last executing test programs:

24.12962555s ago: executing program 1 (id=66):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x2b}})
socket(0x10, 0x80805, 0x4000000) (async)
r1 = socket(0x10, 0x80805, 0x4000000)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0}, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc8001, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000893000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="0f20c06635000001000f22c00f01c36565d86b6766660f388129a5660fd9430d0f3a0fcc35f20f38f14029f20fc24686490ebc", 0x33}], 0x1, 0x9, 0x0, 0x0)
futex(&(0x7f00000011c0)=0x2, 0xa, 0x40000002, 0x0, 0x0, 0xfffffff7)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000500)={&(0x7f0000000100)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="02", 0x1}], 0x1, &(0x7f0000000340)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x8}}], 0x18, 0x840}, 0x0) (async)
sendmsg$inet_sctp(r1, &(0x7f0000000500)={&(0x7f0000000100)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="02", 0x1}], 0x1, &(0x7f0000000340)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x8}}], 0x18, 0x840}, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000000)={0x1, 0x1})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) (async)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000)
sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x48000}, 0x0) (async)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x8000)

23.316848991s ago: executing program 1 (id=84):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00')

23.250421972s ago: executing program 1 (id=86):
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x2) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f00000000c0)="4e873b", &(0x7f0000000300)=""/4096}, 0x20) (async)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x5034c1, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), r0)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000001540)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001500)={&(0x7f0000001380)={0x160, r6, 0xad2f591af9c4fe3d, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff001}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x23}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf45}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab51}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44e88527}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7a63b007}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x28}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x20040001) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x1, 0xc, 0x3, 0x2, 0xfffffffffffffff0, 0x1}], &(0x7f0000000080)='GPL\x00', 0x10000, 0x8b, &(0x7f00000000c0)=""/139, 0x41100, 0x4, '\x00', r2, 0x25, r0, 0x8, &(0x7f00000001c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x6, 0x6, 0x945, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[r1, r0, r3, r4, r5, r1], &(0x7f0000000300)=[{0x3, 0x1, 0x8, 0x7}, {0x5, 0x4, 0xf, 0xa}, {0x2, 0x1, 0xd, 0x1}, {0x5, 0x2, 0xb, 0x7}], 0x10, 0xfffffff7, @void, @value}, 0x94)

22.370607472s ago: executing program 1 (id=103):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00')

22.366899091s ago: executing program 1 (id=105):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000140)={[{@dyn}]})
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0x3, 0x2, {0x1, @pix_mp={0xcf6, 0x1c00, 0x3432564e, 0x5, 0x8, [{0x2a302c, 0x10000}, {0x1, 0xfffffffc}, {0x5, 0x9}, {0x7fff0, 0x10001}, {0x2, 0xfffffffd}, {0x6, 0x5}, {0x9, 0x8}, {0x8, 0x10000}], 0x7f, 0x5, 0x2, 0x1}}, 0x7f})
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000003c0)={0x3, 0x6, 0x2, {0x1, @pix_mp={0x131c, 0x9, 0x20363159, 0x2, 0x0, [{0x2776463d, 0x7}, {0x0, 0x7f}, {0xffffffff, 0xffff}, {0x1, 0x42}, {0x7, 0x310cb2b8}, {0x7fffffff, 0x80}, {0x614, 0xfffffffc}, {0x81, 0x6}], 0xa0, 0x7f, 0x7, 0x1, 0x7}}, 0x8})
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00')
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r5, 0x0, 0x0}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000400)='cpu.max.burst\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000480)=0x18000, 0x12)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000b7a3000000000000010000000f3c4406f7ffffff186600000200"/41], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000100)=""/195, 0x41100, 0x10, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x7, 0xffff, 0x7}, 0x10, 0x1652, r4, 0x1, &(0x7f0000000280)=[0x1], &(0x7f0000000400)=[{0x40000003, 0x3, 0xc, 0xa}], 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r8, 0xffffffffffffffff, 0x32, 0x0, @void}, 0x10)
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f00000007c0)={'wlan0\x00', @local})
sendfile(r9, r0, &(0x7f0000000000)=0x66ce, 0x78)
socket$inet_mptcp(0x2, 0x1, 0x106)

