xfffffffd, 0x7f, 0x80}, 0x6, 0x0, &(0x7f0000000080)={{0x3ff, 0x0, 0x400, 0x1}}, 0x0, 0x0, 0x40}})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68)

2m30.402542812s ago: executing program 3 (id=104):
r0 = socket(0x27, 0x6, 0x80295)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000)=0xd, 0x4) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe97}, 0x40000042)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x1, 0x4, 0x7, 0xbcbd}, {0x9, 0x7, 0x4, 0x4ce}]}, 0x10)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000040)={0x0, 0x0, 0x7ffffffffffffffc, 0x82000004}) (async)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0xa)
shutdown(r2, 0x1)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="010100"/20, @ANYRES16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100))
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000010004b040000000000000000fbffffffdca8221e13b599e75d4ec586c708b0b6141e64fd9ab05bc9bac3ba4af50f000000a464edff7f8233e44184e3e6cf30a7f44a4e62a9dbdb0f734e73a4ff43164c70a9ea2cb8fa46f20416c3db3b16e1c8348367c1b9ed7d659d0dcf9878b227ff0d49145045d02a5b2714fedd7f3a1ebeb3655480383ddba38e641c2b9abaa5e13823ca5ca9dfe4df316c0ee2eed125aac6d4f31a53564a86c4e806e4727e9a17295be518c160ccf5eb8a581b3d33e0c0ea52d2af4f04f8c351", @ANYRES32=r7, @ANYBLOB="0000000052d00400"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
openat$vcsa(0xffffffffffffff9c, 0x0, 0x101800, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffa1, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="d37ac3e1f9960218d1d2b811d61c0379715cbca69349af0d3c85311dfd37be87e0444cf027fa3e978b10967766134d3c186479c76d6c47344989060937447ffc0b404a9a"], 0x4c}, 0x1, 0xba01}, 0x0) (async)
r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
pread64(r11, &(0x7f0000000080)=""/221, 0xdd, 0x7fffffffffffffff)

2m30.321330438s ago: executing program 3 (id=105):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r1, @ANYBLOB="795f63324e1799c5fff1db51b47892a89bf9464984d71bb24814dca24a0dae235f2d258498054b7958124d82f3f43a851238383aa8c6367cb805a124a127946a059d8143582647d54c260a2cdaf719c2b42183ceeba36f3dc422fe494ddf9e360c98a092cfaf1a943b0094bfafdd1940c9f48491a1f85f79ea4aee17f5f20633944d3542a4eb232937368c9316a2b9e740f7d22ffbb295134cc721cecb25d688b343e512012495d69041", @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, <r2=>0x0}, 0x2020) (async)
syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x4, 0x2, 0xf6, 0x2, 0x4000, 0x0, {0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x801, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x200400c4) (async)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async)
setsockopt$inet_tcp_int(r7, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00', @ANYBLOB="0100000000000000000044000000080003"], 0x4c}}, 0x4000804)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="24000000aac53f6170691c51a6641aebb3e294255439dbb2d28ceff07e0f9238d09de01712713c93d4ad30fe261cd9e58074dc926792dd9563b6eec41d9a740e2026dba63f10", @ANYRES16=r10, @ANYBLOB="01002abd7001ffdbdf255700000008000300", @ANYRES32=r12, @ANYBLOB="06009500ff070000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008080) (async)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="210227bd7000fedbdf250500000008000200020010"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800)
write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x809000, 0x0, 0x0, 0x0, 0x20000}}, 0x50)

2m30.320870433s ago: executing program 3 (id=106):
r0 = msgget$private(0x0, 0x0)
prctl$PR_MCE_KILL(0x4b, 0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x1, 0x2000)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000240)="0f01c965660f0f680c8e66b826008ec8ea63ca0000c800660f12aa6086d63566baf80cb8f0826483ef66bafc0cecb8010000000f01c10f890b000000f30f1eff9a550000002c01", 0x47}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file1\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x2, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008c0}, 0x50)
msgctl$IPC_SET(r0, 0x1, &(0x7f00000008c0)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170, 0xa4d}, 0x0, 0x0, 0x800000800000000, 0xa, 0xffffffffffffffff, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff})
msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200c7612f33117c281794584c199e0af2676f21d1ef000000000000"], 0xe, 0x0)

2m29.374132957s ago: executing program 3 (id=125):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
syz_open_procfs(r2, &(0x7f0000000080)='attr\x00')
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100))
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x18)
r4 = shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff)
shmdt(r4)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r5, &(0x7f0000000400)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04482d6ae306c90005000f00c80080000b00c80002000c00094400c80001000000c800fbff1ef9c8000100c60dfa0bfacd4980c834b050932a62158172bb308955ee8a8b554c50acd54cecb619c14206000000006b3b072c2d8814e54cbb8e174095d7fdd033d83cbc2de8cd1f23715558bb7f523b1775f6ca238172679fdba5451f5ea86a5fb97beedbc2852319505d3803254a17a7cf0c8aee2b2f9867ad78b53a29afa27859000000", @ANYRES16=r4, @ANYRESOCT=r3], 0x30)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x400003, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5202)
r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, r6, 0x0)

2m21.040956849s ago: executing program 0 (id=260):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7, 0xe, 0x2}, 0x14)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
write$binfmt_aout(r1, &(0x7f0000000500)={{0x107, 0x5, 0xff, 0x9b, 0x31e, 0x9, 0x1b1, 0x7}, "", ['\x00', '\x00']}, 0x220)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f70000022000", "1ab6c0e5"}, 0x28)

2m20.499496636s ago: executing program 0 (id=264):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000cc0)={@dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0x34}, @remote, 0x3, 0x2, 0x5, 0x400, 0x40, 0x0, r2})
syz_emit_ethernet(0xac, &(0x7f0000000e80)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x72, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x100, 0x8, "073a08c08c1f68bbb5d7fa5359776a63a373840478bfd2bc7cd7c042310eacbb97f24f38076065c19465a7ac29659d28b473e198d0ce1c24fc0ea428e83830193cb71963ad9e1a838c934ebcbd9e20115c79f293ae8030228be1abe4477651ceabbb4413c7469a3ebf67"}}}}}}, 0x0)

2m20.493042666s ago: executing program 0 (id=266):
r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f044, 0xa60})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f00000076c0))
r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x1c)
poll(&(0x7f0000000180)=[{r0, 0x80}, {r2, 0x40}, {r0, 0x22b0}, {r2, 0x102}, {r0}], 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='target_sequencer_start\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)

2m20.43086153s ago: executing program 0 (id=267):
r0 = socket(0x10, 0x3, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r4, 0x1}, 0x8)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r9 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRESHEX=r5, @ANYRES16=r6], 0x40}}, 0x8080)
setsockopt$inet_udp_encap(r9, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0xb22d, 0x1, 0x5, 0xc}, {0xff01, 0xb, 0xf7, 0x42a6}, {0x3, 0xfe, 0x4, 0xf18e}]})
capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

2m19.576615272s ago: executing program 0 (id=274):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000000280012800a00010076786c"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xfff1, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r4, 0x8925, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002380), 0x0, 0x0)
read$fb(r6, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x200, 0x2, 0x2, 0x0, 0x2})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x800)
recvmsg$can_j1939(r11, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x42)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r12 = socket$inet_smc(0x2b, 0x1, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r12, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

2m19.280157531s ago: executing program 0 (id=286):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
r2 = dup3(r1, r0, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x55af) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002c40)={0x34, 0x0, &(0x7f0000000180)=[@dead_binder_done, @acquire, @enter_looper, @decrefs, @increfs_done={0x40106308, 0x1}], 0x1000, 0x0, &(0x7f0000001c40)="bb5bebe6172c3349155c294f2bd3a1947eda9a4eb7ec54c97f01c83090fb45b14d5e719bf219b573319755a64c60d88f0cd54e8300c7e045195e194510d3a39a53b3469dc7cb3613aa1d388677034059a6a93c7a7d0bbe23d1bad6201683f41002496eac78fd6af9ed9d91b493e1f507a73e6c7b19aacefdc400f01059a9f2bfc2e5b76d824eb8906194d4c1c01d394efa9269be4991914658475e84738c7242d24661dfcb73d35a6288d29ff01168ed73896e346ae795b559a17eb819d3ac40b4087b07d8c3521123ca799f9a4eff40930911ec2dbeaf68ffaa0965b6f7690746faa1283401baf329503ea541db36dceff616ad5db3cd54de30939af5d4ea06f8186402a513e909cea9f6a86864563cae2273117cdadb529d51e7a0277e091553da7db5c69a2e72848b507e6d88f93dab0e74c9541c93b71b9466caa5685d4550e4206e1335721398c267bf2370fea524560b5a872bfd2c4f164570a72a49f902c6617ed662365a366a8f0f8f420bfd02087f64606135404f938be9d766a6c48b3a6dc47e8311768a9f909a5004bb16ee6c64ea4c0a31504d62cf65043037d390b051bd0512fa2eba6a11dd29d8bed187282b115cdc4a8b0981fed6b62b71d937a37876213ba972442e5d628535c98c2af84577276eee8a13df41f42768b88b27a4444805de778ec255242f4a17af539238b97975bb97ddc4c5908fdbea06f9b31efc24a696f1843b4c66b83efdf5d31c02be27e8428e8f62e77f0db16a4cc2ae1a350c9dcf231d1516af933deaac1318e4248a20408afafd87a97f8ae3a008d8b2bfa9a18247e0661fab33af2cebb65ad86de46ee476197e7c29958ce8bdba010f3c2386ba7512887866704349bec7d49c14196b2b2cb65bfe9a1f0bd4f4595c73a3727d16d567d7a439d74ab0f5b399dabe6d8c5fc92ad5a3e5a06ef39e0fc934092cb6831ddb6e86e84668458add7dcc2bcfc9c435cbe8908a27611ee8c01af6d4a30ec7d637289a3691b7ac321918a41e9120ef396d72343fb60c77f48c71e265c7c5e0ff501fe7a0021260b7b31e90628dda9625d0d621d998bbbd59819af41785ed4915f965966581a143d779832252670c3b4c4b25ba057f8ceb3daadc970a97ea3b53b259dc871a5cb1abe0cbbf0662ca4c3823c71e7b668aa7f1f30eba0d598cdb33b44b3b2dea5bc1bf8ffeef5f1c5d6ed62510fabaa0079a32e3cebfda13f858ed45c3742592fae3246bdc7421b9fd620c136470198eee4d5f12a25251dbb3999db041ac7c08a804129f67d03df88f10cdf1fc3e6fdf3fa8f54597b948d2a3fe7261ec3c6209116d99c265d58e9157b3af6cf2b3f69071b23f8ca4de4b0232ff1f6b3678a0196a6d1bebc99a5a3505440725cbb3840ef75e70bd5385689d153266c30d03cf90bbc88ee3f8d6ccb1d2f6304cb2ef4da53249334764704e68a0d4c4df3ae7ff0370798ee0a9c506746137d41f7b646c1cac131d0f1cfb9974a3b5ae9079831d8ab4567768a2210e3205d9c667919bd0ae82153cd28510070b4141dafa78ec4ec67d39fb842bc733821423b8f879dbca08d462bb73adfb1305b34ef2127276b2f99dfd6e4fe68de6c25587e74f2c4282d7fc47a6d3851181be8821802129130357789b6177f6c7dc721b3d949a38ea2c06eb480cea51277ade7bd6f13310a7711e0b2b5e501d059eb7b61a18f0de16d1eff2ce279ad2a2f8154bcdc538e559243ad92f7a1428b8f7b62d5eb57b6ad197abee5ec7775f6d0cd84bdaabdfca058bcebeed110a9812f3f5fcdf5c3b67f2a33e8459d7581702028335efd29ed39b35b6ebbd26b0148f3f172cd59fad70c40f6121593aa9d77e68143b386ffdb9b1f524c8de2c35b33b8dba64dc2321c5b93a2a02a9e2e94a07e9d4120529e54f329de30e39c85a62e79de1a16711b01c52840983d7bb9579434c21cc2a1d1e8ede5c6c4cabdb3e9500631f41ff9a18cd77f63fe4dba74ae6f124d1fda93a412cb35cde88a72772938c744b0bc0444840a57a8efe6a8f6f310320694e4ff1dfd566d587c8abd70bdab143d74d51fc012ecb4779b93e0e2d10f818970fa460db6504a8cbd3163a040ff45bf67857e029a9ffe7138838411d667a94ab50cb0ff727e6d940af00fd2e489c659ce818cba71d39e4ca76b332a8c4e0e596f36e414977cafcb4ac1d1c3d2da6945a37e45cc552ca2ba7682b49ca8f609271174b41d62510de79ce3d44044431b46e58425d3ab13ec0ed82399c80ba1cd8a2ecca9f31249549f5f2908cdbbf17b9bbca4351dbd59cd8d02c41812dcab1503db666464b981b55f58312b8655a7fb7ae58a14a9882fbfa087f69baf8392f7406d5ef90139beb02aa955b43496cf5232aabc410cbdcfc61dff4c579ac829b97b68de6bbbd348e6bf8c8f9eebb376586358c06476bbba06fa9e9831e8507edb7f6263f646e78e1c4e576288ef5baf7bb6e1ef7f48c1de8dca5127aeac01690b2e418f8780a3dad565fafe9af38e443edb0e9e56647e154edc588bceb4f56c27ae072da4cdc4e8f58f0f5d50450ae63989bb10b5f205f49baee83d4b8efdf26bcdf27fd1d421e760404d6e33f72838717c0d0ccc7aba7bdbcccd795b5a4715109ff480422283f3c0c7eda94443492ad11d48249050724c7d3cd4fc9e9a4dec19aeeab9de225770b52c48d53f196bd0ac97c135513b610a77c774fbebc8fe4c394f2e6c89e03497720c3e7ab9f6e33c6e9d9e2f91055cdd515045378448e5055c9362fd5a95ffe79e07019bc1fdc94207d391d9f97d70fb997efcf838f67fe84865360a925d64a170dbb55c5c1b4856b0df8f6c05832e56e20a8c11d7274e6dfc9b917583820407ac7654d3aec7d4c8bdcbda55c41b9afb83b55c93e58e03b04ac3bffdbc53caeb7dcb57160c8c5019999c8326fdb7aa89608112f04021448c6faa74011e7c52408158d05bed9c7e33b1d34360727c641058a8c3c1800a5ed1832678bdfc4ee9280fd6ccdd5c4fd40d6edf21714ab3f61240783320d3c091577440543c3937dd1207c80ea6c06164a721bd2d3086234efa2b2bbefd71e81f64f7ce0c8552c39c7ee214bb494c200c19831ed3544024f410965a2fd842c598a0c69d6a3822a35eb16cb0795e05404a50a11947a81b17efcd7490db19ae9ea8ee45e339f63eb2ff265af1b0288e9e9e7b532dff4aa41a7d145208d2510befbe4fa71e3e886d4f31de719b6040567df690a09747d2824141da259bb2ac7e76f18e44169a3611a76471bb0044eb8f99045c23a3942464680dd1d60c63990e5d0b3b890c00797dd545b6c7c7e3abdfabd0b0335199f349e05ad01ae2807ef7eef58961f352daf11657497653976eb50e4e9dac81c4df227a64380468529b8251ac0bbb760cc64f1faceba14fd58365deb6cad13f610a2e4f3c68b0eff54a35be63d065243cff04a81abf3a6889f2e49a2080d0f4cad8f00d3f684bbf8e06a383351ca977af1576c428b4e883f3641b9bf079ce0ec20a88a4efcbfe31ad07e8433c540f8bc315ca6288a4f9bd660a331a7f457617289b31afbd66fdcfed9bf17cdad7ba819a792ae8b1ff2080839c57ef2c2cdd354dcf9dca1c932ec6c2e4993b734324139492688238dfd1372784aa47c8f951d5e083a38292fdf0b8088dd20f714cb159ae2671d9198ead9b58bfb446a3bc0b187805fc9c3c37c153d9cad32e09cd4bc4c72d754df7f7566fc63f46cca7b3453c4926e68c11db0ec2f77cfcc8ce99516c7f7122ed55d1f36b7e5f17e27b45a83eacfa8de9991d7cc43025b4ba6b267555408f86808fbdb1913bd2e6b3f215b3b894bf6b78b863580e3a19fd437ba3a759b2b717e9354f3f088cea567790a3fbdaf8f9d97ce6693d1ba4c734ace364ba123b0b3255b6f793fce86d795cfa6e112cbc5949195ca3c0a8aad7f2427f671372ac7b5ece2eaf7ba91929bbfd866de68dd5da9e1f0958494068c651e09fe2ca476d7072ec7b79439824d834d38c246c6bbbafaa584fad70ac40d62353361eec8bdc2f46a2b8fdffa0d0871c707ac46aa0944240fefd6b877ffc54af72865aca3990d5453e7abdc321942038c9beba549397497ec7282d93090c34a6385aebc9df725ace4b0dccdb43be8715f114f23ce580e3e930bf3bde56f47cbc131df451a8b81adfd3a060d550600fc1857aae780f588a6fd1609aa0420023c1dc3d5409068385d5b2b23ec6ff6cef284bd118357c38e5317c1139b791941f4c02834c29f8a14809866887a902af1aa5fb77c4a42b2c694a6ece77d789472e2bdd3d6f824e1bc0f153d8971c5a9b9f7212d3506bde4bac888e366a5f09bfccacf11a3fe595935caec6d3e1ec4cb47452426a5df18c41f61562a879baf0a01d1b71379ba02f81761222fd396ad6b683e092a8ac3605271dcef409a6cddd4cc1f3f74825460529bf2b02fe1dfc0b0c4443cb9f638018092eaf51c1998496162d5bbc1ce2cdf9360fdba796f954ca8db68c7f31bcc1ba6325ed6148fe74d3c19086873dd64bdb1c02bcf2bf5cd73716b8c35fcf291cc9beb4b70c0b61b4af2b332ddb42c6733f3ccdd867d8b70a667156f0799f7290523d7a11e78db101ce7c69b7e6d53284a4ed5bc2974e14a525f0bbf1b7482b8ac6e33f31a293d55be92853c50111fd29e4aaa2f9da2c8009136c2dd21de2e118170d8739b9c73095466498d2edc67aaa2e956385cddd7572ebf406443da5161ade8f7cd98530010d8113f92145b724702c97745bdc5a3c66a35e296a15df48b86c78ca9f6ed6cde205bea8d66ff9bc2ed28075ebfda3855fd6f708cf8a553ea32bdfc7de246b475e54d15e34d3be69bafd887c0b2adb1531a96e4af0e7d0795e79a8d0681b5507a5a590a109b28e2e48add9a9c8a65f389f555aee00f15ba876e02d6d01ba6e36dcd39bc62b59aa9962adaef3e321c9ce9348df53fcec85a75a1a88ab8500857bc016ab178f5b65595202bd0bc51fb46904b055825accd902181598d69c81d32c7b99a2acdf0fbb99d432d1b302d2037935bbf8e9d94fbf8a0c727f1a845a74ccc219473e0a0f61fbf79bacd349ebe89e2002358cd4b405fbf6d303c6dfa6f7850716fb3008c789cf0ecc2698f3321cd913acabb9e4a91a6b4f9c95d1e31a4431c5bdc18a06a7756196d42d7a1e6805e3188d9530cba9b0658a7a7f09041257f29f0f93a3f9e9ca3ac446888e8eb216478412c933a0af31aff5fce3adeeb3949605e1b689bc28838098dfffbb036554bfee5c398133b26eb4236fbb98add25d1d15ec275ed55926a1ada0af486fffc85a41e927df81cacd3ab16bdc4e55b4cb4e54a9763b1009df5390802a64432c09ea364dcd3796b1082703c5289a6d0e0e394cd640dc09989324ed341855d94beeaa538252760cae28c86382e798cf1e43c82850ff26b52c0622c9394057725d117f33336047a79981f24e2515bebad7acea5c9c7bed73b9e68aa0e43ed66e1dcbacbb07d2ecf750e30485e1fb584b970778c23c0070caf696445fea4f9fac0faa5d4531eb9397e9888d88946b5723d598ab397d16781e82245a842fde04c6e187daee8305d7e1aeffe51953b35203beb313d8980bfa8957c3a1dc8d714f7a38f00b39640b209f9b713bfd11aa8f29ea2336c5ad050fe13d6e8d96b3d597965157acf40ce4f6e92a87c9cd8d687d7cdb3726af23475cb34024782839e7e77930c9fcf7c2f47722f0732dcd3960827fa833af8fd6fed6fa14df40c4ed7ee140cc46ad8e97b451dd65311a050a911a003782bb7def487ddfa74"}) (async)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001ac0)={0x1b0, 0x0, &(0x7f0000001800)=[@free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xa, 0x1, 0x24}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x18, 0xfffffffffffffff1}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x100, 0x3}, @fda={0x66646185, 0x0, 0x2, 0x2d}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/40, 0x28, 0x1, 0x6}}, &(0x7f00000004c0)={0x0, 0x18, 0x38}}, 0x400}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}, 0x400}, @request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000600)={@flat=@weak_handle={0x77682a85, 0x1001, 0x1}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x1, 0x1, 0x10}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}, 0x40}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001740)={@flat=@binder={0x73622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/124, 0x7c, 0x2, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/4096, 0x1000, 0xb, 0x32}}, &(0x7f00000017c0)={0x0, 0x18, 0x40}}}, @request_death={0x400c630e, 0x1}, @release={0x40046306, 0x1}, @dead_binder_done], 0xd0, 0x0, &(0x7f00000019c0)="a833c18406f70568d2d42226faed9b36ec50ea4a1efa4c060bb8a47a680b5935f5bd701479736f68db48fc65392e25bbb33f00377df3494fb594f69071cc3d71c4f9b474d8fcbd84b1b6e3f3a53583324e224467f6f31c30618a061df32064b9f65d45275643ff62bf6392d111d6621fc72eb0270cfa3d3f31a60bf22df0c3c6aa2667957327c4f7727f1eb6af182af6109b55933f3bd0d5e74a65932c13da88781c503b64956b61a4e3f4475a234b05a897175208f2c09386bc7ff06e7ddfcccaaa05d691fe1f253c2fa9d556e951f1"})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110b}) (async)
getsockopt(r2, 0x83, 0x4, &(0x7f0000001b00)=""/230, &(0x7f0000001c00)=0xe6) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

2m19.23680523s ago: executing program 32 (id=286):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
r2 = dup3(r1, r0, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x55af) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002c40)={0x34, 0x0, &(0x7f0000000180)=[@dead_binder_done, @acquire, @enter_looper, @decrefs, @increfs_done={0x40106308, 0x1}], 0x1000, 0x0, &(0x7f0000001c40)="bb5bebe6172c3349155c294f2bd3a1947eda9a4eb7ec54c97f01c83090fb45b14d5e719bf219b573319755a64c60d88f0cd54e8300c7e045195e194510d3a39a53b3469dc7cb3613aa1d388677034059a6a93c7a7d0bbe23d1bad6201683f41002496eac78fd6af9ed9d91b493e1f507a73e6c7b19aacefdc400f01059a9f2bfc2e5b76d824eb8906194d4c1c01d394efa9269be4991914658475e84738c7242d24661dfcb73d35a6288d29ff01168ed73896e346ae795b559a17eb819d3ac40b4087b07d8c3521123ca799f9a4eff40930911ec2dbeaf68ffaa0965b6f7690746faa1283401baf329503ea541db36dceff616ad5db3cd54de30939af5d4ea06f8186402a513e909cea9f6a86864563cae2273117cdadb529d51e7a0277e091553da7db5c69a2e72848b507e6d88f93dab0e74c9541c93b71b9466caa5685d4550e4206e1335721398c267bf2370fea524560b5a872bfd2c4f164570a72a49f902c6617ed662365a366a8f0f8f420bfd02087f64606135404f938be9d766a6c48b3a6dc47e8311768a9f909a5004bb16ee6c64ea4c0a31504d62cf65043037d390b051bd0512fa2eba6a11dd29d8bed187282b115cdc4a8b0981fed6b62b71d937a37876213ba972442e5d628535c98c2af84577276eee8a13df41f42768b88b27a4444805de778ec255242f4a17af539238b97975bb97ddc4c5908fdbea06f9b31efc24a696f1843b4c66b83efdf5d31c02be27e8428e8f62e77f0db16a4cc2ae1a350c9dcf231d1516af933deaac1318e4248a20408afafd87a97f8ae3a008d8b2bfa9a18247e0661fab33af2cebb65ad86de46ee476197e7c29958ce8bdba010f3c2386ba7512887866704349bec7d49c14196b2b2cb65bfe9a1f0bd4f4595c73a3727d16d567d7a439d74ab0f5b399dabe6d8c5fc92ad5a3e5a06ef39e0fc934092cb6831ddb6e86e84668458add7dcc2bcfc9c435cbe8908a27611ee8c01af6d4a30ec7d637289a3691b7ac321918a41e9120ef396d72343fb60c77f48c71e265c7c5e0ff501fe7a0021260b7b31e90628dda9625d0d621d998bbbd59819af41785ed4915f965966581a143d779832252670c3b4c4b25ba057f8ceb3daadc970a97ea3b53b259dc871a5cb1abe0cbbf0662ca4c3823c71e7b668aa7f1f30eba0d598cdb33b44b3b2dea5bc1bf8ffeef5f1c5d6ed62510fabaa0079a32e3cebfda13f858ed45c3742592fae3246bdc7421b9fd620c136470198eee4d5f12a25251dbb3999db041ac7c08a804129f67d03df88f10cdf1fc3e6fdf3fa8f54597b948d2a3fe7261ec3c6209116d99c265d58e9157b3af6cf2b3f69071b23f8ca4de4b0232ff1f6b3678a0196a6d1bebc99a5a3505440725cbb3840ef75e70bd5385689d153266c30d03cf90bbc88ee3f8d6ccb1d2f6304cb2ef4da53249334764704e68a0d4c4df3ae7ff0370798ee0a9c506746137d41f7b646c1cac131d0f1cfb9974a3b5ae9079831d8ab4567768a2210e3205d9c667919bd0ae82153cd28510070b4141dafa78ec4ec67d39fb842bc733821423b8f879dbca08d462bb73adfb1305b34ef2127276b2f99dfd6e4fe68de6c25587e74f2c4282d7fc47a6d3851181be8821802129130357789b6177f6c7dc721b3d949a38ea2c06eb480cea51277ade7bd6f13310a7711e0b2b5e501d059eb7b61a18f0de16d1eff2ce279ad2a2f8154bcdc538e559243ad92f7a1428b8f7b62d5eb57b6ad197abee5ec7775f6d0cd84bdaabdfca058bcebeed110a9812f3f5fcdf5c3b67f2a33e8459d7581702028335efd29ed39b35b6ebbd26b0148f3f172cd59fad70c40f6121593aa9d77e68143b386ffdb9b1f524c8de2c35b33b8dba64dc2321c5b93a2a02a9e2e94a07e9d4120529e54f329de30e39c85a62e79de1a16711b01c52840983d7bb9579434c21cc2a1d1e8ede5c6c4cabdb3e9500631f41ff9a18cd77f63fe4dba74ae6f124d1fda93a412cb35cde88a72772938c744b0bc0444840a57a8efe6a8f6f310320694e4ff1dfd566d587c8abd70bdab143d74d51fc012ecb4779b93e0e2d10f818970fa460db6504a8cbd3163a040ff45bf67857e029a9ffe7138838411d667a94ab50cb0ff727e6d940af00fd2e489c659ce818cba71d39e4ca76b332a8c4e0e596f36e414977cafcb4ac1d1c3d2da6945a37e45cc552ca2ba7682b49ca8f609271174b41d62510de79ce3d44044431b46e58425d3ab13ec0ed82399c80ba1cd8a2ecca9f31249549f5f2908cdbbf17b9bbca4351dbd59cd8d02c41812dcab1503db666464b981b55f58312b8655a7fb7ae58a14a9882fbfa087f69baf8392f7406d5ef90139beb02aa955b43496cf5232aabc410cbdcfc61dff4c579ac829b97b68de6bbbd348e6bf8c8f9eebb376586358c06476bbba06fa9e9831e8507edb7f6263f646e78e1c4e576288ef5baf7bb6e1ef7f48c1de8dca5127aeac01690b2e418f8780a3dad565fafe9af38e443edb0e9e56647e154edc588bceb4f56c27ae072da4cdc4e8f58f0f5d50450ae63989bb10b5f205f49baee83d4b8efdf26bcdf27fd1d421e760404d6e33f72838717c0d0ccc7aba7bdbcccd795b5a4715109ff480422283f3c0c7eda94443492ad11d48249050724c7d3cd4fc9e9a4dec19aeeab9de225770b52c48d53f196bd0ac97c135513b610a77c774fbebc8fe4c394f2e6c89e03497720c3e7ab9f6e33c6e9d9e2f91055cdd515045378448e5055c9362fd5a95ffe79e07019bc1fdc94207d391d9f97d70fb997efcf838f67fe84865360a925d64a170dbb55c5c1b4856b0df8f6c05832e56e20a8c11d7274e6dfc9b917583820407ac7654d3aec7d4c8bdcbda55c41b9afb83b55c93e58e03b04ac3bffdbc53caeb7dcb57160c8c5019999c8326fdb7aa89608112f04021448c6faa74011e7c52408158d05bed9c7e33b1d34360727c641058a8c3c1800a5ed1832678bdfc4ee9280fd6ccdd5c4fd40d6edf21714ab3f61240783320d3c091577440543c3937dd1207c80ea6c06164a721bd2d3086234efa2b2bbefd71e81f64f7ce0c8552c39c7ee214bb494c200c19831ed3544024f410965a2fd842c598a0c69d6a3822a35eb16cb0795e05404a50a11947a81b17efcd7490db19ae9ea8ee45e339f63eb2ff265af1b0288e9e9e7b532dff4aa41a7d145208d2510befbe4fa71e3e886d4f31de719b6040567df690a09747d2824141da259bb2ac7e76f18e44169a3611a76471bb0044eb8f99045c23a3942464680dd1d60c63990e5d0b3b890c00797dd545b6c7c7e3abdfabd0b0335199f349e05ad01ae2807ef7eef58961f352daf11657497653976eb50e4e9dac81c4df227a64380468529b8251ac0bbb760cc64f1faceba14fd58365deb6cad13f610a2e4f3c68b0eff54a35be63d065243cff04a81abf3a6889f2e49a2080d0f4cad8f00d3f684bbf8e06a383351ca977af1576c428b4e883f3641b9bf079ce0ec20a88a4efcbfe31ad07e8433c540f8bc315ca6288a4f9bd660a331a7f457617289b31afbd66fdcfed9bf17cdad7ba819a792ae8b1ff2080839c57ef2c2cdd354dcf9dca1c932ec6c2e4993b734324139492688238dfd1372784aa47c8f951d5e083a38292fdf0b8088dd20f714cb159ae2671d9198ead9b58bfb446a3bc0b187805fc9c3c37c153d9cad32e09cd4bc4c72d754df7f7566fc63f46cca7b3453c4926e68c11db0ec2f77cfcc8ce99516c7f7122ed55d1f36b7e5f17e27b45a83eacfa8de9991d7cc43025b4ba6b267555408f86808fbdb1913bd2e6b3f215b3b894bf6b78b863580e3a19fd437ba3a759b2b717e9354f3f088cea567790a3fbdaf8f9d97ce6693d1ba4c734ace364ba123b0b3255b6f793fce86d795cfa6e112cbc5949195ca3c0a8aad7f2427f671372ac7b5ece2eaf7ba91929bbfd866de68dd5da9e1f0958494068c651e09fe2ca476d7072ec7b79439824d834d38c246c6bbbafaa584fad70ac40d62353361eec8bdc2f46a2b8fdffa0d0871c707ac46aa0944240fefd6b877ffc54af72865aca3990d5453e7abdc321942038c9beba549397497ec7282d93090c34a6385aebc9df725ace4b0dccdb43be8715f114f23ce580e3e930bf3bde56f47cbc131df451a8b81adfd3a060d550600fc1857aae780f588a6fd1609aa0420023c1dc3d5409068385d5b2b23ec6ff6cef284bd118357c38e5317c1139b791941f4c02834c29f8a14809866887a902af1aa5fb77c4a42b2c694a6ece77d789472e2bdd3d6f824e1bc0f153d8971c5a9b9f7212d3506bde4bac888e366a5f09bfccacf11a3fe595935caec6d3e1ec4cb47452426a5df18c41f61562a879baf0a01d1b71379ba02f81761222fd396ad6b683e092a8ac3605271dcef409a6cddd4cc1f3f74825460529bf2b02fe1dfc0b0c4443cb9f638018092eaf51c1998496162d5bbc1ce2cdf9360fdba796f954ca8db68c7f31bcc1ba6325ed6148fe74d3c19086873dd64bdb1c02bcf2bf5cd73716b8c35fcf291cc9beb4b70c0b61b4af2b332ddb42c6733f3ccdd867d8b70a667156f0799f7290523d7a11e78db101ce7c69b7e6d53284a4ed5bc2974e14a525f0bbf1b7482b8ac6e33f31a293d55be92853c50111fd29e4aaa2f9da2c8009136c2dd21de2e118170d8739b9c73095466498d2edc67aaa2e956385cddd7572ebf406443da5161ade8f7cd98530010d8113f92145b724702c97745bdc5a3c66a35e296a15df48b86c78ca9f6ed6cde205bea8d66ff9bc2ed28075ebfda3855fd6f708cf8a553ea32bdfc7de246b475e54d15e34d3be69bafd887c0b2adb1531a96e4af0e7d0795e79a8d0681b5507a5a590a109b28e2e48add9a9c8a65f389f555aee00f15ba876e02d6d01ba6e36dcd39bc62b59aa9962adaef3e321c9ce9348df53fcec85a75a1a88ab8500857bc016ab178f5b65595202bd0bc51fb46904b055825accd902181598d69c81d32c7b99a2acdf0fbb99d432d1b302d2037935bbf8e9d94fbf8a0c727f1a845a74ccc219473e0a0f61fbf79bacd349ebe89e2002358cd4b405fbf6d303c6dfa6f7850716fb3008c789cf0ecc2698f3321cd913acabb9e4a91a6b4f9c95d1e31a4431c5bdc18a06a7756196d42d7a1e6805e3188d9530cba9b0658a7a7f09041257f29f0f93a3f9e9ca3ac446888e8eb216478412c933a0af31aff5fce3adeeb3949605e1b689bc28838098dfffbb036554bfee5c398133b26eb4236fbb98add25d1d15ec275ed55926a1ada0af486fffc85a41e927df81cacd3ab16bdc4e55b4cb4e54a9763b1009df5390802a64432c09ea364dcd3796b1082703c5289a6d0e0e394cd640dc09989324ed341855d94beeaa538252760cae28c86382e798cf1e43c82850ff26b52c0622c9394057725d117f33336047a79981f24e2515bebad7acea5c9c7bed73b9e68aa0e43ed66e1dcbacbb07d2ecf750e30485e1fb584b970778c23c0070caf696445fea4f9fac0faa5d4531eb9397e9888d88946b5723d598ab397d16781e82245a842fde04c6e187daee8305d7e1aeffe51953b35203beb313d8980bfa8957c3a1dc8d714f7a38f00b39640b209f9b713bfd11aa8f29ea2336c5ad050fe13d6e8d96b3d597965157acf40ce4f6e92a87c9cd8d687d7cdb3726af23475cb34024782839e7e77930c9fcf7c2f47722f0732dcd3960827fa833af8fd6fed6fa14df40c4ed7ee140cc46ad8e97b451dd65311a050a911a003782bb7def487ddfa74"}) (async)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001ac0)={0x1b0, 0x0, &(0x7f0000001800)=[@free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xa, 0x1, 0x24}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x18, 0xfffffffffffffff1}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x100, 0x3}, @fda={0x66646185, 0x0, 0x2, 0x2d}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/40, 0x28, 0x1, 0x6}}, &(0x7f00000004c0)={0x0, 0x18, 0x38}}, 0x400}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}, 0x400}, @request_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000600)={@flat=@weak_handle={0x77682a85, 0x1001, 0x1}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x1, 0x1, 0x10}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}, 0x40}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001740)={@flat=@binder={0x73622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/124, 0x7c, 0x2, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/4096, 0x1000, 0xb, 0x32}}, &(0x7f00000017c0)={0x0, 0x18, 0x40}}}, @request_death={0x400c630e, 0x1}, @release={0x40046306, 0x1}, @dead_binder_done], 0xd0, 0x0, &(0x7f00000019c0)="a833c18406f70568d2d42226faed9b36ec50ea4a1efa4c060bb8a47a680b5935f5bd701479736f68db48fc65392e25bbb33f00377df3494fb594f69071cc3d71c4f9b474d8fcbd84b1b6e3f3a53583324e224467f6f31c30618a061df32064b9f65d45275643ff62bf6392d111d6621fc72eb0270cfa3d3f31a60bf22df0c3c6aa2667957327c4f7727f1eb6af182af6109b55933f3bd0d5e74a65932c13da88781c503b64956b61a4e3f4475a234b05a897175208f2c09386bc7ff06e7ddfcccaaa05d691fe1f253c2fa9d556e951f1"})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110b}) (async)
getsockopt(r2, 0x83, 0x4, &(0x7f0000001b00)=""/230, &(0x7f0000001c00)=0xe6) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

2m18.971616851s ago: executing program 1 (id=296):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES8=r5, @ANYBLOB="8f8b2ff29f62377cbc0a34c1ed6673ee4910e974ec819721c326bea5c9b8a0baa9b6e1836683d80d72ee754e6d06891a4adb20b5f938b6bd0b1b9eb23e97c5de02d235f0b271b1203793da06ac0ad7fc478689eba5db8a08cb43137bc408e5d56e7c1c00b898c8826a0343ca558804a645c37dbc8721ffb6bd86b3f0872d8169bb4979fa1e854a27dfcb976c87b4553a1ba5d593969d9ec96dd223d03edd60187a0d5bb68ea8ecce228ef7793a1b6f25a6713c474dcb37383ec6c2254926537d1840b50b4b83acb207bdc03b7ddd4a10", @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20)
recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000080)=0x1, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newlink={0x68, 0x10, 0x403, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x2c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x2}, @IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}, @IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x4}]}}}, @IFLA_AF_SPEC={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000001}, 0x4008844)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r7, &(0x7f00000000c0)='syz1\x00', 0x1ff)
r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x6, 0xb, 0x3, 0xf3, 0xc0, 0x8, 0x6, 0x1, 0x5, 0x3, 0x9, 0x1, 0x1, 0x8, 0x2}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb, @void, @value}, 0x94)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000001c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

2m18.830797117s ago: executing program 1 (id=298):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040efbff0d"], 0x9)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c)
sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f000013a000/0x4000)=nil, 0x4000, 0x2800009, 0x8010, r2, 0x9fd43000)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000680)="ef559c944d91", 0x6}], 0x1, 0xa, 0x8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2m18.399998285s ago: executing program 1 (id=299):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28)

2m18.331481655s ago: executing program 1 (id=300):
gettid()
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0xa, 0x1, 0x1}, 0x1c)
r1 = accept$unix(r0, 0x0, &(0x7f0000000000))
recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000440), 0x1}}, {{&(0x7f0000000180), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/118, 0x76}], 0x1000000000000369, &(0x7f0000000340)}}], 0x2, 0x7aa4f1e4fb33098f, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = fsopen(&(0x7f0000000040)='xfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_RESET(r3, 0x80044dfe, 0x1000000000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = signalfd(0xffffffffffffffff, 0x0, 0x0)
faccessat2(r4, 0x0, 0x20, 0x600)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0)
socket$unix(0x1, 0x2, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2b, 0x1, 0x0)
syz_open_dev$cec(&(0x7f00000008c0), 0x0, 0x80)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})

2m18.276517125s ago: executing program 1 (id=301):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20) (async)
bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000500)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), r2, 0x2}}, 0x18)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) (async)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x4}}, './file0\x00'})
mmap(&(0x7f000001c000/0x2000)=nil, 0x2000, 0x200000b, 0x50, r3, 0x4000)
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) (async)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000580)={[], 0xf000}, 0x0) (async, rerun: 32)
exit(0x9) (rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fbdbdf257000000008000300", @ANYRES32=r9, @ANYBLOB="0a000600fffffff2d62d67119301210008021100000000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000000000a00060008021100000000"], 0x64}, 0x1, 0x0, 0x0, 0xb8bfca010f94fad3}, 0x44000) (async)
exit(0x1) (async)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)={0x1834, r8, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x8c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x11, 0xb, "3c69a8250c464540f8c61877a0"}, @NL80211_NAN_FUNC_SRF={0x6c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x9c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x54}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ae04b3666580"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x74, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x80}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x80}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7f}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}, @NL80211_ATTR_NAN_FUNC={0x16f8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "e8c49b6c3de9"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x10b4, 0xd, 0x0, 0x1, [{0xa1, 0x0, "1a3626efc20aa2b28b479f5fee794c26bd4111dc11f9c4538f4291bf4a39dbfe6beda66b8303b91ab7ec9fb6b097e317e84f986d33cc446d5f370b5e4f3657460d6ee38ee2f7cfa69eb82f8865121bed4cfc44d78d0e09b6f0ef20544cfa8b8e7f06237d032b2e46d5f3afc1eb919bc5e91a63d8664553a17cd034633a3e760e6a9c955977d288b7194d876a46a1287bbee4fdcc054e8dcd9b67477deb"}, {0x7, 0x0, "ff2b60"}, {0x1004, 0x0, "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"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x72}, @NL80211_NAN_FUNC_SERVICE_INFO={0xbc, 0xb, "f5bb8044b9a172870be60fa31d06ed0b5f3a2028bcd776c43f2688e974042dbb0e21d915020f405ccbb4b21cd69b4dcac4b52ecc0ac5a556495ce14b51e7a349389af20eda7c84c5d0efebda85cf6bd17349605e5c1318a8ca13ae63c8fcd2b71b35e7587ff6bae66742077890438aa7cd2224f5007910f806080f21c3536cd22eaa854964c8103db4a7d05259e2f563ea193adb1ad6c7f366cb8496a48147cfaa15a68b10862418b40ead902d77752f3fa2c4824d8f7a20"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x1d8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x13}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x81}, @NL80211_NAN_SRF_BF={0x103, 0x2, "ccffe8e9d840d95fd7b101e3f849caa9a74bc412201068e6aa11d4617e782f00816670f852ed281e7aa2979264ec47902e5977235bdbb5551dea2f9c601ef0a48057e6362f9d28d1d75b4e4d0429c1ad3a96d0179d6f78480e23b600808a5f7903780c53f30bc04ec1e956ad9e4330085499f156a67f2ebf16c289a7284b96b6cbefd7c8a343888f90d6aaf5bddd725fb7cb6386aa7dd4b19a0aae886ac763fa2a57f9920fd95891238478f9e0b90fb846c32bdce58a76a1a9a2920b559300072dc4b4c89c307ada0d546aefbf0f5a2311089ee8ef707d83fe8f53ee4a067be58a67ee8322a8da618dadd9cac81886dad55177138a4c2ac1eba60152cf3abd"}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x38c, 0xd, 0x0, 0x1, [{0x80, 0x0, "a61414e78479302a7f28e2dff18d673098071db9490566d8f06d4bd86b7455029177b066668a54368a3430127b7609dca085ed611fba8ca19c345730fccc028fcbbb45b72b282a8e598b12771722b763e98651b07b3ca78d2278f8b1b59881a4d05b86bbdab24e72ae5903da370951d1f61b2aca7ac74ea7508ccccf"}, {0x86, 0x0, "4a626c5e71235263005f45a96ef95ac907bf4ed34ca039f648cf5327db701da43dbbd49407217e25dec5268e450a95d74e8add8d348c70b74c2d1336defed12b949a98157fb09a1e0aa02f725c185893a6d82890ce7a7f15e72c6c4173aebf569647ab517e766928b4bd4389aeaee628a306ef97f7ac739ddfe48e6eea2f9f7d66d1"}, {0x4e, 0x0, "3675525a1a88594516e8d3119f4385d0cb6d499be82d0d71cc61e2237bb53b7abe93adce0100400b4b5e7798503fca2d9562e632f573c0d48647d0b17340cbf48847452b927a4431904c"}, {0x1a, 0x0, "52add32da9097c0efff417e0c8d3d6175de33f63274d"}, {0x54, 0x0, "b26df10a4f764386b451273b33127f30b2fae21736c7f05eb083d0719167da85c36ec0517de3a025e9b5f248b229621ea1b0a579cccff80d0b58fa4f2606d4702c939d374aaa0db6b46f1c4c237df48e"}, {0xb6, 0x0, "61225256db9ca0a662cc55ec932a2458082c418e192853152811d96a03057559f020be89be779707aec7845afb73edaff0433608273348be090a3aaba5d886672af69b6e387cb9f1aa8507cebfab4a558babc3232c25e3a1df1fec3a4b25298fb091b7144bedb768cbc2d5cac112f88839f273766a75e905fe04ffffa1ae6e787dfe7916f37347c8eb84a3c9b539fef3df75f6a3534309f7eb46a433a72ee1a8957a8fb31e3671aca70611d029ce3aae08ca"}, {0xa7, 0x0, "1848e9f9b619f74540daaa749830c83117d3986c91d1b56eb9d3fb478fac50d3005c23203dee96eae0d76eb39c01d7aaab9bafb4ce1ded4c07ef47f0bfc0f07cf4f6625a2c0746ebaaf9031090eb796e1e19981f5993b6b3df02edef2248e2a40128ad2fc24a054e77bc088b87388721addf2fd0283d50a5af4f39f012b09ae8b4acec8358ef02956cd5cf085d976c3dde9557941839da65f71f7623afa4177b8b1d3f"}, {0x5f, 0x0, "e474954cf395883e3b3586f714ca199fa8a597be2356be9c77bf6109801c408862b1edafb6ff1923d02ea10aef96985ae1155ce20784dda2e7455155cbf062e9482a55c751bedb9c4e0ed31ab6d2ebb4b17402c42a9b4c44e27808"}]}]}]}, 0x1834}, 0x1, 0x0, 0x0, 0x20004805}, 0xc000) (async)
openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

2m17.9010613s ago: executing program 1 (id=302):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
accept4(r0, &(0x7f0000000600)=@tipc=@id, &(0x7f0000000580)=0x80, 0x141000)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
write(r1, &(0x7f0000000180)="2cd889f0253e14f3d5ac", 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
r4 = accept4(r0, 0x0, 0x0, 0x800)
setsockopt$inet_tcp_int(r4, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYRES16=r4], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x11, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xa11, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8}]}, 0x20}}, 0x0)