22.250734206s ago: executing program 1 (id=106):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84)
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4)
mount(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x3140884, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
poll(&(0x7f00000002c0)=[{r3, 0x2000}], 0x1, 0x9)
read$alg(r2, &(0x7f0000002e40)=""/4102, 0x1006)
sendmsg$alg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000011c0)="a9567b8a246117b7a7c5d6724a7867e27ffa4490c8f8d6a68c2d13379ab3249602b35edfeb523ebee962c8c6b39e4ff003456afa9d6fed2eefb51db42346f7a60e7f3bb53547f9576e572914763be7c5c3c12dd66a959e841fe8636636632de5e6f8011a1a13f3346ff4d99fdf5edda3256cb48fc9077febf8c454645953f58c09bed9b4dc613b1dcf68", 0x8a}, {&(0x7f0000000740)="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", 0x116}, {&(0x7f0000000580)="a15374856070badcf6de25a925e9a7ed319e6d271617cc62cbbb61bb5484fcd60a", 0x21}], 0x3, 0x0, 0x0, 0x40010}, 0x800)
mkdir(&(0x7f0000000300)='./bus\x00', 0x9)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]})

7.041674705s ago: executing program 32 (id=106):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84)
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000000)=0x4)
mount(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x3140884, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
poll(&(0x7f00000002c0)=[{r3, 0x2000}], 0x1, 0x9)
read$alg(r2, &(0x7f0000002e40)=""/4102, 0x1006)
sendmsg$alg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000011c0)="a9567b8a246117b7a7c5d6724a7867e27ffa4490c8f8d6a68c2d13379ab3249602b35edfeb523ebee962c8c6b39e4ff003456afa9d6fed2eefb51db42346f7a60e7f3bb53547f9576e572914763be7c5c3c12dd66a959e841fe8636636632de5e6f8011a1a13f3346ff4d99fdf5edda3256cb48fc9077febf8c454645953f58c09bed9b4dc613b1dcf68", 0x8a}, {&(0x7f0000000740)="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", 0x116}, {&(0x7f0000000580)="a15374856070badcf6de25a925e9a7ed319e6d271617cc62cbbb61bb5484fcd60a", 0x21}], 0x3, 0x0, 0x0, 0x40010}, 0x800)
mkdir(&(0x7f0000000300)='./bus\x00', 0x9)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]})

5.940629744s ago: executing program 0 (id=334):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
chmod(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
read$FUSE(r2, &(0x7f0000000300)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x21, 0x0, 0x150810, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@subj_user}], 0x6b}})

5.93977439s ago: executing program 0 (id=335):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040))
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0xa458, 0x88, 0x6, 0x9e9e, 0xcb, "0982aa400000000000e6ffffab5b00", 0x5, 0x6})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d)
getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f00000000c0))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff)

5.780936951s ago: executing program 0 (id=336):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)

5.780021221s ago: executing program 0 (id=337):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x178, &(0x7f0000000140)=ANY=[])
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x3, 0x30, 0x1, 0x1}, {0xb42, 0x9, 0xb1, 0x8}, {0x9, 0xf, 0x7, 0x2}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xe3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x11dc, &(0x7f0000000500)={[{0xd7, 0x4e00, "b1bdac49ae3af8486ea7510f6bfa589c17ca71b7505610878260f0287d01113edbc43d231dddbc9fa6a39d9c44397e1d743972f8eb545cde04c1d525cde9de59448c3a9afce13af2d6aca79b240af23b7fcc92e30a47c5d2c3ae738d385834f45d8dba7dbc084ba03c661573291fc5183e56c3f8deb5b36eb1d1e7cdc4ccdd1fef72d52a61c5ecf440af6d3cc4b051ab5d5863ec265e15b70177e4698fb55bc72d66c30db384066b215d173a979d226d15210d615d0affdf78b18b55afba4dd8a930ead096af3cb1fab4cf97099f0b2c524978547a3c83"}, {0x66, 0x4e00, "1eb2546372ba0fce9ed99cd83e935b838d9ccdd9ed988b84714a37be28498247e3657bfafc5f59fcacc38c3b299bb2ed5ae88dae6da1b002e91338a8efc549350c5b19cb338e24ce6dc7235847120fe3830c1d0024bed8e155f0633ce50920a16f3ba8335bde"}, {0x43, 0x4e00, "ee6107b6bb4f6207966e53b897509527390133344e04237349316f6eca2d84a2e3a49ccc808ab335deab6334bc76f8a264e48df3569189d522573d2ddd335d262f2869"}, {0x5, 0x4e00, "ca2261f018"}, {0x37, 0x4e00, "becca6a62d959c945ce67b3db9f05684c0f0498293cafd40c530577bcb7bd0deec615b46e10ad80fa3903437b0fa22b762d4e091a03fb4"}, {0x1000, 0x4e00, "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"}]})

3.827756476s ago: executing program 3 (id=348):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
read(r1, &(0x7f00000001c0)=""/36, 0x24)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x3)
ppoll(&(0x7f00000061c0)=[{r2, 0x104}], 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x633fb000)
r3 = fsmount(r0, 0x1, 0x0)
fchdir(r3)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000000)=0xe8)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, r4, &(0x7f0000000100)={0x0, 0x2, 0x9, 0x2000, 0xfd, 0x9, 0x3145, 0x8, 0x1})
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]})

2.960763199s ago: executing program 3 (id=349):
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x10d880)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/130)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000100)={0x2407, r0}, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0x7, 0x30, '\x00', 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ppoll(&(0x7f00000001c0)=[{r0, 0x20}, {r0, 0x42}, {r0, 0x42c2}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x55]}, 0x8)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000280)=0xb0000)
landlock_restrict_self(r0, 0x0)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000002c0)=0x4, 0x2)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000300)={@none, 0xfff})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x94, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x4, 0x2, 0x20}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/27, 0x1b, 0x1, 0x34}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}}, @exit_looper], 0x31, 0x0, &(0x7f0000000600)="d64ee1babe8706a9dd170ab6e768f3b4d9d1d0c5ee316987f083f4a4afdb7e61ff6f4319f08b0793829db858313c916f5b"})
r3 = open(&(0x7f0000000680)='./file0\x00', 0x4001, 0x3)
ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f00000006c0)="e98cd364d3691e4a81593cfa8ede77ddf5319fe8754e81b3e1e97bfc830d2d5afb820b7bca8f26d20ee68b7227d7d414ae280c404976030a30f5a744fb01f6e141333e2be00422fd47125325596fb5733b914eae387ba6dbfd3a17e0617cb4bac93e4936f1323ae30bfdeee6891fec2f46de31713596f3b1c88ee3ec509705e92f322eb2239defbf8e1362f4f04afbe4e3c6568f7c9b68e28386fbe5601b993d2dd375472162d92c813d765d7230090bf55e061919cdafbaad0385")
write$UHID_INPUT2(r0, &(0x7f0000000780)={0xc, {0x3b, "1337f92e5ec5ba50123c39f3ea910e119dcfc70de33c14369cdee08bb2975a642f35245c69eaa7c1e9bd39f686b2d69f6a9e403849ad2b7b29dfe3"}}, 0x41)
sendmsg$sock(r0, &(0x7f0000001c40)={&(0x7f0000000800)=@l2tp6={0xa, 0x0, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0x43}, 0x80000001, 0x1}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000880)="140b72694bd59bf2237acbcf6f4ab316dcd5266da258739638351889c646658d59d3f99ffc659505529a55bfbecc6b0fe0b4bcc75c0d8293f4916d71a08fc36cbfede95e1f71c68f9b9315e74777cc1c1015c779cd5e4a23dd4f7a18d869ade8c84e851514d4270e216b9cd33d58231f", 