2m17.85500529s ago: executing program 33 (id=302):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
accept4(r0, &(0x7f0000000600)=@tipc=@id, &(0x7f0000000580)=0x80, 0x141000)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
write(r1, &(0x7f0000000180)="2cd889f0253e14f3d5ac", 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
r4 = accept4(r0, 0x0, 0x0, 0x800)
setsockopt$inet_tcp_int(r4, 0x6, 0x11, &(0x7f0000000540)=0x8, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYRES16=r4], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x11, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xa11, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8}]}, 0x20}}, 0x0)

2m13.693997242s ago: executing program 34 (id=125):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
syz_open_procfs(r2, &(0x7f0000000080)='attr\x00')
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100))
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x18)
r4 = shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff)
shmdt(r4)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r5, &(0x7f0000000400)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04482d6ae306c90005000f00c80080000b00c80002000c00094400c80001000000c800fbff1ef9c8000100c60dfa0bfacd4980c834b050932a62158172bb308955ee8a8b554c50acd54cecb619c14206000000006b3b072c2d8814e54cbb8e174095d7fdd033d83cbc2de8cd1f23715558bb7f523b1775f6ca238172679fdba5451f5ea86a5fb97beedbc2852319505d3803254a17a7cf0c8aee2b2f9867ad78b53a29afa27859000000", @ANYRES16=r4, @ANYRESOCT=r3], 0x30)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x400003, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5202)
r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, r6, 0x0)

1m29.870866425s ago: executing program 5 (id=895):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="850000002e000000270000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x7c5c7000)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x72, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}, [], "8b1a14005c00f71244c85425"}}}}}}}, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd700f00cadf0561ef0dfe969ac87ebf8ba9f47a59254c823a36d906068744f13bfbfcd9e60000000c00a60005000000070000000f00a9007365636f6e646e616d650000de938e"], 0x30}, 0x1, 0x0, 0x0, 0x100000c5}, 0x40084)

1m29.369800684s ago: executing program 5 (id=902):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x3f13a51b, 0x10}, 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0xaf4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @generic={0x7, 0xd, 0x2, 0x9b8c, 0x573}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x40400}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)={0x0, 0x3f})

1m27.740523257s ago: executing program 5 (id=918):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7, 0xe, 0x2}, 0x14)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
write$binfmt_aout(r1, &(0x7f0000000500)={{0x107, 0x5, 0xff, 0x9b, 0x31e, 0x9, 0x1b1, 0x7}, "", ['\x00', '\x00']}, 0x220)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f7000000f4ff00", "1ab6c0e5"}, 0x28)

1m25.061113143s ago: executing program 5 (id=950):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000001dc0), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = gettid()
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x800) (async)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x800)
unshare(0x2a020400)
pselect6(0x40, &(0x7f0000000040)={0xc, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020)

1m24.614071671s ago: executing program 5 (id=957):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r0], 0x44}}, 0x0)

1m24.151065449s ago: executing program 5 (id=967):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003300)={0x2020}, 0x2039) (async)
read$FUSE(r0, &(0x7f0000003300)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2039)
mount(0x0, 0x0, 0x0, 0xa08000, 0x0) (async)
mount(0x0, 0x0, 0x0, 0xa08000, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x20000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2}, [@NDTA_THRESH1={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20050}, 0x40080)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000480))
syz_open_procfs(0x0, 0x0) (async)
r5 = syz_open_procfs(0x0, 0x0)
ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000140)={0xb8a, 0x8})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2040000)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x800) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x800)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8040, &(0x7f0000000300)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}], [{@dont_appraise}, {@subj_role={'subj_role', 0x3d, '\xbb/%'}}]}})
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r3, &(0x7f0000001fc0)={0x2, 0x0, @remote}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000034000107000000000000000003000000b906902da13bef0e234afdc78cdd6456afd8d660"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00')
ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
waitid$P_PIDFD(0x3, r9, 0x0, 0x2, 0x0) (async)
waitid$P_PIDFD(0x3, r9, 0x0, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r9, 0x404c534a, &(0x7f0000000240)={0x10001, 0x7, 0x800000})
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080), 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080), 0x4)
pipe(&(0x7f00000002c0))

1m24.100824659s ago: executing program 35 (id=967):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003300)={0x2020}, 0x2039) (async)
read$FUSE(r0, &(0x7f0000003300)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2039)
mount(0x0, 0x0, 0x0, 0xa08000, 0x0) (async)
mount(0x0, 0x0, 0x0, 0xa08000, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x20000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2}, [@NDTA_THRESH1={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20050}, 0x40080)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000480))
syz_open_procfs(0x0, 0x0) (async)
r5 = syz_open_procfs(0x0, 0x0)
ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000140)={0xb8a, 0x8})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2040000)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x800) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x800)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8040, &(0x7f0000000300)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}], [{@dont_appraise}, {@subj_role={'subj_role', 0x3d, '\xbb/%'}}]}})
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r3, &(0x7f0000001fc0)={0x2, 0x0, @remote}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000034000107000000000000000003000000b906902da13bef0e234afdc78cdd6456afd8d660"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00')
ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
waitid$P_PIDFD(0x3, r9, 0x0, 0x2, 0x0) (async)
waitid$P_PIDFD(0x3, r9, 0x0, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r9, 0x404c534a, &(0x7f0000000240)={0x10001, 0x7, 0x800000})
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080), 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080), 0x4)
pipe(&(0x7f00000002c0))

2.139869223s ago: executing program 7 (id=2138):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xd28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = gettid()
r3 = eventfd2(0x0, 0x0)
write$eventfd(r3, &(0x7f0000000140)=0xfffffffffffffff8, 0x8)
r4 = getpid()
syz_pidfd_open(r4, 0x0)
sched_setscheduler(r4, 0x0, &(0x7f0000000000)=0x1)
write$eventfd(r3, &(0x7f0000000040)=0x8, 0x8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000950a92d29229a0171d8af4e79a49a162ee9a845545c9e156508bb88e5ea0986d7e913f39c8083a6a84fd065af8b94e19ecf7cce8f34c9b18578ace4eefafd474a59a6f2a909b1ae82e261aacec0d6e5770165247f7cfe720ad86c7453a8bcd5f59b33d7c0a4c285f72fa879bc7621b5bc5f0be5453ff1c5946f06276f5dedeff012433bef16f6394e6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeaf3b4bc3e22e71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f0000000300)="d510faefffdb889a05daa90b3f47ad9e18d5bc", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00000000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000009c0)='mem_connect\x00', r5}, 0x18)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})

1.789771301s ago: executing program 6 (id=2142):
r0 = socket(0x22, 0x2, 0x2)
ioctl$IMGETCOUNT(r0, 0x80044944, &(0x7f0000000000)) (async)
recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000000180)=""/70, 0x46}, {&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000000340)=""/119, 0x77}, {&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000400)=""/77, 0x4d}], 0x8, &(0x7f0000000500)=""/153, 0x99}, 0x0)

938.834001ms ago: executing program 4 (id=2144):
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000440)=""/237, 0xed, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000440)=""/237, 0xed, 0x0, 0x0}}, 0x10)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0xffffffffffffffff, 0x3206, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xfffffffe, 0x1, 0x40000000009, 0x5, 0x6], 0x2000, 0x808d6})
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000540)={{&(0x7f0000009000/0x13000)=nil, 0x13000}, 0x1}) (async)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000540)={{&(0x7f0000009000/0x13000)=nil, 0x13000}, 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0x80, 0x2, 0x1, 0x8, 0x7, 0x47d, 0x0, 0xfffffffffffffffe, 0x40001, 0x5, 0x7f, 0x9, 0x1000000000400001, 0x10000000020001, 0x1], 0x3000, 0xc4b06})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d"], 0xb4}}, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x2c, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async)
r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980913, 0x9, '\x00', @p_u8=&(0x7f0000000040)}})
r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r9, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4fffffede", &(0x7f0000002240)=""/4103, 0xfffffffe, 0x0, 0x0, 0x0})
mlock2(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x1) (async)
mlock2(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x1)

937.870516ms ago: executing program 6 (id=2145):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x203)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000016c0)={0x53, 0xfffffffffffffffb, 0x13, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000640)="40553da7a9120d10156d18fbb6d85956db0ed8", &(0x7f0000000680)=""/4096, 0xfffffb41, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ff})

858.41892ms ago: executing program 7 (id=2146):
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x26000, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', <r1=>0x0, 0x10, 0x80, 0x6, 0x94, {{0x34, 0x4, 0x0, 0x9, 0xd0, 0x64, 0x0, 0x40, 0x6, 0x0, @private=0xa010101, @remote, {[@timestamp={0x44, 0x8, 0xd0, 0x0, 0xd, [0x0]}, @timestamp_prespec={0x44, 0x54, 0x2e, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x19}, 0xd}, {@multicast1, 0xe}, {@broadcast, 0x6}, {@loopback, 0x7}, {@multicast2, 0x7}, {@remote, 0x3}, {@multicast1, 0xb9}, {@multicast2, 0x6927}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x8}]}, @generic={0x82, 0x5, "92345a"}, @noop, @timestamp_prespec={0x44, 0x14, 0x21, 0x3, 0x4, [{@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ssrr={0x89, 0x1b, 0x9d, [@multicast1, @multicast1, @private=0xa010100, @multicast2, @local, @multicast2]}, @generic={0x44, 0xd, "ecf576014b622d20557050"}, @cipso={0x86, 0x1b, 0x0, [{0x7, 0xc, "0afb1eb6713cdabfdc5e"}, {0x6, 0x9, "f1aee7b96383f0"}]}]}}}}})
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nfsfs\x00')
lseek(r3, 0x8, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f00000024c0)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, 0x0}, 0x24040000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0600000000000000f5ff00ff01000065000000", @ANYRES32=r0, @ANYBLOB="ff00"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="00000000040000000100"/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f0000000040), 0x0}, 0x20)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r6=>0x0, 0x0})
close(r6)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vxcan0\x00'})
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={<r8=>0x0}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000000)={r8, 0x10001, 0x30}, 0xc)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r8, 0x8}, &(0x7f0000000300)=0x8)

857.308267ms ago: executing program 2 (id=2147):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async)
shutdown(r0, 0x1)

778.082725ms ago: executing program 2 (id=2148):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400142f00fc000000000000000000000000000000ff020000005865000000000000000001"], 0x0)

777.846242ms ago: executing program 6 (id=2149):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
r1 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x1, 0x105}, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$inet6(0x10, 0x3, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r4, 0x0, 0x0, 0x0, 0x40010020})
io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1)
ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000))

777.698122ms ago: executing program 7 (id=2150):
r0 = syz_open_dev$video(&(0x7f00000005c0), 0x20000000005, 0x8100)
ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000000)={0x3, "c582a91e7521959501b25f9a563ee60ddd3d0cc3eb51cf00a2df96e73d5eff39", 0x3, 0x3ff, 0x5, 0x200, 0x100, 0x2})
r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80281)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000040)=0xa, 0x7, 0x0)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000004000000070004000000000007000500ac141400140006"], 0x38}}, 0x0)
writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1)
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x20, &(0x7f00000000c0)=[{0x7, 0xb, 0x6}], 0x1, 0x100, 0x0, 0x2a, 0x20, 0x2})
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000000)={"0402e7ff", 0x200, 0x5, 0x8, 0x6, 0x6d, "8a86ccfd751b15dac5ddb6f309fe93", "2f2c30e1", "3badc77c", "f119ab00", ["5d9c74c8385cdc731c4df35e", "749e9fffef9ad43460f115b1", "1cc000", "8906e90006da7e3140431a04"]})

599.645271ms ago: executing program 4 (id=2151):
r0 = socket(0x1e, 0x2400000001, 0x80)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffe5c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="24dc6170e1e03185"}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0xc4be, {{0xa, 0x4e23, 0x8001, @remote, 0xc}}, 0x1, 0x3, [{{0xa, 0x4e23, 0x685, @private0, 0x68}}, {{0xa, 0x4e22, 0x80000000, @remote, 0x97b1}}, {{0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}]}, 0x210)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c3d6c6f63616c2c6d7404003a2c00e8ff00"/31])

596.710617ms ago: executing program 7 (id=2152):
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000500)="000000000b9e337bc10e8c7a1424089632dd26b60a2a8cab000000", 0x1b, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x41e})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000340)="f30f7e4600f4baa100b0d8eebaa10066b8af484e9966ef0f01c9f20f5a6e8e66b9800000c00f326635008000000f30baf80c66b84869198a66efbafc0cb8e42cef0f01cfbad10466ed", 0x49}], 0x1, 0x7e, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000340)="f30f7e4600f4baa100b0d8eebaa10066b8af484e9966ef0f01c9f20f5a6e8e66b9800000c00f326635008000000f30baf80c66b84869198a66efbafc0cb8e42cef0f01cfbad10466ed", 0x49}], 0x1, 0x7e, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540))
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote}, 0x0, 0x2}}, 0x50}}, 0x1000)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0xbd73}]}}]}, 0x3c}}, 0x0)
setsockopt$inet_int(r6, 0x0, 0x2f, &(0x7f0000000000)=0x9, 0x4)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000480)={[{0x8, 0x7, 0x3, 0x6, 0x1, 0x0, 0x5, 0x71, 0x5, 0x8, 0xd5, 0x80, 0x74}, {0x7f, 0x9, 0x4, 0xd, 0xe, 0x6, 0x1, 0x11, 0x7, 0x7f, 0xe4, 0x8, 0x3}, {0x4, 0x3, 0x6, 0x6, 0x9, 0x4, 0x0, 0x2, 0x8, 0x6, 0x8, 0x7f, 0x8000000000000001}], 0x8})
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
accept4(r10, 0x0, 0x0, 0x0) (async)
r11 = accept4(r10, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r11, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)=ANY=[], 0x12f4}}, 0x0)
read$alg(r11, &(0x7f0000000a00)=""/4096, 0x1000)
read$alg(r11, &(0x7f00000004c0)=""/40, 0x28)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@arm64={0x5, 0x8, 0x1, '\x00', 0x9})
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

524.816006ms ago: executing program 2 (id=2153):
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x3, 0x6, 0x4)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r4, 0x4068aea3, &(0x7f0000000240)={0xd5, 0x0, 0x3e})
write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a)
shutdown(r0, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket(0x2a, 0x2, 0x6)
bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e)
r7 = socket(0x2, 0x2, 0x1)
bind$unix(r7, &(0x7f0000000000)=@abs={0x0, 0x0, 0x20}, 0x6e)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
preadv(r8, &(0x7f00000007c0)=[{&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000300)=""/106, 0x6a}], 0x2, 0x9, 0x2081)
ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000080))
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4)
splice(r2, 0x0, r1, 0x0, 0x4ff9c, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r10 = userfaultfd(0x801)
ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000995000/0x2000)=nil, 0x800000})
socket$nl_route(0x10, 0x3, 0x0)
r11 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r11, 0x6, 0x0, 0x0, 0x0)
r12 = fsmount(r11, 0x0, 0x5)
mount_setattr(r12, &(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000200)={0x5, 0x0, 0x0, {r12}}, 0x20)

522.758413ms ago: executing program 4 (id=2154):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x40}}, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r6, 0x1, 0x1070bd2c, 0x25dfdbfd, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0xfffffffe}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x44ba99d9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r8, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x5c, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xc4d9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x41)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000000000000001c0000000c00018008000100", @ANYRES32=r9], 0x20}}, 0x0)

459.189195ms ago: executing program 6 (id=2155):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', <r0=>0x0, 0x8061, 0x7800, 0x0, 0xfffffe00, {{0xd, 0x4, 0x0, 0x2, 0x34, 0x65, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast2, {[@ssrr={0x89, 0x1f, 0x94, [@multicast1, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @loopback, @local]}]}}}}})
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad43000000000000000009"], 0x14}}, 0x4008040)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x25, 0x8, @void}, 0x10)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x400)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r3, 0x0)

338.233601ms ago: executing program 2 (id=2156):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0xa}}, 0x20)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)

338.012717ms ago: executing program 4 (id=2157):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xc94, 0x0)

278.800857ms ago: executing program 7 (id=2158):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x203)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000016c0)={0x53, 0xfffffffffffffffb, 0x13, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000640)="40553da7a9120d10156d18fbb6d85956db0ed8", &(0x7f0000000680)=""/4096, 0xfffffb41, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd})

277.744955ms ago: executing program 6 (id=2159):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0) (async)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090a000000000000000000000002001300030000002cbd700001350000030005000000000002000200ac1414030000000000000000030006000000000002"], 0x50}}, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0), 0x4) (async)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0xc01, 0x3, 0x1230, 0x10e8, 0x5002004a, 0xa, 0x10e8, 0x0, 0x1208, 0x3c8, 0x3c8, 0x1208, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'syzkaller0\x00', 'syzkaller0\x00'}, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv6=@private0, 'wg2\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1290) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a})
r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x8)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001440)=ANY=[@ANYRESDEC, @ANYRESOCT=r5, @ANYRESOCT=r0], 0x40}}, 0x800) (async)
close(r3) (async)
r7 = socket$inet6(0x10, 0x80002, 0x6)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000014c0)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x2}, {0x6fba, 0xa9, 0x0, 0x3}]}, 0x10) (async)
sendto$inet6(r7, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000001811ad8beb4693ed5cd4adf40000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56061, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xa}, {0x1c, 0xfff2}}}, 0x24}}, 0x4b880) (async)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000001514"], 0x18}}, 0x0) (async)
read$qrtrtun(r8, &(0x7f00000004c0)=""/57, 0x39)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r10, &(0x7f000000c400)={0x2020, 0x0, 0x0, <r11=>0x0}, 0x2020)
syz_fuse_handle_req(r3, &(0x7f000000a3c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009985f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4d6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa350448ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f582300", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r11}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

277.587818ms ago: executing program 2 (id=2160):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800"], 0xa8}}, 0x0)
r1 = socket$inet(0xa, 0x1, 0x0)
fcntl$setlease(r1, 0x400, 0x3)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000190001000000000000000000802000000011000500000000140009"], 0x30}}, 0x0)
mkdir(&(0x7f0000001c00)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000000f00)={0x2020}, 0x2020)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

228.759063ms ago: executing program 4 (id=2161):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xf}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1b}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, <r1=>0x0})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000007c0)={{r0}, r1, 0x6, @inherit={0x90, &(0x7f0000000300)={0x0, 0x9, 0x7fff, 0x7, {0x17, 0xfffffffffffffff8, 0x6, 0xa, 0x2800000000000000}, [0x3, 0x4, 0x200, 0xf4, 0xc090, 0x5ae, 0xffffffffffffffff, 0x5, 0x1cef]}}, @devid=r2})
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000017c0), 0x410480, 0x0)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, &(0x7f0000001800)={0x5, 0x2}, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001840), 0x4001, 0x0)
ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f0000001880))
sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, 0x3, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x408d0}, 0x40448c5)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000001ac0)=0x1, 0x4)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001b00)="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")
ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000001c00))
r5 = openat(r3, &(0x7f0000001c40)='./file0\x00', 0x82000, 0x60)
ioctl$CDROMSUBCHNL(r5, 0x530b, &(0x7f0000001c80)={0x3, 0x40, 0x3, 0x7, 0xa, 0x1, @lba=0x5, @lba=0x6})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d00), r3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002000)={r3, 0xe0, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001d80)=[0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0], 0x0, 0x58, &(0x7f0000001e00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001e40), &(0x7f0000001e80), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000001ec0)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000020c0)={'syztnl2\x00', &(0x7f0000002040)={'syztnl1\x00', <r8=>0x0, 0x4, 0x9, 0xc1, 0x8, 0x23, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x40, 0x10, 0x2, 0xfffffff4}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000002100)={'wg0\x00', <r9=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002400)={r4, 0xe0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000002180)=[0x0, 0x0], &(0x7f00000021c0)=[0x0], 0x0, 0xb9, &(0x7f0000002200)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000002240), &(0x7f0000002280), 0x8, 0x6c, 0x8, 0x8, &(0x7f00000022c0)}}, 0x10)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002440)=<r11=>0x0, &(0x7f0000002480)=0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002540)={'syztnl2\x00', &(0x7f00000024c0)={'ip6_vti0\x00', <r12=>0x0, 0x2f, 0x0, 0x10, 0x9b, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x10, 0xb59, 0x37}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002600)={'syztnl1\x00', &(0x7f0000002580)={'ip6gre0\x00', <r13=>0x0, 0x4, 0x5, 0x1, 0xb, 0x26, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x0, 0xfffffffa, 0x5}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002640)={'vxcan1\x00', <r14=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002700)={'gretap0\x00', &(0x7f0000002680)={'syztnl0\x00', <r15=>0x0, 0x1, 0x700, 0x800, 0x0, {{0xa, 0x4, 0x1, 0x1, 0x28, 0x64, 0x0, 0xf8, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1b}, {[@lsrr={0x83, 0x13, 0x3a, [@multicast1, @remote, @local, @multicast1]}, @noop]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000027c0)={r3, 0x58, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r16=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000002980)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002940)={&(0x7f0000002800)={0x140, r6, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x404c810}, 0x200000c1)
open_tree(r3, &(0x7f00000029c0)='./file0\x00', 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000002a00)={'pim6reg\x00', {0x2, 0x0, @local}})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000002cc0)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x2020}, 0xc, &(0x7f0000002c80)={&(0x7f0000002b40)={0x124, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x101}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xffffffff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xf}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9d}, @ETHTOOL_A_CHANNELS_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000082}, 0x24004010)

169.214112ms ago: executing program 7 (id=2162):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400142f00fc000000000000000000000000000000ff020000000081000000000000000001"], 0x0)

168.622008ms ago: executing program 4 (id=2163):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x240400c0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"])
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffff4, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4080)
listen(r5, 0x3)
syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001080045000028006500000f06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000edf03b8751176dba8ab1d17927d5dbfe218ba17cd90d003fd35a77f6803a514fe3aa3fa8b37733d562804ae64b11bb94c9becb881ee7446e9ad6936c1ad53f0b4753a847cc2b1ce0bd5a82f93b7e2e82098c683940177e6c73ccd16d4220e4f9525d1274f4c4dfa76512a0c62d23b9aec8f0e2d0b94230a3a9613771af4217"], 0x0)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000180)=0x8, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r7=>0x0})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r8)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00000000000000031b6e7bf5aef65a1f010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800)
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={<r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r12=>0x0})
r13 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r13, &(0x7f0000000500)='z', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r12, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
sendmmsg$inet(r6, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @loopback}}}], 0x20}}], 0x1, 0x0)

79.881175ms ago: executing program 6 (id=2164):
socket$kcm(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583c945"], 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7ff, 0x4)
clock_gettime(0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
accept4(r1, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x80000)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