0x70}, {&(0x7f0000000900)="fd7b14987121edee51073f683591c112cb3851d9385b1ffcba6c878ff7ffed6a70a082e9278cbcb3c78de5dea20a9579497f5bc0bc1ae4a7b41ca6b9a4d3ab7993c52c2c0265971310263adcc3f92aac17393cf49ec2e5a64c58cb991a1d6f14c8e2c7549747d0ae3c9170d040ed22f20735322507f6ed8896af3ea8df33bdefd133e0e6814a2dd04b7c14aee3d465c97112f2afd71cd2c2b6ec6e78ab91b5d23b7bd2a17a0671de8f4750b442a21e804b3dae27b0c8443d176f6377ba40e46fb55147e653c03c2728239236895a610df8c2eaecfa70e9c20d5915de4520a0d7645aa37ff3ea971520621106f2ef1ffc52ecf4361f388c77875922e0b1f3f9432d5910d51eef639fdbfe1d5c451da7575422d4834ee55d7e3dff3fbb0f108ffc2aab9ace8df3255d46f15db9c9db0beb58572aa1d656d39ae439c27bd154d2235d35cff2c6a54a16d6673f44a86362bfdc87b57728e6495e6aa0a3d645a67db0a8fc99578ddbf0b81b937a2e73479eac8a2654f75ea33d2eb455aa3e80fa9b2578892c2f5231af47f7d2c276a10e9282aa22461c207535bedf5d1ae475f0b7a2dda8aed08f62ce691d1b1ba39c07faa079fd648fda708c24b42eb1eef57aebccabc7678d0b83768b880b75c563e423e6e614e20e1e805cddbd7606f75839dae8f81417680664f5989f15a985f250930a223af695a26eb666856b1628e2c8158c9eaa5f8b6e5450153ecdbeb03a84ec994092ef1528b944225ea8692d3dfada6fb462a56777df53ce1ecdc3ac7afcf9ed1c9b72296a21080ca4bebe79c9dfa284b8b7a14d7f25d1eb734ee6ab441fdae738315dde1432421d542f8b5fa4ed645f3bf120279915d59a65a908d86707b848e8f9d5d2b2add8aa24a322722d60b10e4d0d107c841a5605bc99344d481674e4a4d44ae94a36d864639e8b67494d882548d74f4881b88945e51939dddd9f9dcedb199d4d9375091ac2e9b536c00c1cc3824052fbd7aa1ec8b525fff2dc176df302ddec6f84f80c0d3ac6b355f921d4f519c6fa64594b50a85ad224e9ccbe024cfbebc3ee85d826ac850d8d5517a822cf85f5db719b144c45aed51f58ca014961ca4dd21053b3926785a24479f11ff4a1ea877843d664e06d45f0def3879e07d2319e4e9fd761a2612834ab08cd1bd35e48bf1b65140136296fb6c4b168e8dbf471adedc1850b9d5845962e979e3d63074149067bcd77d21d1c728cd17d4b45b8820f756e0cf794129aa56418e8f603e2f383c863c5d70a1e9c815cec4d384c0a6577aee6d357b53b3e7f1505a11b39d21a74c7118e944dafcba3e233caac0c65adfd4e782fcb16f3e588ef7f845a5045cb75712b28832d25ad3c17287d5fb8a7e9d638b09f14d9d31e5f647fec773ce67c2e0d3ea0334003dffd3c55648ba47f185fe21bd98e0a2f0574b79ada8460dff4aabc5351534144c8a1b12a5d12489cccea84b5e1273801745fc314d3b5cef42832dbdd94ca3e1a72fa67a85e1405dab5cd9697c333429ee34ce8362c628700e649075404cdf94276d2ba9d596126f6983f54bed4ca68bb9485dea7797e757a9fd1395c15d521dc260346691c8ad7a499305f2f34129930c586a0c9cb57baf91a2777ed4e5fc6b3e05d52df14e2e4207e65ad3284cde4aedc5afb26ccefbd04c107c42e0ca4422989242a59257b0372037752db43d0b1a1de560286202f0b4756cd24e88e05657c9cee6057873ca3393fa14823d8002e52c8d0ae45882e6e05b4f953bccbf61a956d52adad95615be1bac71757747998a3a26b6486a2ecb0ec5667a864d462d4ef493f51953a78533cf991f84fc85b6e032d7dd7723679d5cadc1ee65c6000f0ed277352a02c40a8d0d214a15fd6a0d778e1265060c9330a1fa0b031efe313db9c710836b4f42eae83ebaa388c2c2b7a7f500427d1457c30abeb73b0f0d220101690b4dea9a9c2df40c872e28c0fa83da67e6a7d3788102cc12c11733593157fdf20a4792868d329ec9769c74f4ef0c0eee78b661ffbe8412cdf9acbc134bbf75365a10b640fa8e42fb2aec8493aaafd87c0b8bcc896898244bb0af3205215eece146a2780d266e78e57cb3c31df221800220106494e8a1f96bc07050dfbe21fcad425bcfb7ed438d37d63e026138131581482574fc8cf33765682d8a6ebc2286346849f2e32af525ee9a5e0d82fea55b97839bed6f08abd1fb26abc20d2f6801c3f45a554d1ef21bea115cf857139d40e4d8bf33f17692725ffdf53419316a4b7751e7bb4eb6db2227f82cc0a7eed43e01029a21139550ea32ea7fe89e06e6f4321012f85e38d18fd96702992180a22847654c9b15f77b70872a34f76574ec2b0a1e613dc4c8deae28ec2a83668d6b4632b09daa58aefd310359fbdcb1d483237c1a128bf8021dfd96b3458a08c9c778bd9444985e384228301eb0bde1f5b86248b0621d8536d2d1c741a392732ec46b354b434f3d78d5f02b6cfb88a91a6d6f85d74e01b2c32ab9efc69398adbdf91fc25cf4b89eb3cd9fadb4191eccb56abba7d3edb7dcacb4237eea85d1b779d6307ba490bc05d3ef7a82b0e8d6ede9567f2a8d890451293c3fcc0fa8e9521014849ecee8b2e8340f5d5b8f4d19b7b8bce4161fb3889a0734ae2ec1637c8ba2bba4623d9a41ea19c5a088a27e6a06d52dd8c2062bedd898c91083526f7c6e44e719cc0f87465ffb858f51b7ccc899209f849f7c8f5f5f20848891d130326162fc7a4d7f146dc0f57ac8b93bfb28c4a4472256b62bdcfd43973bfbb6d2ceaf797c7823ce9736e3bb1cdca4d1b252ac09cb30840b7edf248c3c5eaf6e3781b865c02058f093ea9e9802f592de750cd3db2cb6757cddc9cc60179f76b7e1e077b5294bd83c394db046d5f8a38c82a6d45d233f69d30335a31cf6c8ca9a38bcc97c9dd6b73390772064d10fe41e1c8b031656b7872e2c9dd2645cd4f74673f6d90f6958af3af22dfd032297f04c5088a7740cb1c6ea9ea0903bc137238991ae51cace4e2c3b94a0158d4eaa164c5bd238ae38f00cac208d7cef3fa43ae6a00168bc30c55c5de38ae6746ab4473f247cabc656bb1e1664d45552077f90aeb023dc2671846d4ea070d5e192e47697055973cbae63cc252a6324ac27a2b0d5fca317a8d25824f0d73f725e3dca267b9f70d5966dae8846b6e56fc54ae633a76ad3d35e320295d09684d6affcb388e455acf69490da3eba2e58b37d362be1cd61eb9a3f115f7703273678b9a12ae96294a3c4fae89565fac8315fde347cabf9168b70abd5e0c3ae7b617df53536d78b481aa281eed697295125ae0346984197b09fb9d7819c02ca6d5a16a8548831e2df1d01366eff2ffd4ca4e117bd126e83e50e36a083cf0ebb932d546ddb7efb3ca86e53bc86761219f3615cd9b0bd849c2e034c1eeeb4a4ad5826616c59c26523bd9deabf3b5b42e56244b412b436c3e028768cb05ae57a06d95d1864af530eddc867dc991a879410d73a880a9fc1a5ea13910c3f6000916677147cfa4cb0453f4ff3783571945e50deafc84b7ec11c85e80db5bca039be1f8d16d0f5449cae0070040462e2c17f252fe5b55b389e84b916b70fe31ede494327ff5e2e35ef57ecf6368fd1617815a2e0248a0ff59cd1cc31441d41631c63fd21abfc6caad94e6e4bc2953bec69ec428d9fedaa43e4951f0d008072a237c72b13efbdb108e976c694946ae69df718d09429ca2e47cb3013d346d22a82473b693b0cebb70060aee13ac95b69dffda211f1363a4b36a60923f961dae1934db9b28113d63dd994db9127312992c665d2d13b3a8abe314108d91a969d4417da9635035f57e6baa4832468cfea996211d008a76988e99bd2ec908c1a32aad736c328c0fcc7c6a4a61df1bc4c3f452f7cbcc1f3e3f3bcae8796f530a8afa90addf241dbc524330fb5f0410283d41c67ce5012f3e268e874d54b5e245c2a75e750102f95f5c7584faf359a128a82be56daf373b64c9b85c0f6c544800ddf52398668fcd25282b7da1c08713d06da7aeffb531ad291613752ee80b9422f10c73e723a82c7644fea5dccc8fabc03a5114cd0e1e583c76cf3dceaa6e8a23ec38c4614fa40170ce36b49313dd4b79831bacfe831f39a8adb1023bc69b56cab65315aa39c1d836f2b7f820e21514e9be3b9b82a670ae83f271cc61b3c8c30e108ab3ec930302b41e2df467333d7f61bdd0c4347c7e2e9f46714f929386822af607e5870dd6335fbd76458971f84feefc6b920f950c68a1dc6787439323c05085b1df9d41a14e855504d8f03ab54831b67db044dc354968fe7d879c3a618b78f442ef1e1d529600c47183b83b303c600e5350d7b70f75a1e005719e599492b1eb9f2cef8416a883346e83616261548084350f697e747acaa9df178e6a1f08ef2c38ab4ae1ae031b396b5d3f0ef00cd56820398bda76a688ccf8888e285efb1cbf6b3ef862419d4e1e592e334c7ad1f321034f45bb7ea64911cd9082afd6f18d4d9a4c723e563af86f775f9722aa57801e7419b46e629bd61197f54171d3e51df1e85e18f557afaa5f02ff64ce1c110abc796a247a9c459f5702aaa7687072ed8465f537ea0f2efd5ab7775a80a73218e09406bfa92dea960470e0a51cb08f6d9c159f6eaabe1ea504b901d5fda697d3e9b2183cca5554f6313819e87ecc5eb206f7fb5aa82d6b3ee76928cfcf81ee8a228a640c1fa7c92f8e5e2eb28144f1df8abbc7bd0a431e421e4b4fd27e755956a53e96f7bba355e7befe57fcd1b66cdf7b14e2ef8d9b30cc0dd9da77937a484530f3b4904c10ec29a9c0b9b1f5f035ce7dc7953b8ed4d503fd50f37ce7c986a347a5d9ee2f9da667077b699b88957baee9449cb6d488a3ce748e6f5109c3a65f34fc9a02a4ec7f510ce4a648a3b6cc498c915c3d5c9bd8e0d5b673c2d01d93206e05b66d364e9325799cd0aad2593ffe4280dabac87b0d13d60b95bd85b4eaf5083064795623b8dbae5df23df6d772e96bf53e40818164dd4efc91c2ba31994da8389846de59421017d11bb49dc0b4a75e9d9fab40cd0a7224259f4c26fe2e1c83ca2c77d8d7ccb2af36fbbc5551abe491071272e3520786a6d3e79fabd132ee4b1dca5dc973e5fbaaa68ee3f63fc5de0884dbd8990a29aaec96ef92b219e8225d2b59bf25d7042e4a947614d81ef33c882011d2e2e311b19a2d78f5e231504422ce9f4c4a0375b6086eef4c107a7a724274955d04d820dad68adcccfcdc1500e3f9ad1a2a4e524cae8c1dd97111b2d297df467bb0a708b8bc6923b438af8b356ac61d36b30223a5d85d449c20cb39538badfe18aed49db27fa8d01d24a34c600192c596386fc41ee1668d45937742388f54a3a3cf901c27530ef514e84d58905e85a9ada21c587574443e0295a04e8a3607508e9e8d03a1121635ead1afca7121c8c11948856c6175cfcd08bd98ebb2827801168707d4276927917c63886a8c7998c7bba0cde90bf78679034f3a3ecf04eb8b751be719eab5ac7b8b8a8d13af9120c1a62eed015be3067f6e5e10ccef1a588602ec9015eb9872644596c6a915c7ed2d3179ab129f10c8e0fa39d411dbffea8ba9906946940158416ec16ad020b0d96b50015ac0dfd92d87ad8268bc9115c6e83bb55b1a60268803b054b957e3c64c70928c9dd1b179751b18a56e7e09fcff01ab0b890520f5cbd92c65a76f80f8659b2eb6543ca42de84358b3a05136a59d48991edb3d39ac50b897093ad677352a56478f4fe2280bfa5798cbb597e422bac206487bfc2d2ce8060f1f", 0x1000}, {&(0x7f0000001900)="90ed7487dc31b37d3de3c0084311ae0cf1fc8289955699436d0b8c52bda88ef3e3e6f1583a3fe383845c658754d572d582b8d8483d04aa370888493334e988e6089c326ace5df830bbd060194b3e35714c30cc0173386025818253a66c8c2d4fb946d05fd9b842c522942eba9741ab3a1dd95f10838032b873f7688bcb6cc25df9ca48551c7564f03a903b37ad8649d9a58cb1055a2b04ad76c8bf39c76a8b19bd6e850d12ba8a64f59c9ddbce47f5df04d71e52769d4e6bdff26afd49", 0xbd}, {&(0x7f00000019c0)="d79b4c4baf803f0e8fe417eaa7e019b2f48ec3a006d72f122f0ab43f35c8a0352f53b772e87128ebc5c92a29a8bc0d6d567ca507ef97089e912fae904857ea01ab40f175096c20d48b718427da587d4c6a8f06235c7ae432250e00e5ab9072af9fb792baf85a747ba9fb5020c9ffe11d488689c1e95667379179714ed5ac66d05b2c657b65957a1e7b468bdfd48374bfee592bd0f7d2fe0a46f1bb32c916b05739", 0xa1}, {&(0x7f0000001a80)="87e09ad5f44e8b113e583fafc8bb5d5767addfabec", 0x15}, {&(0x7f0000001ac0)="4201ce25d2e59500de6c8c293fecfbb7c50a3bc7488440633d3560199cb51bc6c5c035daf96632dff25b86e7b3f5361e4a935aa6714371729d28a522d759e233a2775dbdcd310897fe883d5e34c0eca4d25bd1b28c6244dcb5f6154166d052d8557800ca8b60dec5fac7b60840b6b737a8f15ab5fb178e6dce03d24f74c8797ee2ff9fd3bac70f32a4c0498114ad4753fe", 0x91}], 0x6, &(0x7f0000001c00)=[@timestamping={{0x14, 0x1, 0x25, 0x83f}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}, 0x4)
setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000001c80)=0x2, 0x4)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r4, &(0x7f0000001cc0)="1910cb7e7331e9123c036c91888b1d32aef662c3a7078255ab09954004ac62e10702aa4f3cee07f9fe437723a253bc96e06b212308e081a148b9cc4c2296ba1497974a306408513b6567b4d750ddab2ed20489a494b2882030a14ef143647bee0fc135661ceafdcf6704fb31810bc668a6185381076a079ba3ab77e314ed41a34a2ae0edc7b7051479754eb27b962c428c183041b0569d4bb81094b8ca7dd4b8615219e64fd1a208005f9e51a5563d6539f0ff742cd100ef7fa2340a17248125a1275868c7eb11a448c6d8dfa3ab", 0xce)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001dc0)={0x0, r0}, 0x10)