0s ago: executing program 2 (id=2165):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = gettid()
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0xcc4) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x6f2ee2e31f7ae573, @tick=0x4, 0x2c, {0x30, 0x9}, 0x9, 0x1, 0x1}) (async)
futex(&(0x7f000000cffc)=0x8001, 0x4, 0x0, 0x0, 0x0, 0x10) (async)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async, rerun: 32)
modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0x20000000}, 0x10) (async, rerun: 32)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xc, 0x1b1407, 0x0, 0x7fffffff, 0x0, 0x8001, 0x800, 0x0, 0x8}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

id=10932 comm=syz.2.1401
[  152.359819][T10932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1401'.
[  152.364102][   T63] Bluetooth: hci2: Malformed LE Event: 0x0d
[  152.364733][T10932] tmpfs: Unknown parameter 'grpquota_block_hardlimitU8Ü„(–¤
Ë H#éD…ænw.‹_—µS G$õ˜¸T1·*FÏ×Ü[?Ÿ·snÅ…àt'%"XxŸXÞ7ÉÙµUÀZC‚o÷ƒ¦�'
[  152.464679][   T10] usb 12-1: new high-speed USB device number 7 using dummy_hcd
[  152.595836][ T7212] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  152.617583][ T7212] usb 9-1: device descriptor read/8, error -71
[  152.634605][   T10] usb 12-1: Using ep0 maxpacket: 8
[  152.637672][   T10] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  152.641205][   T10] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  152.646587][   T10] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  152.649779][   T10] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  152.653817][   T10] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  152.656866][   T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.855322][ T7212] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  152.863784][   T10] usb 12-1: GET_CAPABILITIES returned 0
[  152.865652][   T10] usbtmc 12-1:16.0: can't read capabilities
[  152.876740][ T7212] usb 9-1: device descriptor read/8, error -71
[  152.986181][ T7212] usb usb9-port1: unable to enumerate USB device
[  153.074908][ T5989] usb 12-1: USB disconnect, device number 7
[  153.600571][T10974] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1416' sets config #1
[  153.950305][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1421'.
[  153.953397][T10991] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1421'.
[  154.448193][T11014] xt_hashlimit: size too large, truncated to 1048576
[  154.451856][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1430'.
[  154.614770][  T837] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  154.789032][  T837] usb 7-1: config index 0 descriptor too short (expected 35577, got 27)
[  154.789215][T11022] bridge2: entered promiscuous mode
[  154.791792][  T837] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  154.796537][  T837] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92
[  154.804707][  T837] usb 7-1: config 1 has no interface number 0
[  154.806658][  T837] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  154.810076][  T837] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  154.814081][  T837] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  154.820173][  T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.827795][  T837] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found
[  154.936821][   T40] kauditd_printk_skb: 12 callbacks suppressed
[  154.936835][   T40] audit: type=1400 audit(1748598238.684:889): avc:  denied  { mount } for  pid=11027 comm="syz.4.1434" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  154.950327][T11028] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  154.972535][   T40] audit: type=1400 audit(1748598238.714:890): avc:  denied  { unmount } for  pid=6966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  155.017242][T11034] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  155.042533][T11036] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  155.347716][   T40] audit: type=1400 audit(1748598239.094:891): avc:  denied  { remount } for  pid=11052 comm="syz.4.1444" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  155.382159][T11058] netlink: 'syz.4.1445': attribute type 11 has an invalid length.
[  155.385581][T11058] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1445'.
[  155.392546][  T837] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached
[  155.768642][  T837] usb 7-1: USB disconnect, device number 16
[  155.771630][  T837] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected
[  155.972143][T11071] 9pnet_fd: Insufficient options for proto=fd
[  156.078355][T11084] ALSA: seq fatal error: cannot create timer (-22)
[  156.109647][T11090] openvswitch: netlink: IP tunnel dst address not specified
[  156.110074][T11092] openvswitch: netlink: IP tunnel dst address not specified
[  156.217029][   T40] audit: type=1400 audit(1748598239.964:892): avc:  denied  { getopt } for  pid=11100 comm="syz.6.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  156.247146][   T40] audit: type=1400 audit(1748598239.994:893): avc:  denied  { bind } for  pid=11108 comm="syz.6.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  156.256071][   T40] audit: type=1400 audit(1748598239.994:894): avc:  denied  { setattr } for  pid=11108 comm="syz.6.1461" name="/" dev="configfs" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  156.343900][T11120] CIFS: iocharset name too long
[  156.352624][T11122] fuseblk: Bad value for 'fd'
[  156.470890][T11129] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  156.475800][T11131] vivid-000: =================  START STATUS  =================
[  156.478228][T11131] vivid-000: Generate PTS: true
[  156.480250][T11131] vivid-000: Generate SCR: true
[  156.482702][T11131] tpg source WxH: 720x576 (Y'CbCr)
[  156.484331][T11131] tpg field: 4
[  156.487717][T11131] tpg crop: (0,0)/720x576
[  156.489174][T11131] tpg compose: (0,0)/720x576
[  156.490672][T11131] tpg colorspace: 1
[  156.491886][T11131] tpg transfer function: 0/0
[  156.493409][T11131] tpg Y'CbCr encoding: 0/0
[  156.494895][T11131] tpg quantization: 0/0
[  156.496220][T11131] tpg RGB range: 0/2
[  156.497468][T11131] vivid-000: ==================  END STATUS  ==================
[  156.717360][   T40] audit: type=1400 audit(1748598240.464:895): avc:  denied  { ioctl } for  pid=11145 comm="syz.2.1472" path="socket:[42612]" dev="sockfs" ino=42612 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  156.760153][   T40] audit: type=1400 audit(1748598240.504:896): avc:  denied  { shutdown } for  pid=11149 comm="syz.6.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  157.620174][   T40] audit: type=1400 audit(1748598241.364:897): avc:  denied  { ioctl } for  pid=11170 comm="syz.2.1481" path="socket:[41761]" dev="sockfs" ino=41761 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  157.660708][T11174] afs: Unknown parameter 'ÿ'
[  157.661217][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'.
[  157.731929][T11185] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1486'.
[  157.743871][   T40] audit: type=1400 audit(1748598241.484:898): avc:  denied  { write } for  pid=11176 comm="syz.2.1484" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  157.746502][T11185] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  157.753876][T11185] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  157.758719][T11185] overlayfs: missing 'lowerdir'
[  157.830203][T11189] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1487'.
[  157.836263][T11189] vlan2: entered promiscuous mode
[  157.837942][T11189] team0: entered promiscuous mode
[  157.839735][T11189] team_slave_0: entered promiscuous mode
[  157.842934][T11189] team_slave_1: entered promiscuous mode
[  157.874199][T11193] netlink: 'syz.7.1488': attribute type 2 has an invalid length.
[  157.877544][T11193] netlink: 'syz.7.1488': attribute type 1 has an invalid length.
[  157.880933][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1488'.
[  157.946843][T11198] netlink: 'syz.7.1491': attribute type 1 has an invalid length.
[  157.973712][T11198] netlink: 1041 bytes leftover after parsing attributes in process `syz.7.1491'.
[  157.984904][T11198] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  158.004494][T11198] veth3: entered promiscuous mode
[  158.008371][T11198] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  158.049652][T11204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1493'.
[  158.052477][T11204] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1493'.
[  158.056852][T11204] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1493'.
[  158.062094][T11204] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1493'.
[  158.215028][T11215] overlayfs: conflicting options: nfs_export=on,index=off
[  158.410324][T11232] program syz.6.1504 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  158.435261][   T34] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  158.436210][T11220] Process accounting resumed
[  158.606477][   T34] usb 7-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  158.609912][   T34] usb 7-1: config 1 interface 0 has no altsetting 0
[  158.617499][   T34] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  158.620343][   T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.622831][   T34] usb 7-1: Product: syz
[  158.624156][   T34] usb 7-1: Manufacturer: syz
[  158.630304][   T34] usb 7-1: SerialNumber: syz
[  158.641035][T11213] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  158.701915][T11256] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1510'.
[  158.775218][ T5989] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  158.855728][   T34] usb 7-1: USB disconnect, device number 17
[  158.870868][T11270] netlink: 'syz.7.1514': attribute type 10 has an invalid length.
[  158.894385][T11270] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  158.936125][ T5989] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  158.939792][ T5989] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  158.943201][ T5989] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  158.946408][ T5989] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  158.950354][ T5989] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  158.953135][ T5989] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.958691][ T5989] usb 11-1: config 0 descriptor??
[  159.345731][T11281] netlink: 'syz.4.1519': attribute type 15 has an invalid length.
[  159.572604][T11239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.572995][    C0] sr 2:0:0:0: [sr0] tag#18 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  159.577047][T11239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.579354][    C0] sr 2:0:0:0: [sr0] tag#18 CDB: Change Definition
[  159.584403][    C0] sr 2:0:0:0: [sr0] tag#18 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  159.587667][    C0] sr 2:0:0:0: [sr0] tag#18 CDB[10]: db 0e d8 2d
[  159.587716][ T5989] usbhid 11-1:0.0: can't add hid device: -71
[  159.591663][ T5989] usbhid 11-1:0.0: probe with driver usbhid failed with error -71
[  159.599189][ T5989] usb 11-1: USB disconnect, device number 8
[  159.666441][T11303] usb usb8: usbfs: process 11303 (syz.7.1527) did not claim interface 0 before use
[  159.669543][T11303] usb usb8: selecting invalid altsetting 63
[  159.832898][T11311] SELinux:  policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c
[  159.836820][T11311] SELinux: failed to load policy
[  159.975583][T11320] syz_tun: entered allmulticast mode
[  159.977481][T11320] syz_tun: left allmulticast mode
[  159.995177][T11320] overlayfs: missing 'lowerdir'
[  159.999622][T11320] overlayfs: conflicting lowerdir path
[  160.003764][T11322] syz_tun: entered allmulticast mode
[  160.006187][T11321] syz_tun: left allmulticast mode
[  160.058121][T11325] netlink: 'syz.7.1534': attribute type 1 has an invalid length.
[  160.078932][T11325] bond2: entered promiscuous mode
[  160.081128][T11325] bond2: entered allmulticast mode
[  160.083645][T11325] netlink: 'syz.7.1534': attribute type 1 has an invalid length.
[  160.097959][T11325] bond3: entered promiscuous mode
[  160.099678][T11325] bond3: entered allmulticast mode
[  160.102024][T11325] netlink: 'syz.7.1534': attribute type 1 has an invalid length.
[  160.113355][T11325] bond4: entered promiscuous mode
[  160.115145][T11325] bond4: entered allmulticast mode
[  160.116960][T11325] netlink: 'syz.7.1534': attribute type 1 has an invalid length.
[  160.128262][T11325] bond5: entered promiscuous mode
[  160.129896][T11325] bond5: entered allmulticast mode
[  160.131706][T11325] netlink: 'syz.7.1534': attribute type 1 has an invalid length.
[  160.148698][T11325] bond6: entered promiscuous mode
[  160.150954][T11325] bond6: entered allmulticast mode
[  160.165712][T11325] bond7: entered promiscuous mode
[  160.167890][T11325] bond7: entered allmulticast mode
[  160.185374][T11325] bond8: entered promiscuous mode
[  160.194652][T11325] bond8: entered allmulticast mode
[  160.212569][T11325] bond9: entered promiscuous mode
[  160.214248][T11325] bond9: entered allmulticast mode
[  160.235650][T11325] bond10: entered promiscuous mode
[  160.237366][T11325] bond10: entered allmulticast mode
[  160.252493][T11325] bond11: entered promiscuous mode
[  160.254152][T11325] bond11: entered allmulticast mode
[  160.273520][T11325] bond12: entered promiscuous mode
[  160.283051][T11325] bond12: entered allmulticast mode
[  160.312875][T11325] bond13: entered promiscuous mode
[  160.315057][T11325] bond13: entered allmulticast mode
[  160.332037][T11325] bond14: entered promiscuous mode
[  160.333733][T11325] bond14: entered allmulticast mode
[  160.344096][T11325] bond15: entered promiscuous mode
[  160.346187][T11325] bond15: entered allmulticast mode
[  160.357711][T11325] bond16: entered promiscuous mode
[  160.359362][T11325] bond16: entered allmulticast mode
[  160.369403][T11325] bond17: entered promiscuous mode
[  160.371053][T11325] bond17: entered allmulticast mode
[  160.388265][T11325] bond18: entered promiscuous mode
[  160.389896][T11325] bond18: entered allmulticast mode
[  160.402362][T11325] bond19: entered promiscuous mode
[  160.404037][T11325] bond19: entered allmulticast mode
[  160.414501][T11325] bond20: entered promiscuous mode
[  160.417147][T11325] bond20: entered allmulticast mode
[  160.434176][T11325] bond21: entered promiscuous mode
[  160.437520][T11325] bond21: entered allmulticast mode
[  160.444764][   T40] kauditd_printk_skb: 9 callbacks suppressed
[  160.444773][   T40] audit: type=1400 audit(1748598244.184:908): avc:  denied  { read } for  pid=11370 comm="syz.4.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  160.455999][T11325] bond22: entered promiscuous mode
[  160.457768][T11325] bond22: entered allmulticast mode
[  160.468599][T11325] bond23: entered promiscuous mode
[  160.470235][T11325] bond23: entered allmulticast mode
[  160.480295][T11325] bond24: entered promiscuous mode
[  160.481909][T11325] bond24: entered allmulticast mode
[  160.491369][T11325] bond25: entered promiscuous mode
[  160.493582][T11325] bond25: entered allmulticast mode
[  160.504013][T11325] bond26: entered promiscuous mode
[  160.505717][T11325] bond26: entered allmulticast mode
[  160.515289][T11325] bond27: entered promiscuous mode
[  160.517385][T11325] bond27: entered allmulticast mode
[  160.528018][T11325] bond28: entered promiscuous mode
[  160.529708][T11325] bond28: entered allmulticast mode
[  160.539627][T11325] bond29: entered promiscuous mode
[  160.541248][T11325] bond29: entered allmulticast mode
[  160.551899][T11325] bond30: entered promiscuous mode
[  160.553517][T11325] bond30: entered allmulticast mode
[  160.563301][T11325] bond31: entered promiscuous mode
[  160.564988][T11325] bond31: entered allmulticast mode
[  160.574758][T11325] bond32: entered promiscuous mode
[  160.576369][T11325] bond32: entered allmulticast mode
[  160.582940][    C3] sr 2:0:0:0: [sr0] tag#13 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  160.586529][    C3] sr 2:0:0:0: [sr0] tag#13 CDB: Change Definition
[  160.587398][T11325] bond33: entered promiscuous mode
[  160.588595][    C3] sr 2:0:0:0: [sr0] tag#13 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  160.590192][T11325] bond33: entered allmulticast mode
[  160.593109][    C3] sr 2:0:0:0: [sr0] tag#13 CDB[10]: db 0e d8
[  160.603196][T11325] bond34: entered promiscuous mode
[  160.605097][T11325] bond34: entered allmulticast mode
[  160.614914][T11325] bond35: entered promiscuous mode
[  160.616610][T11325] bond35: entered allmulticast mode
[  160.626303][T11325] bond36: entered promiscuous mode
[  160.628290][T11325] bond36: entered allmulticast mode
[  160.638259][T11325] bond37: entered promiscuous mode
[  160.639897][T11325] bond37: entered allmulticast mode
[  160.649893][T11325] bond38: entered promiscuous mode
[  160.651527][T11325] bond38: entered allmulticast mode
[  160.661174][T11325] bond39: entered promiscuous mode
[  160.662826][T11325] bond39: entered allmulticast mode
[  160.672696][T11325] bond40: entered promiscuous mode
[  160.674327][T11325] bond40: entered allmulticast mode
[  160.684199][T11325] bond41: entered promiscuous mode
[  160.685931][T11325] bond41: entered allmulticast mode
[  160.695354][T11325] bond42: entered promiscuous mode
[  160.697037][T11325] bond42: entered allmulticast mode
[  160.706574][T11325] bond43: entered promiscuous mode
[  160.708210][T11325] bond43: entered allmulticast mode
[  160.729414][T11325] bond44: entered promiscuous mode
[  160.731077][T11325] bond44: entered allmulticast mode
[  160.740615][T11325] bond45: entered promiscuous mode
[  160.742731][T11325] bond45: entered allmulticast mode
[  160.753235][T11325] bond46: entered promiscuous mode
[  160.755422][T11325] bond46: entered allmulticast mode
[  160.765250][T11325] bond47: entered promiscuous mode
[  160.766929][T11325] bond47: entered allmulticast mode
[  160.777828][T11325] bond48: entered promiscuous mode
[  160.779471][T11325] bond48: entered allmulticast mode
[  160.789592][T11325] bond49: entered promiscuous mode
[  160.791216][T11325] bond49: entered allmulticast mode
[  160.801322][T11325] bond50: entered promiscuous mode
[  160.802913][T11325] bond50: entered allmulticast mode
[  160.812585][T11325] bond51: entered promiscuous mode
[  160.814225][T11325] bond51: entered allmulticast mode
[  160.824463][T11325] bond52: entered promiscuous mode
[  160.826203][T11325] bond52: entered allmulticast mode
[  160.837235][T11325] bond53: entered promiscuous mode
[  160.838905][T11325] bond53: entered allmulticast mode
[  160.848931][T11325] bond54: entered promiscuous mode
[  160.850588][T11325] bond54: entered allmulticast mode
[  160.860743][T11325] bond55: entered promiscuous mode
[  160.862389][T11325] bond55: entered allmulticast mode
[  160.871986][T11325] bond56: entered promiscuous mode
[  160.873625][T11325] bond56: entered allmulticast mode
[  160.954641][ T5989] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  161.000020][T11418] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  161.104672][ T5989] usb 7-1: Using ep0 maxpacket: 16
[  161.107532][ T5989] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  161.110777][ T5989] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  161.115016][ T5989] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  161.118069][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.122415][ T5989] usb 7-1: config 0 descriptor??
[  161.130155][ T5989] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  161.352894][ T1027] usb 7-1: USB disconnect, device number 18
[  161.404908][  T838] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[  161.556574][  T838] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.560020][  T838] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  161.562838][  T838] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.567272][  T838] usb 11-1: config 0 descriptor??
[  161.775637][  T838] usbhid 11-1:0.0: can't add hid device: -71
[  161.777681][  T838] usbhid 11-1:0.0: probe with driver usbhid failed with error -71
[  161.781615][  T838] usb 11-1: USB disconnect, device number 9
[  161.842087][T11434] 8021q: VLANs not supported on xfrm0
[  161.844836][T11434] batadv0: left allmulticast mode
[  161.847471][T11434] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.850257][T11434] batadv0: entered allmulticast mode
[  161.852097][T11434] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  161.973657][T11442] usb usb8: usbfs: process 11442 (syz.2.1553) did not claim interface 0 before use
[  161.978965][T11442] usb usb8: selecting invalid altsetting 63
[  162.031863][   T40] audit: type=1400 audit(1748598245.774:909): avc:  denied  { connect } for  pid=11451 comm="syz.2.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  162.038893][   T40] audit: type=1400 audit(1748598245.784:910): avc:  denied  { write } for  pid=11451 comm="syz.2.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  162.046728][   T40] audit: type=1400 audit(1748598245.794:911): avc:  denied  { create } for  pid=11451 comm="syz.2.1557" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  162.053370][   T40] audit: type=1400 audit(1748598245.794:912): avc:  denied  { write } for  pid=11451 comm="syz.2.1557" name="file0" dev="tmpfs" ino=2017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  162.060737][   T40] audit: type=1400 audit(1748598245.794:913): avc:  denied  { open } for  pid=11451 comm="syz.2.1557" path="/373/file0" dev="tmpfs" ino=2017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  162.068630][   T40] audit: type=1400 audit(1748598245.804:914): avc:  denied  { ioctl } for  pid=11451 comm="syz.2.1557" path="socket:[44725]" dev="sockfs" ino=44725 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  162.078892][   T40] audit: type=1400 audit(1748598245.804:915): avc:  denied  { ioctl } for  pid=11451 comm="syz.2.1557" path="/373/file0" dev="tmpfs" ino=2017 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  162.122634][   T40] audit: type=1400 audit(1748598245.864:916): avc:  denied  { unlink } for  pid=5936 comm="syz-executor" name="file0" dev="tmpfs" ino=2017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  162.156672][   T40] audit: type=1400 audit(1748598245.904:917): avc:  denied  { mount } for  pid=11457 comm="syz.4.1560" name="/" dev="autofs" ino=44742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  162.224902][   T34] usb 11-1: new high-speed USB device number 10 using dummy_hcd
[  162.384979][   T34] usb 11-1: Using ep0 maxpacket: 32
[  162.406146][   T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.409597][   T34] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  162.412413][   T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.416931][   T34] usb 11-1: config 0 descriptor??
[  162.420038][   T34] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  162.425505][   T34] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  162.552241][T11471] 8021q: adding VLAN 0 to HW filter on device bond57
[  162.558579][T11471] xt_hashlimit: size too large, truncated to 1048576
[  162.616585][T11476] 8021q: adding VLAN 0 to HW filter on device bond57
[  162.619035][T11476] bond57: (slave vxcan5): The slave device specified does not support setting the MAC address
[  162.623100][T11476] bond57: (slave vxcan5): Error -95 calling set_mac_address
[  162.748412][T11480] __nla_validate_parse: 7 callbacks suppressed
[  162.748423][T11480] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1565'.
[  162.775259][T11482] xt_hashlimit: size too large, truncated to 1048576
[  162.813152][T11490] usb usb8: usbfs: process 11490 (syz.7.1568) did not claim interface 0 before use
[  162.820465][T11490] usb usb8: selecting invalid altsetting 63
[  162.837463][  T838] usb 11-1: USB disconnect, device number 10
[  162.847267][  T838] ldusb 11-1:0.0: LD USB Device #0 now disconnected
[  162.891723][    C1] sr 2:0:0:0: [sr0] tag#5 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  162.896016][    C1] sr 2:0:0:0: [sr0] tag#5 CDB: Change Definition
[  162.898760][    C1] sr 2:0:0:0: [sr0] tag#5 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  162.902575][    C1] sr 2:0:0:0: [sr0] tag#5 CDB[10]: db 0e d8
[  162.952690][T11502] syzkaller1: entered promiscuous mode
[  162.954508][T11502] syzkaller1: entered allmulticast mode
[  163.088790][T11512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1576'.
[  163.178465][T11518] xt_hashlimit: size too large, truncated to 1048576
[  163.182127][    C0] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  163.185981][    C0] sr 2:0:0:0: [sr0] tag#22 CDB: Change Definition
[  163.188018][    C0] sr 2:0:0:0: [sr0] tag#22 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  163.190887][    C0] sr 2:0:0:0: [sr0] tag#22 CDB[10]: db 0e d8
[  163.223884][T11523] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  163.255314][T11526] FAULT_INJECTION: forcing a failure.
[  163.255314][T11526] name failslab, interval 1, probability 0, space 0, times 1
[  163.259132][T11526] CPU: 0 UID: 0 PID: 11526 Comm: syz.7.1582 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  163.259147][T11526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  163.259153][T11526] Call Trace:
[  163.259157][T11526]  <TASK>
[  163.259162][T11526]  dump_stack_lvl+0x16c/0x1f0
[  163.259193][T11526]  should_fail_ex+0x512/0x640
[  163.259212][T11526]  ? fs_reclaim_acquire+0xae/0x150
[  163.259228][T11526]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  163.259242][T11526]  should_failslab+0xc2/0x120
[  163.259254][T11526]  __kmalloc_noprof+0xd2/0x510
[  163.259267][T11526]  tomoyo_realpath_from_path+0xc2/0x6e0
[  163.259283][T11526]  ? tomoyo_profile+0x47/0x60
[  163.259299][T11526]  tomoyo_path_number_perm+0x245/0x580
[  163.259311][T11526]  ? tomoyo_path_number_perm+0x237/0x580
[  163.259323][T11526]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  163.259336][T11526]  ? find_held_lock+0x2b/0x80
[  163.259378][T11526]  ? find_held_lock+0x2b/0x80
[  163.259393][T11526]  ? hook_file_ioctl_common+0x145/0x410
[  163.259412][T11526]  ? __fget_files+0x20e/0x3c0
[  163.259426][T11526]  security_file_ioctl+0x9b/0x240
[  163.259441][T11526]  __x64_sys_ioctl+0xb7/0x210
[  163.259457][T11526]  do_syscall_64+0xcd/0x4c0
[  163.259471][T11526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.259481][T11526] RIP: 0033:0x7f6f1598e969
[  163.259490][T11526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.259501][T11526] RSP: 002b:00007f6f167d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  163.259511][T11526] RAX: ffffffffffffffda RBX: 00007f6f15bb5fa0 RCX: 00007f6f1598e969
[  163.259517][T11526] RDX: 00002000000016c0 RSI: 0000000000002285 RDI: 0000000000000003
[  163.259524][T11526] RBP: 00007f6f167d0090 R08: 0000000000000000 R09: 0000000000000000
[  163.259530][T11526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.259535][T11526] R13: 0000000000000000 R14: 00007f6f15bb5fa0 R15: 00007ffcbda89378
[  163.259548][T11526]  </TASK>
[  163.259564][T11526] ERROR: Out of memory at tomoyo_realpath_from_path.
[  163.324630][    C0] sr 2:0:0:0: [sr0] tag#23 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  163.327789][    C0] sr 2:0:0:0: [sr0] tag#23 CDB: Change Definition
[  163.329777][    C0] sr 2:0:0:0: [sr0] tag#23 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  163.332644][    C0] sr 2:0:0:0: [sr0] tag#23 CDB[10]: db 0e d8
[  163.360171][T11536] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1587'.
[  163.392411][    C0] sr 2:0:0:0: [sr0] tag#24 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  163.395607][    C0] sr 2:0:0:0: [sr0] tag#24 CDB: Change Definition
[  163.397605][    C0] sr 2:0:0:0: [sr0] tag#24 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  163.400478][    C0] sr 2:0:0:0: [sr0] tag#24 CDB[10]: db 0e d8
[  163.500625][    C2] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  163.504516][    C2] sr 2:0:0:0: [sr0] tag#14 CDB: Change Definition
[  163.506533][    C2] sr 2:0:0:0: [sr0] tag#14 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  163.509446][    C2] sr 2:0:0:0: [sr0] tag#14 CDB[10]: db 0e d8
[  163.531803][T11558] FAULT_INJECTION: forcing a failure.
[  163.531803][T11558] name failslab, interval 1, probability 0, space 0, times 0
[  163.536780][T11558] CPU: 1 UID: 0 PID: 11558 Comm: syz.7.1596 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  163.536798][T11558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  163.536807][T11558] Call Trace:
[  163.536812][T11558]  <TASK>
[  163.536817][T11558]  dump_stack_lvl+0x16c/0x1f0
[  163.536844][T11558]  should_fail_ex+0x512/0x640
[  163.536865][T11558]  ? fs_reclaim_acquire+0xae/0x150
[  163.536886][T11558]  ? tomoyo_encode2+0x100/0x3e0
[  163.536905][T11558]  should_failslab+0xc2/0x120
[  163.536922][T11558]  __kmalloc_noprof+0xd2/0x510
[  163.536939][T11558]  ? d_absolute_path+0x136/0x1a0
[  163.536959][T11558]  tomoyo_encode2+0x100/0x3e0
[  163.536974][T11558]  tomoyo_encode+0x29/0x50
[  163.536987][T11558]  tomoyo_realpath_from_path+0x18f/0x6e0
[  163.537005][T11558]  tomoyo_path_number_perm+0x245/0x580
[  163.537016][T11558]  ? tomoyo_path_number_perm+0x237/0x580
[  163.537029][T11558]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  163.537042][T11558]  ? find_held_lock+0x2b/0x80
[  163.537071][T11558]  ? find_held_lock+0x2b/0x80
[  163.537090][T11558]  ? hook_file_ioctl_common+0x145/0x410
[  163.537110][T11558]  ? __fget_files+0x20e/0x3c0
[  163.537123][T11558]  security_file_ioctl+0x9b/0x240
[  163.537138][T11558]  __x64_sys_ioctl+0xb7/0x210
[  163.537155][T11558]  do_syscall_64+0xcd/0x4c0
[  163.537169][T11558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.537180][T11558] RIP: 0033:0x7f6f1598e969
[  163.537190][T11558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.537201][T11558] RSP: 002b:00007f6f167d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  163.537212][T11558] RAX: ffffffffffffffda RBX: 00007f6f15bb5fa0 RCX: 00007f6f1598e969
[  163.537219][T11558] RDX: 00002000000016c0 RSI: 0000000000002285 RDI: 0000000000000003
[  163.537225][T11558] RBP: 00007f6f167d0090 R08: 0000000000000000 R09: 0000000000000000
[  163.537231][T11558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.537238][T11558] R13: 0000000000000000 R14: 00007f6f15bb5fa0 R15: 00007ffcbda89378
[  163.537251][T11558]  </TASK>
[  163.537261][T11558] ERROR: Out of memory at tomoyo_realpath_from_path.
[  163.624678][    C0] sr 2:0:0:0: [sr0] tag#25 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  163.627918][    C0] sr 2:0:0:0: [sr0] tag#25 CDB: Change Definition
[  163.629949][    C0] sr 2:0:0:0: [sr0] tag#25 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  163.632831][    C0] sr 2:0:0:0: [sr0] tag#25 CDB[10]: db 0e d8
[  163.751052][    C2] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  163.755419][    C2] sr 2:0:0:0: [sr0] tag#15 CDB: Change Definition
[  163.758234][    C2] sr 2:0:0:0: [sr0] tag#15 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  163.762521][    C2] sr 2:0:0:0: [sr0] tag#15 CDB[10]: db 0e d8
[  163.840414][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1601'.
[  163.895891][T11575] binder: 11574:11575 ioctl c0306201 0 returned -14
[  163.910110][T11583] FAULT_INJECTION: forcing a failure.
[  163.910110][T11583] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  163.914274][T11583] CPU: 1 UID: 0 PID: 11583 Comm: syz.6.1606 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  163.914289][T11583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  163.914295][T11583] Call Trace:
[  163.914300][T11583]  <TASK>
[  163.914304][T11583]  dump_stack_lvl+0x16c/0x1f0
[  163.914319][T11583]  should_fail_ex+0x512/0x640
[  163.914336][T11583]  _copy_from_user+0x2e/0xd0
[  163.914351][T11583]  get_sg_io_hdr+0x150/0x8d0
[  163.914363][T11583]  ? do_raw_write_lock+0x11c/0x3a0
[  163.914379][T11583]  ? find_held_lock+0x2b/0x80
[  163.914395][T11583]  ? __pfx_get_sg_io_hdr+0x10/0x10
[  163.914407][T11583]  ? _raw_write_unlock_irqrestore+0x3b/0x80
[  163.914420][T11583]  ? sg_add_request+0x2c4/0x380
[  163.914432][T11583]  sg_new_write.isra.0+0x159/0xab0
[  163.914444][T11583]  ? __pfx_sg_new_write.isra.0+0x10/0x10
[  163.914464][T11583]  ? do_vfs_ioctl+0x523/0x1a60
[  163.914482][T11583]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  163.914507][T11583]  sg_ioctl+0x189c/0x2880
[  163.914525][T11583]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  163.914564][T11583]  ? __pfx_sg_ioctl+0x10/0x10
[  163.914582][T11583]  ? hook_file_ioctl_common+0x145/0x410
[  163.914632][T11583]  ? selinux_file_ioctl+0x180/0x270
[  163.914647][T11583]  ? selinux_file_ioctl+0xb4/0x270
[  163.914661][T11583]  ? __pfx_sg_ioctl+0x10/0x10
[  163.914671][T11583]  __x64_sys_ioctl+0x18e/0x210
[  163.914686][T11583]  do_syscall_64+0xcd/0x4c0
[  163.914700][T11583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.914710][T11583] RIP: 0033:0x7efd13b8e969
[  163.914719][T11583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.914729][T11583] RSP: 002b:00007efd14a62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  163.914740][T11583] RAX: ffffffffffffffda RBX: 00007efd13db5fa0 RCX: 00007efd13b8e969
[  163.914746][T11583] RDX: 00002000000016c0 RSI: 0000000000002285 RDI: 0000000000000003
[  163.914752][T11583] RBP: 00007efd14a62090 R08: 0000000000000000 R09: 0000000000000000
[  163.914758][T11583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.914764][T11583] R13: 0000000000000000 R14: 00007efd13db5fa0 R15: 00007ffd2c688b48
[  163.914776][T11583]  </TASK>
[  164.021985][T11585] tmpfs: Cannot change global quota limit on remount
[  164.195547][T11602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1612'.
[  164.343205][T11611] fuse: Unknown parameter '0x0000000000000006'
[  164.613554][    C3] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  164.616721][    C3] sr 2:0:0:0: [sr0] tag#14 CDB: Change Definition
[  164.618700][    C3] sr 2:0:0:0: [sr0] tag#14 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  164.621522][    C3] sr 2:0:0:0: [sr0] tag#14 CDB[10]: db 0e d8
[  164.899549][   T63] Bluetooth: hci0: Malformed Event: 0x02
[  164.956810][T11644] vivid-000: =================  START STATUS  =================
[  164.959278][T11644] vivid-000: Test Pattern: 100% Color Squares
[  164.965148][T11644] vivid-000: Fill Percentage of Frame: 1
[  164.967881][T11644] vivid-000: Horizontal Movement: No Movement
[  164.971655][T11644] vivid-000: Vertical Movement: No Movement
[  164.973548][T11644] vivid-000: OSD Text Mode: Counters Only
[  164.976461][T11644] vivid-000: Show Border: false
[  164.979703][T11644] vivid-000: Show Square: false
[  164.981934][T11644] vivid-000: Sensor Flipped Horizontally: false
[  164.984472][T11644] vivid-000: Sensor Flipped Vertically: false
[  164.987144][T11644] vivid-000: Insert SAV Code in Image: false
[  164.989565][T11644] vivid-000: Insert EAV Code in Image: false
[  164.991663][T11644] vivid-000: Insert Video Guard Band: false
[  164.993894][T11644] vivid-000: Reduced Framerate: false
[  164.996226][T11644] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  165.000016][T11644] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  165.002545][T11644] vivid-000: Enable Capture Cropping: true
[  165.004378][T11644] vivid-000: Enable Capture Composing: true
[  165.006932][T11644] vivid-000: Enable Capture Scaler: true
[  165.008711][T11644] vivid-000: Timestamp Source: End of Frame
[  165.010679][T11644] vivid-000: Colorspace: SMPTE 170M
[  165.012379][T11644] vivid-000: Transfer Function: Default
[  165.014207][T11644] vivid-000: Y'CbCr Encoding: Default
[  165.016317][T11644] vivid-000: HSV Encoding: Hue 0-179
[  165.018194][T11644] vivid-000: Quantization: Default
[  165.019872][T11644] vivid-000: Apply Alpha To Red Only: false
[  165.021810][T11644] vivid-000: Standard Aspect Ratio: 4x3
[  165.023627][T11644] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  165.026541][T11644] vivid-000: DV Timings: 640x480p59 inactive
[  165.028955][T11644] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  165.032033][T11644] vivid-000: Maximum EDID Blocks: 2
[  165.034195][T11644] vivid-000: Limited RGB Range (16-235): false
[  165.037165][T11644] vivid-000: Rx RGB Quantization Range: Automatic
[  165.039791][T11644] vivid-000: Power Present: 0x00000001
[  165.042045][T11644] tpg source WxH: 720x576 (Y'CbCr)
[  165.044060][T11644] tpg field: 4
[  165.045380][T11644] tpg crop: (0,0)/720x576
[  165.046919][T11644] tpg compose: (0,0)/720x576
[  165.048405][T11644] tpg colorspace: 1
[  165.049630][T11644] tpg transfer function: 0/0
[  165.051991][T11644] tpg Y'CbCr encoding: 0/0
[  165.053549][T11644] tpg quantization: 0/0
[  165.054996][T11644] tpg RGB range: 0/2
[  165.056251][T11644] vivid-000: ==================  END STATUS  ==================
[  165.112733][    C1] sr 2:0:0:0: [sr0] tag#6 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  165.116007][    C1] sr 2:0:0:0: [sr0] tag#6 CDB: Change Definition
[  165.118011][    C1] sr 2:0:0:0: [sr0] tag#6 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  165.120908][    C1] sr 2:0:0:0: [sr0] tag#6 CDB[10]: db 0e d8
[  165.122893][T11651] FAULT_INJECTION: forcing a failure.
[  165.122893][T11651] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.129485][T11651] CPU: 0 UID: 0 PID: 11651 Comm: syz.6.1629 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  165.129500][T11651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  165.129506][T11651] Call Trace:
[  165.129509][T11651]  <TASK>
[  165.129513][T11651]  dump_stack_lvl+0x16c/0x1f0
[  165.129530][T11651]  should_fail_ex+0x512/0x640
[  165.129546][T11651]  _copy_to_user+0x32/0xd0
[  165.129561][T11651]  simple_read_from_buffer+0xcb/0x170
[  165.129579][T11651]  proc_fail_nth_read+0x197/0x270
[  165.129597][T11651]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  165.129614][T11651]  ? rw_verify_area+0xcf/0x680
[  165.129628][T11651]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  165.129657][T11651]  vfs_read+0x1e4/0xc60
[  165.129675][T11651]  ? __pfx___mutex_lock+0x10/0x10
[  165.129687][T11651]  ? __pfx_vfs_read+0x10/0x10
[  165.129706][T11651]  ? __fget_files+0x20e/0x3c0
[  165.129720][T11651]  ksys_read+0x12a/0x250
[  165.129735][T11651]  ? __pfx_ksys_read+0x10/0x10
[  165.129754][T11651]  do_syscall_64+0xcd/0x4c0
[  165.129768][T11651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.129779][T11651] RIP: 0033:0x7efd13b8d37c
[  165.129787][T11651] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  165.129797][T11651] RSP: 002b:00007efd14a62030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  165.129807][T11651] RAX: ffffffffffffffda RBX: 00007efd13db5fa0 RCX: 00007efd13b8d37c
[  165.129813][T11651] RDX: 000000000000000f RSI: 00007efd14a620a0 RDI: 0000000000000004
[  165.129819][T11651] RBP: 00007efd14a62090 R08: 0000000000000000 R09: 0000000000000000
[  165.129825][T11651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.129831][T11651] R13: 0000000000000000 R14: 00007efd13db5fa0 R15: 00007ffd2c688b48
[  165.129843][T11651]  </TASK>
[  165.358318][T11662] usb usb8: usbfs: process 11662 (syz.2.1633) did not claim interface 0 before use
[  165.362527][T11662] usb usb8: selecting invalid altsetting 63
[  165.438639][T11667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1635'.
[  165.456992][  T838] usb 11-1: new high-speed USB device number 11 using dummy_hcd
[  165.484324][   T40] kauditd_printk_skb: 9 callbacks suppressed
[  165.484334][   T40] audit: type=1400 audit(1748598249.224:927): avc:  denied  { lock } for  pid=11668 comm="syz.2.1636" path="socket:[46556]" dev="sockfs" ino=46556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  165.568757][T11672] netlink: 344 bytes leftover after parsing attributes in process `syz.2.1637'.
[  165.614681][  T838] usb 11-1: Using ep0 maxpacket: 16
[  165.617923][  T838] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  165.623041][  T838] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  165.626161][  T838] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.628944][  T838] usb 11-1: Product: syz
[  165.630318][  T838] usb 11-1: Manufacturer: syz
[  165.631935][  T838] usb 11-1: SerialNumber: syz
[  165.635160][  T838] usb 11-1: config 0 descriptor??
[  165.638637][  T838] hub 11-1:0.0: bad descriptor, ignoring hub
[  165.641311][  T838] hub 11-1:0.0: probe with driver hub failed with error -5
[  165.645558][  T838] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input12
[  165.713424][T11676] validate_nla: 53 callbacks suppressed
[  165.713440][T11676] netlink: 'syz.2.1638': attribute type 5 has an invalid length.
[  165.766961][T11684] @: renamed from vlan0 (while UP)
[  165.771725][   T40] audit: type=1400 audit(1748598249.514:928): avc:  denied  { map } for  pid=11683 comm="syz.2.1640" path="/proc/1111/task/1111/syscall" dev="proc" ino=44907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  165.781214][   T40] audit: type=1400 audit(1748598249.514:929): avc:  denied  { execute } for  pid=11683 comm="syz.2.1640" path="/proc/1111/task/1111/syscall" dev="proc" ino=44907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  165.794431][T11686] openvswitch: netlink: Key type 179 is out of range max 32
[  165.841120][   T40] audit: type=1400 audit(1748598249.584:930): avc:  denied  { accept } for  pid=11652 comm="syz.6.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  165.849089][T11653] Bluetooth: hci0: load_link_keys: too big key_count value 48384
[  166.318114][T11696] usb usb8: usbfs: process 11696 (syz.7.1643) did not claim interface 0 before use
[  166.321218][T11696] usb usb8: selecting invalid altsetting 63
[  166.352134][T11698] netlink: 'syz.7.1644': attribute type 3 has an invalid length.
[  166.646016][    C3] sr 2:0:0:0: [sr0] tag#16 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  166.649220][    C3] sr 2:0:0:0: [sr0] tag#16 CDB: Change Definition
[  166.651834][    C3] sr 2:0:0:0: [sr0] tag#16 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  166.655654][    C3] sr 2:0:0:0: [sr0] tag#16 CDB[10]: db 0e d8
[  166.999551][T11714] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1650'.
[  167.044515][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1651'.
[  167.328964][    C2] sr 2:0:0:0: [sr0] tag#29 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  167.333076][    C2] sr 2:0:0:0: [sr0] tag#29 CDB: Change Definition
[  167.336016][    C2] sr 2:0:0:0: [sr0] tag#29 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  167.339953][    C2] sr 2:0:0:0: [sr0] tag#29 CDB[10]: db 0e d8
[  167.376022][   T40] audit: type=1400 audit(1748598251.124:931): avc:  denied  { bind } for  pid=11744 comm="syz.2.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  167.390331][T11745] netlink: 'syz.2.1659': attribute type 1 has an invalid length.
[  167.393454][T11745] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1659'.
[  167.402125][T11746] netlink: 'syz.2.1659': attribute type 1 has an invalid length.
[  167.421986][   T40] audit: type=1400 audit(1748598251.164:932): avc:  denied  { unmount } for  pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  167.478520][T11751] xt_hashlimit: size too large, truncated to 1048576
[  167.710035][    C2] sr 2:0:0:0: [sr0] tag#1 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  167.713330][    C2] sr 2:0:0:0: [sr0] tag#1 CDB: Pre-fetch(16) 90 a6 14 b8 5e 96 bc 59 55 c7 c4 37
[  167.788350][    C2] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  167.792164][    C2] sr 2:0:0:0: [sr0] tag#2 CDB: Change Definition
[  167.794494][    C2] sr 2:0:0:0: [sr0] tag#2 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  167.798600][    C2] sr 2:0:0:0: [sr0] tag#2 CDB[10]: db 0e d8
[  167.833849][   T40] audit: type=1400 audit(1748598251.574:933): avc:  denied  { write } for  pid=11770 comm="syz.4.1668" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  167.883050][T11773] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  167.928849][T11775] __nla_validate_parse: 2 callbacks suppressed
[  167.928865][T11775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1670'.
[  168.015363][T11780] xt_hashlimit: size too large, truncated to 1048576
[  168.090762][T11784] vlan3: entered promiscuous mode
[  168.092921][T11784] veth1_virt_wifi: entered promiscuous mode
[  168.168567][T11787] usb usb8: usbfs: process 11787 (syz.4.1674) did not claim interface 0 before use
[  168.172669][T11787] usb usb8: selecting invalid altsetting 63
[  168.176351][T11789] FAULT_INJECTION: forcing a failure.
[  168.176351][T11789] name failslab, interval 1, probability 0, space 0, times 0
[  168.180197][T11789] CPU: 0 UID: 0 PID: 11789 Comm: syz.7.1675 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  168.180212][T11789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  168.180218][T11789] Call Trace:
[  168.180222][T11789]  <TASK>
[  168.180227][T11789]  dump_stack_lvl+0x16c/0x1f0
[  168.180243][T11789]  should_fail_ex+0x512/0x640
[  168.180257][T11789]  ? fs_reclaim_acquire+0xae/0x150
[  168.180273][T11789]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  168.180300][T11789]  should_failslab+0xc2/0x120
[  168.180312][T11789]  __kmalloc_noprof+0xd2/0x510
[  168.180325][T11789]  tomoyo_realpath_from_path+0xc2/0x6e0
[  168.180341][T11789]  ? tomoyo_profile+0x47/0x60
[  168.180358][T11789]  tomoyo_path_number_perm+0x245/0x580
[  168.180369][T11789]  ? tomoyo_path_number_perm+0x237/0x580
[  168.180382][T11789]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  168.180395][T11789]  ? find_held_lock+0x2b/0x80
[  168.180424][T11789]  ? find_held_lock+0x2b/0x80
[  168.180439][T11789]  ? hook_file_ioctl_common+0x145/0x410
[  168.180458][T11789]  ? __fget_files+0x20e/0x3c0
[  168.180471][T11789]  security_file_ioctl+0x9b/0x240
[  168.180486][T11789]  __x64_sys_ioctl+0xb7/0x210
[  168.180502][T11789]  do_syscall_64+0xcd/0x4c0
[  168.180516][T11789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.180527][T11789] RIP: 0033:0x7f6f1598e969
[  168.180536][T11789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.180546][T11789] RSP: 002b:00007f6f167d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  168.180556][T11789] RAX: ffffffffffffffda RBX: 00007f6f15bb5fa0 RCX: 00007f6f1598e969
[  168.180563][T11789] RDX: 0000200000000180 RSI: 0000000080085504 RDI: 0000000000000003
[  168.180569][T11789] RBP: 00007f6f167d0090 R08: 0000000000000000 R09: 0000000000000000
[  168.180575][T11789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.180581][T11789] R13: 0000000000000000 R14: 00007f6f15bb5fa0 R15: 00007ffcbda89378
[  168.180594][T11789]  </TASK>
[  168.180626][T11789] ERROR: Out of memory at tomoyo_realpath_from_path.
[  168.255050][T11789] usb usb8: usbfs: process 11789 (syz.7.1675) did not claim interface 0 before use
[  168.259028][T11789] usb usb8: selecting invalid altsetting 63
[  168.283055][T11795] usb usb8: usbfs: process 11795 (syz.6.1677) did not claim interface 9 before use
[  168.284615][   T40] audit: type=1400 audit(1748598252.024:934): avc:  denied  { bind } for  pid=11794 comm="syz.6.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  168.319458][    C0] sr 2:0:0:0: [sr0] tag#31 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  168.319579][T11802] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1680'.
[  168.322814][    C0] sr 2:0:0:0: [sr0] tag#31 CDB: Change Definition
[  168.328739][    C0] sr 2:0:0:0: [sr0] tag#31 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  168.331766][    C0] sr 2:0:0:0: [sr0] tag#31 CDB[10]: db 0e d8
[  168.376197][ T5989] usb 11-1: USB disconnect, device number 11
[  168.493774][T11822] xt_hashlimit: size too large, truncated to 1048576
[  168.510693][T11815] FAULT_INJECTION: forcing a failure.
[  168.510693][T11815] name fail_futex, interval 1, probability 0, space 0, times 1
[  168.514671][T11815] CPU: 1 UID: 0 PID: 11815 Comm: syz.4.1681 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  168.514685][T11815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  168.514691][T11815] Call Trace:
[  168.514695][T11815]  <TASK>
[  168.514699][T11815]  dump_stack_lvl+0x16c/0x1f0
[  168.514716][T11815]  should_fail_ex+0x512/0x640
[  168.514732][T11815]  get_futex_key+0x1d0/0x1540
[  168.514746][T11815]  ? __pfx_get_futex_key+0x10/0x10
[  168.514758][T11815]  ? __mutex_trylock_common+0xe9/0x250
[  168.514774][T11815]  futex_wake+0xea/0x530
[  168.514792][T11815]  ? __pfx_futex_wake+0x10/0x10
[  168.514804][T11815]  ? __lock_acquire+0xb8a/0x1c90
[  168.514822][T11815]  do_futex+0x1e3/0x350
[  168.514834][T11815]  ? __pfx_do_futex+0x10/0x10
[  168.514845][T11815]  ? __might_fault+0xe3/0x190
[  168.514858][T11815]  mm_release+0x24e/0x300
[  168.514876][T11815]  do_exit+0x901/0x2c70
[  168.514887][T11815]  ? __asan_memset+0x23/0x50
[  168.514904][T11815]  ? __pfx_do_exit+0x10/0x10
[  168.514915][T11815]  ? do_raw_spin_lock+0x12c/0x2b0
[  168.514929][T11815]  ? find_held_lock+0x2b/0x80
[  168.514960][T11815]  do_group_exit+0xd3/0x2a0
[  168.514973][T11815]  get_signal+0x2673/0x26d0
[  168.514988][T11815]  ? __pfx_get_signal+0x10/0x10
[  168.514997][T11815]  ? find_held_lock+0x2b/0x80
[  168.515015][T11815]  arch_do_signal_or_restart+0x8f/0x7d0
[  168.515036][T11815]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  168.515055][T11815]  ? ksys_read+0x1ac/0x250
[  168.515070][T11815]  ? __pfx_ksys_read+0x10/0x10
[  168.515088][T11815]  exit_to_user_mode_loop+0x84/0x110
[  168.515104][T11815]  do_syscall_64+0x3f6/0x4c0
[  168.515117][T11815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.515128][T11815] RIP: 0033:0x7fe3e9d8d37c
[  168.515137][T11815] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  168.515147][T11815] RSP: 002b:00007fe3e7bb3fb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  168.515157][T11815] RAX: fffffffffffffe00 RBX: 0000200000008280 RCX: 00007fe3e9d8d37c
[  168.515164][T11815] RDX: 0000000000002000 RSI: 0000200000008280 RDI: 0000000000000004
[  168.515170][T11815] RBP: 00007fe3e7bb4090 R08: 0000000000000000 R09: 0000000000000000
[  168.515176][T11815] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000004
[  168.515182][T11815] R13: 0000200000000b80 R14: 00007fe3e9fb6160 R15: 00007ffe083cb548
[  168.515195][T11815]  </TASK>
[  168.530866][T11826] usb usb8: usbfs: process 11826 (syz.6.1687) did not claim interface 0 before use
[  168.610043][T11826] usb usb8: selecting invalid altsetting 63
[  168.623059][T11830] FAULT_INJECTION: forcing a failure.
[  168.623059][T11830] name failslab, interval 1, probability 0, space 0, times 0
[  168.632094][T11830] CPU: 0 UID: 0 PID: 11830 Comm: syz.2.1689 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  168.632121][T11830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  168.632136][T11830] Call Trace:
[  168.632143][T11830]  <TASK>
[  168.632149][T11830]  dump_stack_lvl+0x16c/0x1f0
[  168.632176][T11830]  should_fail_ex+0x512/0x640
[  168.632198][T11830]  ? fs_reclaim_acquire+0xae/0x150
[  168.632223][T11830]  ? tomoyo_encode2+0x100/0x3e0
[  168.632245][T11830]  should_failslab+0xc2/0x120
[  168.632265][T11830]  __kmalloc_noprof+0xd2/0x510
[  168.632282][T11830]  ? d_absolute_path+0x136/0x1a0
[  168.632310][T11830]  tomoyo_encode2+0x100/0x3e0
[  168.632336][T11830]  tomoyo_encode+0x29/0x50
[  168.632358][T11830]  tomoyo_realpath_from_path+0x18f/0x6e0
[  168.632389][T11830]  tomoyo_path_number_perm+0x245/0x580
[  168.632408][T11830]  ? tomoyo_path_number_perm+0x237/0x580
[  168.632430][T11830]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  168.632452][T11830]  ? find_held_lock+0x2b/0x80
[  168.632502][T11830]  ? find_held_lock+0x2b/0x80
[  168.632528][T11830]  ? hook_file_ioctl_common+0x145/0x410
[  168.632562][T11830]  ? __fget_files+0x20e/0x3c0
[  168.632584][T11830]  security_file_ioctl+0x9b/0x240
[  168.632609][T11830]  __x64_sys_ioctl+0xb7/0x210
[  168.632636][T11830]  do_syscall_64+0xcd/0x4c0
[  168.632660][T11830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.632678][T11830] RIP: 0033:0x7f52d878e969
[  168.632693][T11830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.632710][T11830] RSP: 002b:00007f52d9593038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  168.632727][T11830] RAX: ffffffffffffffda RBX: 00007f52d89b5fa0 RCX: 00007f52d878e969
[  168.632738][T11830] RDX: 0000200000000180 RSI: 0000000080085504 RDI: 0000000000000003
[  168.632749][T11830] RBP: 00007f52d9593090 R08: 0000000000000000 R09: 0000000000000000
[  168.632760][T11830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.632775][T11830] R13: 0000000000000000 R14: 00007f52d89b5fa0 R15: 00007ffe7185d728
[  168.632819][T11830]  </TASK>
[  168.632914][T11830] ERROR: Out of memory at tomoyo_realpath_from_path.
[  168.678150][T11834] usb usb8: usbfs: process 11834 (syz.6.1690) did not claim interface 0 before use
[  168.715893][T11834] usb usb8: selecting invalid altsetting 63
[  168.717849][T11830] usb usb8: usbfs: process 11830 (syz.2.1689) did not claim interface 0 before use
[  168.733269][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'.
[  168.743845][T11837] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1692'.
[  168.848352][T11853] xt_hashlimit: size too large, truncated to 1048576
[  168.954159][T11860] usb usb8: usbfs: process 11860 (syz.6.1699) did not claim interface 0 before use
[  168.957563][T11860] usb usb8: selecting invalid altsetting 63
[  169.060321][T11863] kvm: pic: non byte write
[  169.237305][T11867] FAULT_INJECTION: forcing a failure.
[  169.237305][T11867] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  169.241397][T11867] CPU: 0 UID: 0 PID: 11867 Comm: syz.7.1701 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  169.241412][T11867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  169.241418][T11867] Call Trace:
[  169.241422][T11867]  <TASK>
[  169.241426][T11867]  dump_stack_lvl+0x16c/0x1f0
[  169.241442][T11867]  should_fail_ex+0x512/0x640
[  169.241459][T11867]  _copy_from_user+0x2e/0xd0
[  169.241474][T11867]  usbdev_ioctl+0x1d9f/0x4070
[  169.241492][T11867]  ? __pfx_usbdev_ioctl+0x10/0x10
[  169.241507][T11867]  ? do_vfs_ioctl+0x523/0x1a60
[  169.241523][T11867]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  169.241540][T11867]  ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540
[  169.241555][T11867]  ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540
[  169.241570][T11867]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  169.241588][T11867]  ? hook_file_ioctl_common+0x145/0x410
[  169.241608][T11867]  ? selinux_file_ioctl+0x180/0x270
[  169.241620][T11867]  ? selinux_file_ioctl+0xb4/0x270
[  169.241634][T11867]  ? __pfx_usbdev_ioctl+0x10/0x10
[  169.241650][T11867]  __x64_sys_ioctl+0x18e/0x210
[  169.241666][T11867]  do_syscall_64+0xcd/0x4c0
[  169.241679][T11867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.241690][T11867] RIP: 0033:0x7f6f1598e969
[  169.241699][T11867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.241709][T11867] RSP: 002b:00007f6f167d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  169.241720][T11867] RAX: ffffffffffffffda RBX: 00007f6f15bb5fa0 RCX: 00007f6f1598e969
[  169.241726][T11867] RDX: 0000200000000180 RSI: 0000000080085504 RDI: 0000000000000003
[  169.241732][T11867] RBP: 00007f6f167d0090 R08: 0000000000000000 R09: 0000000000000000
[  169.241738][T11867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.241744][T11867] R13: 0000000000000000 R14: 00007f6f15bb5fa0 R15: 00007ffcbda89378
[  169.241757][T11867]  </TASK>
[  169.427023][T11873] netlink: 'syz.7.1704': attribute type 1 has an invalid length.
[  169.440794][T11873] 8021q: adding VLAN 0 to HW filter on device bond58
[  169.455888][T11873] 8021q: adding VLAN 0 to HW filter on device bond58
[  169.458102][T11873] bond58: (slave wireguard0): The slave device specified does not support setting the MAC address
[  169.461614][T11873] bond58: (slave wireguard0): Error -95 calling set_mac_address
[  169.503812][T11878] bond58: (slave dummy0): making interface the new active one
[  169.506599][T11878] bond58: (slave dummy0): Enslaving as an active interface with an up link
[  169.510342][   T40] audit: type=1400 audit(1748598253.254:935): avc:  denied  { create } for  pid=11872 comm="syz.7.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  169.541284][T11880] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  169.543772][T11880] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  169.547817][T11880] vhci_hcd vhci_hcd.0: Device attached
[  169.564155][T11880] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5)
[  169.566232][T11880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  169.569145][T11880] vhci_hcd vhci_hcd.0: Device attached
[  169.572207][T11880] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7)
[  169.574271][T11880] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  169.578552][T11880] vhci_hcd vhci_hcd.0: Device attached
[  169.603562][    C0] sr 2:0:0:0: [sr0] tag#3 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  169.606792][    C0] sr 2:0:0:0: [sr0] tag#3 CDB: Change Definition
[  169.608903][    C0] sr 2:0:0:0: [sr0] tag#3 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  169.611788][    C0] sr 2:0:0:0: [sr0] tag#3 CDB[10]: db 0e d8
[  169.627982][T11885] vhci_hcd: connection closed
[  169.628463][   T88] vhci_hcd: stop threads
[  169.628564][T11883] vhci_hcd: connection closed
[  169.631230][   T88] vhci_hcd: release socket
[  169.631352][T11888] xt_hashlimit: size too large, truncated to 1048576
[  169.632016][T11881] vhci_hcd: connection closed
[  169.633282][   T88] vhci_hcd: disconnect device
[  169.642352][   T88] vhci_hcd: stop threads
[  169.644125][   T88] vhci_hcd: release socket
[  169.648768][   T88] vhci_hcd: disconnect device
[  169.650962][   T88] vhci_hcd: stop threads
[  169.652652][   T88] vhci_hcd: release socket
[  169.654378][   T88] vhci_hcd: disconnect device
[  169.923967][T11902] usb usb8: usbfs: process 11902 (syz.6.1711) did not claim interface 0 before use
[  169.928911][T11902] FAULT_INJECTION: forcing a failure.
[  169.928911][T11902] name failslab, interval 1, probability 0, space 0, times 0
[  169.933070][T11902] CPU: 2 UID: 0 PID: 11902 Comm: syz.6.1711 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  169.933085][T11902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  169.933091][T11902] Call Trace:
[  169.933095][T11902]  <TASK>
[  169.933100][T11902]  dump_stack_lvl+0x16c/0x1f0
[  169.933116][T11902]  should_fail_ex+0x512/0x640
[  169.933130][T11902]  ? __kmalloc_node_track_caller_noprof+0xc3/0x510
[  169.933144][T11902]  should_failslab+0xc2/0x120
[  169.933156][T11902]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[  169.933168][T11902]  ? __irq_work_queue_local+0xdb/0x450