poll(&(0x7f0000001e00)=[{r4, 0x224a}, {r2, 0x20}, {r4, 0x204}, {r4, 0x8}, {r5, 0x4}, {r1, 0x2000}, {r2}, {r2, 0x63a}, {r3, 0x2002}], 0x9, 0x8)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f00)={&(0x7f0000001e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x1}, @func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x5f, 0x0]}}, &(0x7f0000001ec0), 0x37, 0x0, 0x0, 0x9, 0x10000, @value=r3}, 0x28)
close_range(r4, r5, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002040)={0x2, 0x0, [{0x1, 0x70, &(0x7f0000001f40)=""/112}, {0x80a0000, 0x61, &(0x7f0000001fc0)=""/97}]})
renameat2(r0, &(0x7f00000020c0)='./file0\x00', r3, &(0x7f0000002100)='./file0\x00', 0x2)
pidfd_getfd(r0, r5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000002140)={{0x1, 0x1, 0x18, <r7=>r6}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000002180)={'wg2\x00', <r8=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000021c0)={r8, 0x1, 0x6, @broadcast}, 0x10)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000002500)={0x2c, &(0x7f0000002340)={0x3078367bc3b1a4ca, 0x8, 0xac, {0xac, 0x10, "fc3e6078ac0009561502a582ee15c6854e2099d54b387a04e4bbcce826eb5fbad0a265198c4320db36e9a4327d1493254b4b91ebdf1f8de3eb0c352d7b3f3a4b61ecf76c9fad6cc8bb19346ea4481da1ac33293763b08d9eb57126ad76bf3b9a63866c91dcb7dce1e1d02fd6ec4d0dcbc740cd91841093562267b152bc154a72b3370b6d942c4fc724adba6baadcc3b16dd2231b5ea6dbec64b5e9d48dd5474798a7b4d8a2e0135708d9"}}, &(0x7f0000002400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}, &(0x7f0000002440)={0x0, 0xf, 0x2a, {0x5, 0xf, 0x2a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x0, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0xc, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "4997a3f56567fbe4dec7ee0c6d5fddc7"}]}}, &(0x7f0000002480)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x0, 0x59, 0x2, "761eabb9", "dbe343f6"}}, &(0x7f00000024c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x8, 0x1, 0x3, 0x10, 0x8, 0x8000}}}, &(0x7f00000029c0)={0x84, &(0x7f0000002540)={0x0, 0x9, 0x83, "35b4630330f6afc3dccaf4004fffdbc792ba2d6682fac0144f89f7ac0d5b25ab7b3f2716a555c7976e451dc4112f156da93da189983ec46f45e324a1d4c084741893d8015e4632e33d2b2526d6aae715b5ddb7995fe367257d737ac186cc1332755ea5de85cd85193fefc19408c3f5885d0397c2bdc729db98139159288e5738e3d668"}, &(0x7f0000002600)={0x0, 0xa, 0x1, 0xea}, &(0x7f0000002640)={0x0, 0x8, 0x1}, &(0x7f0000002680)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000026c0)={0x20, 0x0, 0x4, {0x110}}, &(0x7f0000002700)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000002740)={0x40, 0x9, 0x1, 0x83}, &(0x7f0000002780)={0x40, 0xb, 0x2, 'nG'}, &(0x7f00000027c0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000002800)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, &(0x7f0000002840)={0x40, 0x17, 0x6, @random="95a2c3d65ae6"}, &(0x7f0000002880)={0x40, 0x19, 0x2, "e578"}, &(0x7f00000028c0)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000002900)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000002940)={0x40, 0x1e, 0x1, 0x31}, &(0x7f0000002980)={0x40, 0x21, 0x1, 0x1}})