[  169.933178][T11902]  ? kstrdup_const+0x63/0x80
[  169.933191][T11902]  kstrdup+0x53/0x100
[  169.933203][T11902]  kstrdup_const+0x63/0x80
[  169.933214][T11902]  __kernfs_new_node+0x9b/0x8e0
[  169.933228][T11902]  ? __pfx___kernfs_new_node+0x10/0x10
[  169.933243][T11902]  ? find_held_lock+0x2b/0x80
[  169.933259][T11902]  ? kernfs_root+0xee/0x2a0
[  169.933273][T11902]  kernfs_new_node+0x13c/0x1e0
[  169.933289][T11902]  kernfs_create_link+0xcc/0x240
[  169.933306][T11902]  sysfs_do_create_link_sd+0x90/0x140
[  169.933319][T11902]  sysfs_create_link+0x61/0xc0
[  169.933330][T11902]  driver_sysfs_add+0x91/0x2d0
[  169.933343][T11902]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  169.933355][T11902]  device_bind_driver+0x16/0x70
[  169.933368][T11902]  usb_driver_claim_interface+0x228/0x400
[  169.933384][T11902]  claimintf+0x181/0x240
[  169.933398][T11902]  checkintf+0x161/0x1d0
[  169.933412][T11902]  usbdev_ioctl+0x1dc9/0x4070
[  169.933430][T11902]  ? __pfx_usbdev_ioctl+0x10/0x10
[  169.933445][T11902]  ? do_vfs_ioctl+0x523/0x1a60
[  169.933459][T11902]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  169.933477][T11902]  ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540
[  169.933492][T11902]  ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540
[  169.933506][T11902]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  169.933525][T11902]  ? hook_file_ioctl_common+0x145/0x410
[  169.933545][T11902]  ? selinux_file_ioctl+0x180/0x270
[  169.933558][T11902]  ? selinux_file_ioctl+0xb4/0x270
[  169.933575][T11902]  ? __pfx_usbdev_ioctl+0x10/0x10
[  169.933598][T11902]  __x64_sys_ioctl+0x18e/0x210
[  169.933622][T11902]  do_syscall_64+0xcd/0x4c0
[  169.933643][T11902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.933656][T11902] RIP: 0033:0x7efd13b8e969
[  169.933667][T11902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.933680][T11902] RSP: 002b:00007efd14a62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  169.933693][T11902] RAX: ffffffffffffffda RBX: 00007efd13db5fa0 RCX: 00007efd13b8e969
[  169.933702][T11902] RDX: 0000200000000180 RSI: 0000000080085504 RDI: 0000000000000003
[  169.933710][T11902] RBP: 00007efd14a62090 R08: 0000000000000000 R09: 0000000000000000
[  169.933717][T11902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.933725][T11902] R13: 0000000000000000 R14: 00007efd13db5fa0 R15: 00007ffd2c688b48
[  169.933742][T11902]  </TASK>
[  170.035067][ T5989] usb 12-1: new low-speed USB device number 8 using dummy_hcd
[  170.192131][T11906] "syz.4.1713" (11906) uses obsolete ecb(arc4) skcipher
[  170.207656][ T5989] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.210925][ T5989] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2
[  170.223673][ T5989] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  170.227254][ T5989] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.229475][T11914] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  170.230479][ T5989] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  170.235553][ T5989] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.241406][ T5989] hub 12-1:1.0: bad descriptor, ignoring hub
[  170.243349][ T5989] hub 12-1:1.0: probe with driver hub failed with error -5
[  170.246320][ T5989] cdc_wdm 12-1:1.0: skipping garbage
[  170.248043][ T5989] cdc_wdm 12-1:1.0: skipping garbage
[  170.251822][ T5989] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device
[  170.253729][ T5989] cdc_wdm 12-1:1.0: Unknown control protocol
[  170.491898][   T40] audit: type=1326 audit(1748598254.234:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.7.1709" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f1598e969 code=0x0
[  170.500873][   T40] audit: type=1326 audit(1748598254.234:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.7.1709" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f1598e969 code=0x0
[  170.517534][T11894] cdc_wdm 12-1:1.0: Error submitting int urb - -90
[  170.545416][ T5989] usb 12-1: USB disconnect, device number 8
[  170.934169][T11930] xt_hashlimit: size too large, truncated to 1048576
[  171.043060][T11936] usb usb8: usbfs: process 11936 (syz.6.1720) did not claim interface 63 before use
[  171.070201][T11938] usb usb8: usbfs: process 11938 (syz.6.1722) did not claim interface 0 before use
[  171.073114][T11938] FAULT_INJECTION: forcing a failure.
[  171.073114][T11938] name failslab, interval 1, probability 0, space 0, times 0
[  171.078725][T11938] CPU: 2 UID: 0 PID: 11938 Comm: syz.6.1722 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  171.078748][T11938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  171.078758][T11938] Call Trace:
[  171.078764][T11938]  <TASK>
[  171.078770][T11938]  dump_stack_lvl+0x16c/0x1f0
[  171.078794][T11938]  should_fail_ex+0x512/0x640
[  171.078816][T11938]  ? __kmalloc_node_track_caller_noprof+0xc3/0x510
[  171.078840][T11938]  should_failslab+0xc2/0x120
[  171.078859][T11938]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[  171.078879][T11938]  ? __irq_work_queue_local+0xdb/0x450
[  171.078895][T11938]  ? kstrdup_const+0x63/0x80
[  171.078918][T11938]  kstrdup+0x53/0x100
[  171.078937][T11938]  kstrdup_const+0x63/0x80
[  171.078954][T11938]  __kernfs_new_node+0x9b/0x8e0
[  171.078978][T11938]  ? __pfx___kernfs_new_node+0x10/0x10
[  171.079009][T11938]  ? find_held_lock+0x2b/0x80
[  171.079038][T11938]  ? kernfs_root+0xee/0x2a0
[  171.079061][T11938]  kernfs_new_node+0x13c/0x1e0
[  171.079087][T11938]  kernfs_create_link+0xcc/0x240
[  171.079115][T11938]  sysfs_do_create_link_sd+0x90/0x140
[  171.079135][T11938]  sysfs_create_link+0x61/0xc0
[  171.079151][T11938]  driver_sysfs_add+0x91/0x2d0
[  171.079170][T11938]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  171.079190][T11938]  device_bind_driver+0x16/0x70
[  171.079212][T11938]  usb_driver_claim_interface+0x228/0x400
[  171.079236][T11938]  claimintf+0x181/0x240
[  171.079261][T11938]  checkintf+0x161/0x1d0
[  171.079284][T11938]  usbdev_ioctl+0x1dc9/0x4070
[  171.079312][T11938]  ? __pfx_usbdev_ioctl+0x10/0x10
[  171.079335][T11938]  ? do_vfs_ioctl+0x523/0x1a60
[  171.079359][T11938]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  171.079388][T11938]  ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540
[  171.079413][T11938]  ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540
[  171.079437][T11938]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  171.079469][T11938]  ? hook_file_ioctl_common+0x145/0x410
[  171.079502][T11938]  ? selinux_file_ioctl+0x180/0x270
[  171.079523][T11938]  ? selinux_file_ioctl+0xb4/0x270
[  171.079545][T11938]  ? __pfx_usbdev_ioctl+0x10/0x10
[  171.079571][T11938]  __x64_sys_ioctl+0x18e/0x210
[  171.079596][T11938]  do_syscall_64+0xcd/0x4c0
[  171.079618][T11938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.079635][T11938] RIP: 0033:0x7efd13b8e969
[  171.079649][T11938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.079665][T11938] RSP: 002b:00007efd14a62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  171.079682][T11938] RAX: ffffffffffffffda RBX: 00007efd13db5fa0 RCX: 00007efd13b8e969
[  171.079693][T11938] RDX: 0000200000000180 RSI: 0000000080085504 RDI: 0000000000000003
[  171.079703][T11938] RBP: 00007efd14a62090 R08: 0000000000000000 R09: 0000000000000000
[  171.079713][T11938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.079723][T11938] R13: 0000000000000000 R14: 00007efd13db5fa0 R15: 00007ffd2c688b48
[  171.079747][T11938]  </TASK>
[  171.151936][T11940] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  171.151936][T11940] The task syz.2.1721 (11940) triggered the difference, watch for misbehavior.
[  171.181910][T11942] fuse: Unknown parameter '@'
[  171.246483][T11945] netlink: 'syz.6.1723': attribute type 4 has an invalid length.
[  171.985409][T11956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1727'.
[  172.055155][T11960] xt_hashlimit: size too large, truncated to 1048576
[  172.158157][T11967] usb usb8: usbfs: process 11967 (syz.4.1731) did not claim interface 0 before use
[  172.162966][T11967] usb usb8: selecting invalid altsetting 63
[  172.504769][ T1027] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  172.684621][ T1027] usb 9-1: Using ep0 maxpacket: 8
[  172.688105][ T1027] usb 9-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  172.690769][ T1027] usb 9-1: config 0 has an invalid descriptor of length 153, skipping remainder of the config
[  172.694120][ T1027] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 129
[  172.697212][ T1027] usb 9-1: config 0 has no interface number 0
[  172.699146][ T1027] usb 9-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xF1, changing to 0x81
[  172.702717][ T1027] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 157, changing to 11
[  172.706385][ T1027] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid maxpacket 1402, setting to 1024
[  172.709921][ T1027] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  172.714343][ T1027] usb 9-1: config 0 interface 52 has no altsetting 0
[  172.718285][ T1027] usb 9-1: New USB device found, idVendor=06cb, idProduct=0002, bcdDevice=e8.00
[  172.721932][ T1027] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  172.725335][ T1027] usb 9-1: Manufacturer: syz
[  172.734781][ T1027] usb 9-1: config 0 descriptor??
[  172.775208][T11984] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1737'.
[  172.795035][    C3] sr 2:0:0:0: [sr0] tag#23 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  172.799109][    C3] sr 2:0:0:0: [sr0] tag#23 CDB: Change Definition
[  172.801158][    C3] sr 2:0:0:0: [sr0] tag#23 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 ff b6 d8 59 56
[  172.804675][    C3] sr 2:0:0:0: [sr0] tag#23 CDB[10]: db 0e d8
[  172.822567][T11987] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1739'.
[  172.825973][T11987] netlink: 666 bytes leftover after parsing attributes in process `syz.6.1739'.
[  172.942035][ T1027] input: syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.52/input/input13
[  172.944975][T11991] xt_hashlimit: size too large, truncated to 1048576
[  172.954337][T11993] usb usb8: usbfs: process 11993 (syz.6.1742) did not claim interface 0 before use
[  172.957526][T11993] usb usb8: selecting invalid altsetting 63
[  172.959431][T11993] FAULT_INJECTION: forcing a failure.
[  172.959431][T11993] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  172.963508][T11993] CPU: 0 UID: 0 PID: 11993 Comm: syz.6.1742 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  172.963530][T11993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  172.963540][T11993] Call Trace:
[  172.963545][T11993]  <TASK>
[  172.963551][T11993]  dump_stack_lvl+0x16c/0x1f0
[  172.963593][T11993]  should_fail_ex+0x512/0x640
[  172.963626][T11993]  _copy_to_user+0x32/0xd0
[  172.963649][T11993]  simple_read_from_buffer+0xcb/0x170
[  172.963676][T11993]  proc_fail_nth_read+0x197/0x270
[  172.963698][T11993]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  172.963715][T11993]  ? rw_verify_area+0xcf/0x680
[  172.963730][T11993]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  172.963746][T11993]  vfs_read+0x1e4/0xc60
[  172.963764][T11993]  ? __pfx___mutex_lock+0x10/0x10
[  172.963777][T11993]  ? __pfx_vfs_read+0x10/0x10
[  172.963796][T11993]  ? __fget_files+0x20e/0x3c0
[  172.963810][T11993]  ksys_read+0x12a/0x250
[  172.963825][T11993]  ? __pfx_ksys_read+0x10/0x10
[  172.963841][T11993]  ? fput+0x70/0xf0
[  172.963855][T11993]  do_syscall_64+0xcd/0x4c0
[  172.963869][T11993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.963879][T11993] RIP: 0033:0x7efd13b8d37c
[  172.963888][T11993] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  172.963898][T11993] RSP: 002b:00007efd14a62030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  172.963909][T11993] RAX: ffffffffffffffda RBX: 00007efd13db5fa0 RCX: 00007efd13b8d37c
[  172.963915][T11993] RDX: 000000000000000f RSI: 00007efd14a620a0 RDI: 0000000000000005
[  172.963921][T11993] RBP: 00007efd14a62090 R08: 0000000000000000 R09: 0000000000000000
[  172.963927][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  172.963933][T11993] R13: 0000000000000000 R14: 00007efd13db5fa0 R15: 00007ffd2c688b48
[  172.963946][T11993]  </TASK>
[  173.505524][T12031] xt_hashlimit: size too large, truncated to 1048576
[  173.643383][   T40] audit: type=1400 audit(1748598257.384:938): avc:  denied  { getopt } for  pid=12036 comm="syz.6.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  173.645953][T12038] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=258 sclass=netlink_xfrm_socket pid=12038 comm=syz.6.1754
[  173.645957][T12037] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=258 sclass=netlink_xfrm_socket pid=12037 comm=syz.6.1754
[  173.650689][   T40] audit: type=1400 audit(1748598257.384:939): avc:  denied  { connect } for  pid=12036 comm="syz.6.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  173.689608][T12043] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1756'.
[  173.699253][T12041] netlink: 'syz.7.1755': attribute type 105 has an invalid length.
[  173.701806][T12041] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1755'.
[  173.724908][    C1] sr 2:0:0:0: [sr0] tag#16 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  173.728387][    C1] sr 2:0:0:0: [sr0] tag#16 CDB: Change Definition
[  173.730377][    C1] sr 2:0:0:0: [sr0] tag#16 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 e6 59 56
[  173.733412][    C1] sr 2:0:0:0: [sr0] tag#16 CDB[10]: db 0e d8
[  173.782037][T12054] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  173.870434][   T40] audit: type=1400 audit(1748598257.614:940): avc:  denied  { bind } for  pid=12055 comm="syz.6.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  173.878666][   T40] audit: type=1400 audit(1748598257.614:941): avc:  denied  { name_bind } for  pid=12055 comm="syz.6.1761" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  173.887322][   T40] audit: type=1400 audit(1748598257.614:942): avc:  denied  { node_bind } for  pid=12055 comm="syz.6.1761" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  174.997081][T12090] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2834047395 (22672379160 ns) > initial count (8751802360 ns). Using initial count to start timer.
[  175.009902][T12090] kvm: pic: single mode not supported
[  175.009983][T12090] kvm: pic: level sensitive irq not supported
[  175.067761][    C2] sr 2:0:0:0: [sr0] tag#5 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  175.074242][    C2] sr 2:0:0:0: [sr0] tag#5 CDB: Change Definition
[  175.076866][    C2] sr 2:0:0:0: [sr0] tag#5 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  175.080506][    C2] sr 2:0:0:0: [sr0] tag#5 CDB[10]: db 0e d8
[  175.245652][T12094] usb usb8: usbfs: process 12094 (syz.7.1769) did not claim interface 0 before use
[  175.249489][T12094] usb usb8: selecting invalid altsetting 63
[  175.290751][ T1027] usb 9-1: USB disconnect, device number 16
[  175.336043][T12099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1772'.
[  175.604678][   T63] Bluetooth: hci2: command 0x0406 tx timeout
[  175.635354][ T7212] usb 12-1: new high-speed USB device number 9 using dummy_hcd
[  175.683649][T12113] binder: 12112:12113 ioctl c0306201 2000000003c0 returned -14
[  175.686669][T12113] binder: 12112:12113 ioctl 80404508 200000000080 returned -22
[  176.369169][T12124] usb usb8: usbfs: process 12124 (syz.7.1779) did not claim interface 0 before use
[  176.372417][T12124] usb usb8: selecting invalid altsetting 63
[  176.423418][T12127] syzkaller1: entered promiscuous mode
[  176.425306][T12127] syzkaller1: entered allmulticast mode
[  176.468516][T12129] cgroup: release_agent respecified
[  176.509190][T12131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1782'.
[  176.561910][   T40] audit: type=1800 audit(1748598260.304:943): pid=12137 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1785" name="file1" dev="9p" ino=35913845 res=0 errno=0
[  176.574666][   T40] audit: type=1400 audit(1748598260.314:944): avc:  denied  { watch watch_reads } for  pid=12136 comm="syz.4.1785" path="/378/file0" dev="9p" ino=35913840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  176.604377][T12139] fuse: Unknown parameter 'po	tmode'
[  176.682144][T12145] usb usb8: usbfs: process 12145 (syz.7.1789) did not claim interface 0 before use
[  176.688709][T12145] usb usb8: selecting invalid altsetting 63
[  176.702722][T12148] kAFS: No cell specified
[  176.750038][   T40] audit: type=1400 audit(1748598260.494:945): avc:  denied  { bind } for  pid=12149 comm="syz.7.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  176.774833][   T40] audit: type=1400 audit(1748598260.494:946): avc:  denied  { listen } for  pid=12149 comm="syz.7.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  176.878935][T12162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1793'.
[  176.890738][   T40] audit: type=1400 audit(1748598260.634:947): avc:  denied  { mounton } for  pid=12153 comm="syz.2.1791" path="/435/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  176.917679][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1795'.
[  176.920994][T12165] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1795'.
[  176.930018][T12166] overlayfs: missing 'lowerdir'
[  176.933178][T12166] bridge: RTM_NEWNEIGH with invalid ether address
[  177.033918][T12173] usb usb8: usbfs: process 12173 (syz.4.1798) did not claim interface 0 before use
[  177.039255][T12173] usb usb8: selecting invalid altsetting 63
[  177.087516][   T40] audit: type=1400 audit(1748598260.834:948): avc:  denied  { mounton } for  pid=12174 comm="syz.4.1799" path="/385/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[  177.120596][   T40] audit: type=1400 audit(1748598260.864:949): avc:  denied  { lock } for  pid=12174 comm="syz.4.1799" path="socket:[50204]" dev="sockfs" ino=50204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  177.209678][T12187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12187 comm=syz.2.1801
[  177.253078][T12194] netlink: 'syz.2.1803': attribute type 1 has an invalid length.
[  177.255745][T12194] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1803'.
[  177.308701][T12205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1805'.
[  177.517597][T12217] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12217 comm=syz.2.1811
[  177.736776][T12234] ptrace attach of "/syz-executor exec"[5936] was attempted by "/syz-executor exec"[12234]
[  177.883573][T12240] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1817'.
[  178.143825][T12259] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  178.211960][T12262] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  178.227807][T12262] hfsplus: unable to find HFS+ superblock
[  178.346496][   T40] audit: type=1400 audit(1748598262.094:950): avc:  denied  { mounton } for  pid=12274 comm="syz.6.1827" path="/proc/1089/task" dev="proc" ino=50285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  178.441621][T12289] Invalid source name
[  178.443058][T12289] UBIFS error (pid: 12289): cannot open "./file0", error -22
[  178.537028][   T40] audit: type=1400 audit(1748598262.284:951): avc:  denied  { append } for  pid=12293 comm="syz.2.1834" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  178.708471][T12309] veth1_to_team: entered promiscuous mode
[  178.710623][T12309] veth1_to_team: left promiscuous mode
[  178.755569][T12309] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  178.758277][T12309] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  178.761823][T12309] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  178.764303][T12309] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  178.791119][T12318] overlayfs: failed to resolve './file1': -2
[  178.819553][T12322] __nla_validate_parse: 3 callbacks suppressed
[  178.819565][T12322] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1841'.
[  178.824264][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1841'.
[  178.837872][T12322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.840395][T12326] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.841490][T12322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.849052][T12326] usb usb8: usbfs: process 12326 (syz.7.1842) did not claim interface 0 before use
[  178.852193][T12326] usb usb8: selecting invalid altsetting 63
[  179.075004][   T34] usb 11-1: new high-speed USB device number 12 using dummy_hcd
[  179.235049][   T34] usb 11-1: Using ep0 maxpacket: 8
[  179.237965][   T34] usb 11-1: config 0 has an invalid interface number: 1 but max is 0
[  179.240688][   T34] usb 11-1: config 0 has no interface number 0
[  179.242755][   T34] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  179.246379][   T34] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  179.249157][   T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.253284][   T34] usb 11-1: config 0 descriptor??
[  179.258794][   T34] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  179.737072][T12343] binder: BC_ACQUIRE_RESULT not supported
[  179.738926][T12343] binder: 12342:12343 ioctl c0306201 200000000100 returned -22
[  179.742553][T12343] binder: BC_ACQUIRE_RESULT not supported
[  179.744401][T12343] binder: 12342:12343 ioctl c0306201 200000000100 returned -22
[  180.051871][T12365] usb usb8: usbfs: process 12365 (syz.2.1853) did not claim interface 0 before use
[  180.054927][T12365] usb usb8: selecting invalid altsetting 63
[  180.232158][T12376] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  180.243227][T12376] cramfs: wrong magic
[  180.336420][  T839] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  180.374336][T12387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1862'.
[  180.409492][   T40] audit: type=1400 audit(1748598264.154:952): avc:  denied  { setattr } for  pid=12388 comm="syz.4.1863" name="sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1
[  180.507057][  T839] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  180.510579][  T839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  180.513984][  T839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  180.517368][  T839] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  180.521166][  T839] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  180.523955][  T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.539558][  T839] usb 7-1: config 0 descriptor??
[  180.542593][T12368] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  180.608302][T12398] usb usb8: usbfs: process 12398 (syz.7.1866) did not claim interface 0 before use
[  180.611242][T12398] usb usb8: selecting invalid altsetting 63
[  180.948891][T12414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1872'.
[  180.955434][  T839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  180.958279][  T839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  180.961360][  T839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  180.963706][  T839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  180.966215][  T839] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  180.969117][  T839] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  180.985033][  T839] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  181.062036][T12424] xt_hashlimit: size too large, truncated to 1048576
[  181.162499][  T839] usb 7-1: USB disconnect, device number 19
[  181.373006][T12429] usb usb8: usbfs: process 12429 (syz.4.1885) did not claim interface 0 before use
[  181.378157][T12429] usb usb8: selecting invalid altsetting 63
[  181.459149][    C0] sr 2:0:0:0: [sr0] tag#16 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  181.462194][    C0] sr 2:0:0:0: [sr0] tag#16 CDB: Change Definition
[  181.464170][    C0] sr 2:0:0:0: [sr0] tag#16 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  181.467005][    C0] sr 2:0:0:0: [sr0] tag#16 CDB[10]: db 0e d8
[  181.540812][T12438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1879'.
[  181.584943][T12444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1882'.
[  181.588930][T12444] CIFS mount error: No usable UNC path provided in device string!
[  181.588930][T12444] 
[  181.591998][T12444] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  181.627635][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  181.627689][   T40] audit: type=1400 audit(1748598265.374:954): avc:  denied  { write } for  pid=12446 comm="syz.4.1884" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  181.627932][T12447] random: crng reseeded on system resumption
[  181.629615][   T40] audit: type=1400 audit(1748598265.374:955): avc:  denied  { open } for  pid=12446 comm="syz.4.1884" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  181.788617][T12447] Hibernate inconsistent memory map detected!
[  181.792712][T12447] PM: hibernation: Image mismatch: architecture specific data
[  181.803099][   T40] audit: type=1400 audit(1748598265.544:956): avc:  denied  { mount } for  pid=12446 comm="syz.4.1884" name="/" dev="pstore" ino=2798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  181.810512][   T40] audit: type=1400 audit(1748598265.554:957): avc:  denied  { remount } for  pid=12446 comm="syz.4.1884" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  182.330448][   T40] audit: type=1400 audit(1748598266.074:958): avc:  denied  { unmount } for  pid=6966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  182.345183][T12466] syz.6.1891 (12466): drop_caches: 2
[  182.358092][T12466] syz.6.1891 (12466): drop_caches: 2
[  182.368710][   T40] audit: type=1400 audit(1748598266.114:959): avc:  denied  { read } for  pid=12465 comm="syz.6.1891" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=35913978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  182.397216][T12468] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  182.399567][T12468] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  182.444643][T12474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1894'.
[  182.480497][T12476] xt_hashlimit: size too large, truncated to 1048576
[  182.524962][T12482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.575828][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1895'.
[  182.639156][    C3] sr 2:0:0:0: [sr0] tag#9 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  182.642320][    C3] sr 2:0:0:0: [sr0] tag#9 CDB: Change Definition
[  182.644261][    C3] sr 2:0:0:0: [sr0] tag#9 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  182.647142][    C3] sr 2:0:0:0: [sr0] tag#9 CDB[10]: db 0e d8
[  182.652332][    C0] sr 2:0:0:0: [sr0] tag#17 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  182.656937][    C0] sr 2:0:0:0: [sr0] tag#17 CDB: Change Definition
[  182.659473][    C0] sr 2:0:0:0: [sr0] tag#17 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  182.662682][    C0] sr 2:0:0:0: [sr0] tag#17 CDB[10]: db 0e d8
[  182.666468][T12496] KVM: debugfs: duplicate directory 12496-7
[  182.692987][T12496] usb usb8: usbfs: process 12496 (syz.2.1901) did not claim interface 0 before use
[  182.696041][T12496] usb usb8: selecting invalid altsetting 63
[  182.756915][    C3] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  182.760120][    C3] sr 2:0:0:0: [sr0] tag#10 CDB: Change Definition
[  182.762152][    C3] sr 2:0:0:0: [sr0] tag#10 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fe b6 d8 59 56
[  182.765111][    C3] sr 2:0:0:0: [sr0] tag#10 CDB[10]: db 0e d8
[  182.851729][T12512] netlink: 'syz.7.1907': attribute type 1 has an invalid length.
[  182.878343][T12514] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  182.879790][   T40] audit: type=1400 audit(1748598266.624:960): avc:  denied  { create } for  pid=12513 comm="syz.2.1908" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[  182.887376][T12512] 8021q: adding VLAN 0 to HW filter on device bond59
[  182.917802][   T40] audit: type=1400 audit(1748598266.624:961): avc:  denied  { associate } for  pid=12513 comm="syz.2.1908" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  182.942212][T12516] bond59: (slave geneve2): making interface the new active one
[  182.969458][    C1] vkms_vblank_simulate: vblank timer overrun
[  182.975007][T12516] bond59: (slave geneve2): Enslaving as an active interface with an up link
[  182.982469][T12512] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1907'.
[  183.213016][T12525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=12525 comm=syz.7.1912
[  183.721417][    C1] sr 2:0:0:0: [sr0] tag#19 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  183.724725][  T838] usb 12-1: new full-speed USB device number 10 using dummy_hcd
[  183.725717][    C1] sr 2:0:0:0: [sr0] tag#19 CDB: Change Definition
[  183.730917][    C1] sr 2:0:0:0: [sr0] tag#19 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  183.734661][    C1] sr 2:0:0:0: [sr0] tag#19 CDB[10]: db 0e d8
[  183.778018][   T40] audit: type=1400 audit(1748598267.524:962): avc:  denied  { rmdir } for  pid=5936 comm="syz-executor" name="bus" dev="tmpfs" ino=2540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[  183.874664][  T838] usb 12-1: device descriptor read/64, error -71
[  183.881632][T12547] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1918'.
[  183.911297][    C1] vkms_vblank_simulate: vblank timer overrun
[  184.075834][   T40] audit: type=1400 audit(1748598267.824:963): avc:  denied  { nosuid_transition } for  pid=12550 comm="syz.6.1920" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1
[  184.101927][T12554] xt_hashlimit: size too large, truncated to 1048576
[  184.146316][  T838] usb 12-1: new full-speed USB device number 11 using dummy_hcd
[  184.284819][  T838] usb 12-1: device descriptor read/64, error -71
[  184.348110][T12567] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  184.404944][  T838] usb usb12-port1: attempt power cycle
[  184.426594][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1924'.
[  184.430990][T12564] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12564 comm=syz.6.1924
[  184.511060][T12572] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1927'.
[  184.672118][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1929'.
[  184.720766][T12582] xt_hashlimit: size too large, truncated to 1048576
[  184.754676][  T838] usb 12-1: new full-speed USB device number 12 using dummy_hcd
[  184.775194][  T838] usb 12-1: device descriptor read/8, error -71
[  184.808341][T12588] netlink: 'syz.4.1931': attribute type 7 has an invalid length.
[  184.821840][T12588] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1931'.
[  184.824879][T12588] netlink: zone id is out of range
[  184.826523][T12588] netlink: zone id is out of range
[  184.828139][T12588] netlink: zone id is out of range
[  184.829725][T12588] netlink: zone id is out of range
[  184.834177][T12588] netlink: get zone limit has 8 unknown bytes
[  185.034663][  T838] usb 12-1: new full-speed USB device number 13 using dummy_hcd
[  185.055062][  T838] usb 12-1: device descriptor read/8, error -71
[  185.167926][  T838] usb usb12-port1: unable to enumerate USB device
[  185.463125][T12609] netlink: zone id is out of range
[  185.465995][T12609] netlink: zone id is out of range
[  185.467747][T12609] netlink: zone id is out of range
[  185.469420][T12609] netlink: zone id is out of range
[  185.472104][T12609] netlink: 'syz.2.1936': attribute type 10 has an invalid length.
[  185.475045][T12609] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1936'.
[  185.478180][T12609] team0: entered promiscuous mode
[  185.479892][T12609] team_slave_0: entered promiscuous mode
[  185.481795][T12609] team_slave_1: entered promiscuous mode
[  185.484137][T12609] bridge0: port 3(team0) entered blocking state
[  185.487136][T12609] bridge0: port 3(team0) entered disabled state
[  185.489211][T12609] team0: entered allmulticast mode
[  185.490986][T12609] team_slave_0: entered allmulticast mode
[  185.492781][T12609] team_slave_1: entered allmulticast mode
[  185.496151][T12609] @: entered allmulticast mode
[  185.497704][T12609] veth0_vlan: entered allmulticast mode
[  185.500813][T12609] bridge0: port 3(team0) entered blocking state
[  185.502924][T12609] bridge0: port 3(team0) entered forwarding state
[  185.640171][T12618] xt_hashlimit: size too large, truncated to 1048576
[  185.793161][T12625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1941'.
[  185.803615][T12626] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1940'.
[  185.807238][T12626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1940'.
[  185.838014][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1942'.
[  185.977068][T12636] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  185.979186][T12636] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  185.981600][T12636] vhci_hcd vhci_hcd.0: Device attached
[  185.984740][T12637] vhci_hcd: connection closed
[  185.985911][T11250] vhci_hcd: stop threads
[  185.988939][T11250] vhci_hcd: release socket
[  185.990443][T11250] vhci_hcd: disconnect device
[  186.133392][    C3] sr 2:0:0:0: [sr0] tag#11 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  186.136656][    C3] sr 2:0:0:0: [sr0] tag#11 CDB: Change Definition
[  186.138653][    C3] sr 2:0:0:0: [sr0] tag#11 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  186.141549][    C3] sr 2:0:0:0: [sr0] tag#11 CDB[10]: db 0e d8
[  186.575149][T12667] openvswitch: netlink: Missing key (keys=40, expected=80)
[  186.578770][T12667] xt_hashlimit: size too large, truncated to 1048576
[  186.646932][T12667] netlink: 'syz.2.1956': attribute type 21 has an invalid length.
[  186.646932][T12668] netlink: 'syz.2.1956': attribute type 21 has an invalid length.
[  186.720739][ T5989] IPVS: starting estimator thread 0...
[  186.824643][T12682] IPVS: using max 45 ests per chain, 108000 per kthread
[  186.837151][T12690] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  186.839944][T12690] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  186.843546][T12690] vhci_hcd vhci_hcd.0: Device attached
[  186.847748][T12694] usbip_core: unknown command
[  186.850514][T12694] vhci_hcd: unknown pdu 0
[  186.852373][T12694] usbip_core: unknown command
[  186.855961][T11250] vhci_hcd: stop threads
[  186.857414][T11250] vhci_hcd: release socket
[  186.858818][T11250] vhci_hcd: disconnect device
[  187.166975][T12701] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  187.218998][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  187.219009][   T40] audit: type=1400 audit(1748598270.964:970): avc:  denied  { lock } for  pid=12705 comm="syz.6.1966" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  187.440746][   T40] audit: type=1400 audit(1748598271.184:971): avc:  denied  { mounton } for  pid=12719 comm="syz.2.1972" path="/488/bus" dev="tmpfs" ino=2630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  187.440878][T12720] ntfs3(nbd2): try to read out of volume at offset 0x0
[  187.453580][T12720] netlink: 'syz.2.1972': attribute type 10 has an invalid length.
[  187.460252][T12720] bridge0: port 3(team0) entered disabled state
[  187.462477][T12720] team0: left allmulticast mode
[  187.464032][T12720] team_slave_0: left allmulticast mode
[  187.466423][T12720] team_slave_1: left allmulticast mode
[  187.469138][T12720] @: left allmulticast mode
[  187.470623][T12720] veth0_vlan: left allmulticast mode
[  187.472286][T12720] team0: left promiscuous mode
[  187.473941][T12720] team_slave_0: left promiscuous mode
[  187.477479][T12720] team_slave_1: left promiscuous mode
[  187.479455][T12720] bridge0: port 3(team0) entered disabled state
[  187.484823][T12720] batman_adv: batadv0: Adding interface: team0
[  187.487323][T12720] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.495417][T12720] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  187.501692][    C2] sr 2:0:0:0: [sr0] tag#12 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  187.505396][T12720] netlink: 'syz.2.1972': attribute type 10 has an invalid length.
[  187.506060][    C2] sr 2:0:0:0: [sr0] tag#12 CDB: Change Definition
[  187.511166][    C2] sr 2:0:0:0: [sr0] tag#12 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  187.515047][    C2] sr 2:0:0:0: [sr0] tag#12 CDB[10]: db 0e d8
[  187.546602][T12720] team0: entered promiscuous mode
[  187.548633][T12720] team_slave_0: entered promiscuous mode
[  187.551355][T12720] team_slave_1: entered promiscuous mode
[  187.557359][T12720] 8021q: adding VLAN 0 to HW filter on device team0
[  187.561227][T12720] batman_adv: batadv0: Interface activated: team0
[  187.563362][T12720] batman_adv: batadv0: Interface deactivated: team0
[  187.566620][T12720] batman_adv: batadv0: Removing interface: team0
[  187.570904][T12720] bridge0: port 3(team0) entered blocking state
[  187.573017][T12720] bridge0: port 3(team0) entered disabled state
[  187.575571][T12720] team0: entered allmulticast mode
[  187.579563][T12720] team_slave_0: entered allmulticast mode
[  187.582050][T12720] team_slave_1: entered allmulticast mode
[  187.584073][T12720] @: entered allmulticast mode
[  187.587190][T12720] veth0_vlan: entered allmulticast mode
[  187.590276][T12720] bridge0: port 3(team0) entered blocking state
[  187.592331][T12720] bridge0: port 3(team0) entered forwarding state
[  187.973726][T12756] xt_hashlimit: size too large, truncated to 1048576
[  188.093143][T12762] netlink: 'syz.4.1984': attribute type 9 has an invalid length.
[  188.172846][    C3] sr 2:0:0:0: [sr0] tag#13 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  188.176136][    C3] sr 2:0:0:0: [sr0] tag#13 CDB: Change Definition
[  188.178143][    C3] sr 2:0:0:0: [sr0] tag#13 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  188.181013][    C3] sr 2:0:0:0: [sr0] tag#13 CDB[10]: db 0e d8
[  188.238434][T12764] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.388465][T12764] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.008272][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.011092][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  201.214835][   T63] Bluetooth: hci0: command 0x0406 tx timeout
[  201.487031][T12764] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.623104][T12795] xt_hashlimit: size too large, truncated to 1048576
[  201.646600][T12764] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.686545][ T5942] Bluetooth: min 0 < 6
[  201.688458][ T5942] Bluetooth: min 0 < 6
[  201.690300][ T5942] Bluetooth: min 0 < 6
[  201.692096][ T5942] Bluetooth: min 0 < 6
[  201.693897][ T5942] Bluetooth: min 0 < 6
[  201.696246][ T5942] Bluetooth: min 0 < 6
[  201.698092][ T5942] Bluetooth: min 0 < 6
[  201.699922][ T5942] Bluetooth: min 0 < 6
[  201.701745][ T5942] Bluetooth: min 0 < 6
[  201.703556][ T5942] Bluetooth: min 0 < 6
[  201.705771][ T5942] Bluetooth: min 0 < 6
[  201.707701][ T5942] Bluetooth: min 0 < 6
[  201.709517][ T5942] Bluetooth: min 0 < 6
[  201.711332][ T5942] Bluetooth: min 0 < 6
[  201.713118][ T5942] Bluetooth: min 0 < 6
[  201.715088][ T5942] Bluetooth: min 0 < 6
[  201.716970][ T5942] Bluetooth: min 0 < 6
[  201.718799][ T5942] Bluetooth: min 0 < 6
[  201.720560][ T5942] Bluetooth: min 0 < 6
[  201.721873][ T5942] Bluetooth: min 0 < 6
[  201.723203][ T5942] Bluetooth: min 0 < 6
[  201.724721][ T5942] Bluetooth: min 0 < 6
[  201.726032][ T5942] Bluetooth: min 0 < 6
[  201.727384][ T5942] Bluetooth: min 0 < 6
[  201.728695][ T5942] Bluetooth: min 0 < 6
[  201.731875][ T5942] Bluetooth: min 0 < 6
[  201.733678][ T5942] Bluetooth: min 0 < 6
[  201.735776][ T5942] Bluetooth: min 0 < 6
[  201.737645][ T5942] Bluetooth: min 0 < 6
[  201.739991][ T5942] Bluetooth: min 0 < 6
[  201.741813][ T5942] Bluetooth: min 0 < 6
[  201.743963][ T5942] Bluetooth: min 0 < 6
[  201.745411][T12813] __nla_validate_parse: 25 callbacks suppressed
[  201.745421][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1998'.
[  201.745927][ T5942] Bluetooth: min 0 < 6
[  201.757861][T12813] overlayfs: overlapping lowerdir path
[  201.767595][    C3] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  201.770924][    C3] sr 2:0:0:0: [sr0] tag#14 CDB: Change Definition
[  201.772950][    C3] sr 2:0:0:0: [sr0] tag#14 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  201.775935][    C3] sr 2:0:0:0: [sr0] tag#14 CDB[10]: db 0e d8
[  201.816155][T12820] overlayfs: overlapping lowerdir path
[  201.831025][T12764] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.841711][T12764] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.850751][T12764] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.858595][T12764] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.165582][T12836] xt_hashlimit: size too large, truncated to 1048576
[  202.185379][ T5991] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  202.335924][ T5991] usb 7-1: Using ep0 maxpacket: 32
[  202.339583][    C0] sr 2:0:0:0: [sr0] tag#18 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  202.340022][ T5991] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  202.342998][    C0] sr 2:0:0:0: [sr0] tag#18 CDB: Change Definition
[  202.349127][    C0] sr 2:0:0:0: [sr0] tag#18 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  202.352980][    C0] sr 2:0:0:0: [sr0] tag#18 CDB[10]: db 0e d8
[  202.357582][ T5991] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  202.361191][ T5991] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  202.364380][ T5991] usb 7-1: Product: syz
[  202.373572][ T5991] usb 7-1: Manufacturer: syz
[  202.376886][ T5991] usb 7-1: SerialNumber: syz
[  202.381124][ T5991] usb 7-1: config 0 descriptor??
[  202.384083][T12829] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  202.396588][ T5991] hub 7-1:0.0: bad descriptor, ignoring hub
[  202.399108][ T5991] hub 7-1:0.0: probe with driver hub failed with error -5
[  202.511181][T12856] xt_hashlimit: size too large, truncated to 1048576
[  202.591387][T12861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.596333][T12861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.667077][T12865] netlink: 'syz.6.2017': attribute type 1 has an invalid length.
[  202.718038][    C3] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  202.721284][    C3] sr 2:0:0:0: [sr0] tag#15 CDB: Change Definition
[  202.723289][    C3] sr 2:0:0:0: [sr0] tag#15 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  202.725199][ T7212] usb 7-1: USB disconnect, device number 20
[  202.726196][    C3] sr 2:0:0:0: [sr0] tag#15 CDB[10]: db 0e d8
[  202.770694][T12888] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™�…EŸ8-ö¤ ™�ŠÇÅ–èEeÕ¬'
[  202.889357][T12892] xt_hashlimit: size too large, truncated to 1048576
[  203.221669][   T40] audit: type=1400 audit(1748598286.964:972): avc:  denied  { ioctl } for  pid=12908 comm="syz.2.2033" path="socket:[53318]" dev="sockfs" ino=53318 ioctlcmd=0x89f5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  203.251813][T12917] sctp: [Deprecated]: syz.2.2034 (pid 12917) Use of int in maxseg socket option.
[  203.251813][T12917] Use struct sctp_assoc_value instead
[  203.262406][T12917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.330106][    C3] sr 2:0:0:0: [sr0] tag#16 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  203.333345][    C3] sr 2:0:0:0: [sr0] tag#16 CDB: Change Definition
[  203.335357][    C3] sr 2:0:0:0: [sr0] tag#16 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  203.338160][    C3] sr 2:0:0:0: [sr0] tag#16 CDB[10]: db 0e d8
[  203.402696][T12932] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2038'.
[  203.448387][T12934] binder: 12933:12934 ioctl 3ba0 200000000180 returned -22
[  203.451121][   T40] audit: type=1400 audit(1748598287.194:973): avc:  denied  { call } for  pid=12933 comm="syz.7.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  203.609917][T12944] bridge0: port 3(team0) entered disabled state
[  203.612899][T12944] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.675289][T12961] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2047'.
[  203.756680][T12968] xt_nfacct: accounting object `syz1' does not exists
[  203.766168][ T5942] Bluetooth: hci2: command 0x0406 tx timeout
[  203.855326][T12979] block nbd7: NBD_DISCONNECT
[  203.857139][T12979] block nbd7: Send disconnect failed -22
[  203.865783][T12978] x_tables: duplicate underflow at hook 1
[  203.895897][ T7212] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  204.011865][T12995] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2058'.
[  204.025786][ T7212] usb 7-1: device descriptor read/64, error -71
[  204.058307][T12982] block nbd7: Disconnected due to user request.
[  204.060961][T12982] block nbd7: shutting down sockets
[  204.192365][   T40] audit: type=1400 audit(1748598287.934:974): avc:  denied  { write } for  pid=13001 comm="syz.6.2061" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  204.266236][ T7212] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  204.290130][T13008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.293863][T13008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.405993][ T7212] usb 7-1: device descriptor read/64, error -71
[  204.416555][   T40] audit: type=1326 audit(1748598288.164:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13012 comm="syz.7.2065" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f1598e969 code=0x0
[  204.500839][T13014] nvme_fabrics: missing parameter 'transport=%s'
[  204.503447][T13014] nvme_fabrics: missing parameter 'nqn=%s'
[  204.515981][ T7212] usb usb7-port1: attempt power cycle
[  204.855392][ T7212] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  204.856701][T13020] nft_compat: unsupported protocol 0
[  204.863171][   T40] audit: type=1400 audit(1748598288.604:976): avc:  denied  { read } for  pid=13017 comm="syz.6.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  204.877734][ T7212] usb 7-1: device descriptor read/8, error -71
[  205.089970][T13027] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2069'.
[  205.115355][ T7212] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  205.131406][T13030] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2070'.
[  205.131428][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2070'.
[  205.135906][ T7212] usb 7-1: device descriptor read/8, error -71
[  205.179304][T13033] overlay: ./file0 is not a directory
[  205.181452][T13033] overlay: ./file0 is not a directory
[  205.254403][ T7212] usb usb7-port1: unable to enumerate USB device
[  205.259726][T13036] xt_hashlimit: size too large, truncated to 1048576
[  205.430964][    C3] sr 2:0:0:0: [sr0] tag#20 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  205.435009][    C3] sr 2:0:0:0: [sr0] tag#20 CDB: Change Definition
[  205.437560][    C3] sr 2:0:0:0: [sr0] tag#20 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  205.441260][    C3] sr 2:0:0:0: [sr0] tag#20 CDB[10]: db 0e d8
[  205.571778][T13055] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2079'.
[  205.800474][T13071] net_ratelimit: 4 callbacks suppressed
[  205.800485][T13071] geneve0: mtu less than device minimum
[  205.825754][T13076] SELinux:  truncated policydb string identifier
[  205.830700][T13076] SELinux: failed to load policy
[  205.844954][ T5942] Bluetooth: hci2: command 0x0406 tx timeout
[  205.976928][T13085] Bluetooth: hci4: Frame reassembly failed (-84)
[  205.979864][ T6270] Bluetooth: hci4: Frame reassembly failed (-84)
[  206.831488][T13107] xt_hashlimit: size too large, truncated to 1048576
[  206.934322][T13113] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2097'.
[  207.590366][T13147] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2108'.
[  207.792386][   T40] audit: type=1400 audit(1748598291.534:977): avc:  granted  { setsecparam } for  pid=13155 comm="syz.7.2111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  207.925541][   T63] Bluetooth: hci2: command 0x0406 tx timeout
[  208.005478][   T63] Bluetooth: hci4: command 0xfc11 tx timeout
[  208.009307][ T5942] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  208.040541][   T40] audit: type=1400 audit(1748598291.784:978): avc:  denied  { listen } for  pid=13161 comm="syz.7.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  208.047393][   T40] audit: type=1400 audit(1748598291.784:979): avc:  denied  { accept } for  pid=13161 comm="syz.7.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  208.062680][   T40] audit: type=1400 audit(1748598291.804:980): avc:  denied  { read write } for  pid=13163 comm="syz.6.2115" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  208.079408][   T40] audit: type=1400 audit(1748598291.804:981): avc:  denied  { open } for  pid=13163 comm="syz.6.2115" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  208.098758][ T5942] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  208.125775][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2116'.
[  208.374051][   T40] kauditd_printk_skb: 25 callbacks suppressed
[  208.374063][   T40] audit: type=1400 audit(1748598292.114:1007): avc:  denied  { read write } for  pid=5936 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  208.384665][   T40] audit: type=1400 audit(1748598292.124:1008): avc:  denied  { read write open } for  pid=5936 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  208.394468][   T40] audit: type=1400 audit(1748598292.124:1009): avc:  denied  { ioctl } for  pid=5936 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  208.511297][   T40] audit: type=1400 audit(1748598292.254:1010): avc:  denied  { map_create } for  pid=13169 comm="syz.2.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  208.519362][   T40] audit: type=1400 audit(1748598292.254:1011): avc:  denied  { map_read map_write } for  pid=13169 comm="syz.2.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  208.527500][   T40] audit: type=1400 audit(1748598292.264:1012): avc:  denied  { prog_load } for  pid=13169 comm="syz.2.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  208.535861][   T40] audit: type=1400 audit(1748598292.264:1013): avc:  denied  { bpf } for  pid=13169 comm="syz.2.2117" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  208.542910][   T40] audit: type=1400 audit(1748598292.264:1014): avc:  denied  { map_create } for  pid=13169 comm="syz.2.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  208.549163][   T40] audit: type=1400 audit(1748598292.274:1015): avc:  denied  { read } for  pid=13169 comm="syz.2.2117" dev="nsfs" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  208.556426][   T40] audit: type=1400 audit(1748598292.274:1016): avc:  denied  { read open } for  pid=13169 comm="syz.2.2117" path="net:[4026532890]" dev="nsfs" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  208.912610][T13179] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2119'.
[  208.973066][T13181] netlink: 'syz.6.2120': attribute type 9 has an invalid length.
[  208.976495][T13181] netlink: 212012 bytes leftover after parsing attributes in process `syz.6.2120'.
[  209.368595][    C2] sr 2:0:0:0: [sr0] tag#4 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  209.372597][    C2] sr 2:0:0:0: [sr0] tag#4 CDB: Change Definition
[  209.374721][    C2] sr 2:0:0:0: [sr0] tag#4 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  209.377582][    C2] sr 2:0:0:0: [sr0] tag#4 CDB[10]: db 0e d8
[  209.460165][T13195] program syz.2.2124 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  209.627980][T13201] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  209.628923][T13200] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  209.631087][T13201] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  209.633948][T13200] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  209.638328][T13201] overlayfs: missing 'lowerdir'
[  209.639395][T13200] overlayfs: missing 'lowerdir'
[  209.661258][T13200] CIFS mount error: No usable UNC path provided in device string!
[  209.661258][T13200] 
[  209.664383][T13200] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  209.966458][T13214] input: syz0 as /devices/virtual/input/input17
[  209.995250][T13214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2128'.
[  210.008854][   T63] Bluetooth: hci2: command 0x0406 tx timeout
[  210.075655][T13219] SELinux:  policydb version 0 does not match my version range 15-34
[  210.078340][T13219] SELinux: failed to load policy
[  210.165404][   T63] Bluetooth: hci0: command 0x0406 tx timeout
[  210.258406][    C2] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  210.261897][    C2] sr 2:0:0:0: [sr0] tag#14 CDB: Change Definition
[  210.264314][    C2] sr 2:0:0:0: [sr0] tag#14 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  210.267982][    C2] sr 2:0:0:0: [sr0] tag#14 CDB[10]: db 0e d8
[  210.326147][T13230] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2135'.
[  210.335343][T13230] gretap0: entered promiscuous mode
[  210.341371][T13230] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2135'.
[  210.347821][T13230] 0ªX¹¦D: renamed from gretap0
[  210.351329][T13230] 0ªX¹¦D: left promiscuous mode
[  210.352950][T13230] 0ªX¹¦D: entered allmulticast mode
[  210.356584][T13230] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  210.387579][T13230] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2135'.
[  210.406802][T13238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2137'.
[  211.715004][    C0] sr 2:0:0:0: [sr0] tag#21 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  211.718296][    C0] sr 2:0:0:0: [sr0] tag#21 CDB: Change Definition
[  211.720277][    C0] sr 2:0:0:0: [sr0] tag#21 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  211.723494][    C0] sr 2:0:0:0: [sr0] tag#21 CDB[10]: db 0e d8
[  211.789053][T13274] xt_hashlimit: size too large, truncated to 1048576
[  212.066637][T13287] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2152'.
[  212.085500][   T63] Bluetooth: hci2: command 0x0406 tx timeout
[  212.300326][    C2] sr 2:0:0:0: [sr0] tag#16 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  212.303585][    C2] sr 2:0:0:0: [sr0] tag#16 CDB: Change Definition
[  212.305687][    C2] sr 2:0:0:0: [sr0] tag#16 CDB[00]: 40 55 3d a7 a9 12 0d 10 15 6d 18 fb b6 d8 59 56
[  212.308514][    C2] sr 2:0:0:0: [sr0] tag#16 CDB[10]: db 0e d8
[  212.357067][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2159'.
[  212.421345][T13313] xt_hashlimit: size too large, truncated to 1048576
[  212.526178][T13320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.529186][T13320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.559005][T13316] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2163'.
[  212.576015][T13320] Bluetooth: hci0: load_link_keys: too big key_count value 12032
[  212.611384][    C0] 
[  212.612480][    C0] =============================
[  212.614552][    C0] [ BUG: Invalid wait context ]
[  212.616660][    C0] 6.15.0-syzkaller-08486-gf66bc387efbe #0 Not tainted
[  212.619686][    C0] -----------------------------
[  212.623517][    C0] swapper/0/0 is trying to lock:
[  212.625511][    C0] ffffc90003c8c410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x254/0xeb0
[  212.629290][    C0] other info that might help us debug this:
[  212.631677][    C0] context-{2:2}
[  212.633103][    C0] 1 lock held by swapper/0/0:
[  212.635080][    C0]  #0: ffffc90003c8c960 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x23a/0xeb0
[  212.639165][    C0] stack backtrace:
[  212.640732][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  212.640752][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  212.640762][    C0] Call Trace:
[  212.640769][    C0]  <IRQ>
[  212.640775][    C0]  dump_stack_lvl+0x116/0x1f0
[  212.640808][    C0]  __lock_acquire+0xa12/0x1c90
[  212.640825][    C0]  ? __lock_acquire+0xb8a/0x1c90
[  212.640847][    C0]  lock_acquire+0x179/0x350
[  212.640864][    C0]  ? kvm_xen_set_evtchn_fast+0x254/0xeb0
[  212.640889][    C0]  _raw_read_lock_irqsave+0x46/0x90
[  212.640905][    C0]  ? kvm_xen_set_evtchn_fast+0x254/0xeb0
[  212.640924][    C0]  kvm_xen_set_evtchn_fast+0x254/0xeb0
[  212.640941][    C0]  ? kvm_xen_set_evtchn_fast+0x23a/0xeb0
[  212.640960][    C0]  ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10
[  212.640978][    C0]  ? do_raw_spin_unlock+0x172/0x230
[  212.640999][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  212.641014][    C0]  ? debug_object_deactivate+0x1ec/0x3a0
[  212.641045][    C0]  ? __pfx_xen_timer_callback+0x10/0x10
[  212.641062][    C0]  xen_timer_callback+0x1db/0x2a0
[  212.641078][    C0]  ? __pfx_xen_timer_callback+0x10/0x10
[  212.641096][    C0]  ? do_raw_spin_unlock+0x172/0x230
[  212.641116][    C0]  __hrtimer_run_queues+0x5ed/0xad0
[  212.641139][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  212.641161][    C0]  ? read_tsc+0x9/0x20
[  212.641187][    C0]  hrtimer_interrupt+0x397/0x8e0
[  212.641213][    C0]  __sysvec_apic_timer_interrupt+0x108/0x3f0
[  212.641236][    C0]  sysvec_apic_timer_interrupt+0x9f/0xc0
[  212.641251][    C0]  </IRQ>
[  212.641256][    C0]  <TASK>
[  212.641261][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  212.641276][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  212.641294][    C0] Code: 73 55 02 e9 53 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 20 0e 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  212.641309][    C0] RSP: 0018:ffffffff8e007e08 EFLAGS: 00000286
[  212.641322][    C0] RAX: 00000000001f1989 RBX: 0000000000000000 RCX: ffffffff8b7be449
[  212.641332][    C0] RDX: 0000000000000000 RSI: ffffffff8dc06ed3 RDI: ffffffff8bf52fc0
[  212.641344][    C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed100d48663d
[  212.641353][    C0] R10: ffff88806a4331eb R11: 0000000000000001 R12: 0000000000000000
[  212.641362][    C0] R13: ffffffff8e097740 R14: ffffffff90877550 R15: 0000000000000000
[  212.641374][    C0]  ? ct_kernel_exit+0x139/0x190
[  212.641394][    C0]  default_idle+0x13/0x20
[  212.641413][    C0]  default_idle_call+0x6d/0xb0
[  212.641431][    C0]  do_idle+0x391/0x510
[  212.641445][    C0]  ? __pfx_do_idle+0x10/0x10
[  212.641459][    C0]  ? trace_sched_exit_tp+0x31/0x130
[  212.641474][    C0]  cpu_startup_entry+0x4f/0x60
[  212.641490][    C0]  rest_init+0x16b/0x2b0
[  212.641511][    C0]  ? acpi_subsystem_init+0x133/0x180
[  212.641537][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  212.641559][    C0]  start_kernel+0x3e9/0x4d0
[  212.641578][    C0]  x86_64_start_reservations+0x18/0x30
[  212.641600][    C0]  x86_64_start_kernel+0x130/0x190
[  212.641626][    C0]  common_startup_64+0x13e/0x148
[  212.641652][    C0]  </TASK>
[  214.165845][   T63] Bluetooth: hci2: command 0x0406 tx timeout
[  216.245093][   T63] Bluetooth: hci2: command 0x0406 tx timeout
[  218.325164][   T63] Bluetooth: hci2: command 0x0406 tx timeout
[  220.405332][   T63] Bluetooth: hci2: command 0x0406 tx timeout
[  222.485567][   T63] Bluetooth: hci2: command 0x0406 tx timeout

VM DIAGNOSIS:
09:36:22  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85585bc5 RDI=ffffffff9ae6a6a0 RBP=ffffffff9ae6a660 RSP=ffffc900000076a0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d
R12=0000000000000000 R13=0000000000000032 R14=ffffffff9ae6a660 R15=ffffffff85585b60
RIP=ffffffff85585bef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6971000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000034000 CR3=000000005d308000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000003c69 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe083cb8d0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3e9e11a8a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3e9e11a97
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3e9e11a91
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3e9e11aa5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3e9e11b2b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3e9e11c09
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffea000108e4c0 RCX=ffffffff822e0238 RDX=ffff888029660000
RSI=0000000000000000 RDI=0000000000000007 RBP=ffffffff8dd0b440 RSP=ffffc90004d274b0
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81bbc3a2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555572d3b500 ffffffff 00c00000
GS =0000 ffff8880d6a71000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f6f166e56c0 CR3=00000000470d4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000003c69 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcbda89700 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f15a11a8a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f15a11a97
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f15a11a91
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f15a11aa5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f15a11b2b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6f15a11c09
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000090
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000090
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000000f5534 RBX=0000000000000002 RCX=ffffffff8b7be449 RDX=ffffed100d4c663e
RSI=ffffffff8bf52f40 RDI=ffffffff8191d841 RBP=ffffed1003b58910 RSP=ffffc90000187df8
R8 =0000000000000000 R9 =ffffed100d4c663d R10=ffff88806a6331eb R11=0000000000000000
R12=0000000000000002 R13=ffff88801dac4880 R14=ffffffff90877550 R15=0000000000000000
RIP=ffffffff8b7bcfaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6b71000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000bbdffc CR3=000000004d90a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000003c63 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7185dab0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52d8811a8a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52d8811a97
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52d8811a91
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52d8811aa5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52d8811b2b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52d8811c09
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000081ea82cece RBX=ffff88806a7239c0 RCX=00000000000006e0 RDX=0000000000000081
RSI=ffff88806a7239c0 RDI=0000000000009c9a RBP=0000000000009c9a RSP=ffffc900006f8e38
R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=ffffffff9adc9da8
R12=0000000000000001 R13=0000000000000001 R14=0000000000000019 R15=0000003179ecb308
RIP=ffffffff81680485 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6c71000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055555a173588 CR3=00000000254ca000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000003c69 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555cf39d10
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555cf117a8 000055555cf115d0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555cf05e93 000055555cf05c10
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003028004018003 0180040aa0030008 000a90030fffffff ffffff040a800324
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060167b4408080 8008006003001000 5003001000400302 1000300302c01000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0142b20031656c69 662f2e01ffffffff ffffffffef080480 0300100000040108
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0210000880808010 000004060141ba28 040005a0e5840800 04800401c7080008
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000100000408 060a016c8c1c0800 0180030008000410 0004100006046fd8
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0120100003800432 0800020800010000 0208060a0109c000 1000088080808080
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8087e41000000401 0000060806080157 da08ce08000a1000 0c100006066fa000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000fffffffffff ff042e0800000800 0100000408060a01 6c8c081000018004
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e08000008000100 000408060a016c8c 1c08000180030008 0004100004100006
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000