2.710597862s ago: executing program 0 (id=350):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x2, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000300)={0x3, 0x1, 0x9, 0x3, 0x4f53850f, 0x4})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28)
sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x40)
socket$inet6_mptcp(0xa, 0x1, 0x106)

1.601002853s ago: executing program 3 (id=353):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f0000000040)={0x0, 0x10, 0x5, 0x1}) (async)
ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f0000000040)={0x0, 0x10, 0x5, 0x1})

1.467893473s ago: executing program 3 (id=354):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c0003800400010004000500180001801400020076657468305f746f5f626f6e7453516be21da26164000028"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.467574591s ago: executing program 3 (id=355):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x200, 0x3}, &(0x7f0000000480)=<r2=>0x0, &(0x7f0000000440)=<r3=>0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189)
r5 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000400)=ANY=[], 0x1df)
write$binfmt_misc(r4, &(0x7f0000000040), 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f9e01177d3d458dd499286100", "90be8b1c551265406c7f306003d8a0f4bd00"}})
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r7 = syz_usbip_server_init(0x1)
write$usbip_server(r7, &(0x7f0000009980)=ANY=[@ANYBLOB="00000001"], 0x32)
syz_io_uring_setup(0x554a, &(0x7f0000000100)={0x0, 0x91f9, 0x80, 0x3, 0x159, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000380))
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000700", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC=r2], 0x1c}}, 0x0)
r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r9 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r9, 0xc1004110, &(0x7f00000000c0)={0xe, [0x9, 0xa, 0x1], [{0x20000}, {0xffffffff, 0x20000000}, {}, {}, {0x0, 0xfffffffc}, {0x4}, {}, {}, {}, {}, {0x4}, {0x0, 0x400}], 0x5})
write$selinux_load(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="8cff7cf9082000005345204c696e7578"], 0x2000)
syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x200, 0x1000, 0xc9}, &(0x7f0000000340)=<r10=>0x0, &(0x7f00000005c0))
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}]})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r11, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28)
write$binfmt_script(r11, &(0x7f0000000780)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4)
r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]})
msgget$private(0x0, 0x0)
close_range(r12, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r10, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x11, 0x4007, @fd=r8, 0x1, 0x0, 0x0, 0x1, 0x1})

958.678278ms ago: executing program 2 (id=358):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200003, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f0000000380)=""/4096})
socket$netlink(0x10, 0x3, 0x15)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r1)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000})
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x101000, 0x2, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x120000})
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
mknod(&(0x7f0000000180)='./bus\x00', 0xc000, 0x100)
mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='jfs\x00', 0x8080, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x202, 0x0)
dup3(0xffffffffffffffff, r8, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$P9_RGETLOCK(r9, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r9, 0x407, 0x7000000)
ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000180)={0x9, 0x5})
timer_settime(r7, 0x0, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000000c0))
timer_create(0x4, &(0x7f00000001c0)={0x0, 0x15, 0x1, @thr={&(0x7f0000001380)="708d904cfe83e37890ab3f1e36e3e0444dba3e066690031762c5592001f7bc2cc93535fcd35bf93d8dd27ec39a7b5883b6cb298ed67b0b1c12e4d9d8b52d2156a2e1eeac", &(0x7f0000001400)="a3cd2a42fed78107b632dd5473af454c4417bca868d6309af32fec867366b8fb3bf9900affbc86dcfa2b82e1533b977daf3741bb27867f5709681486912b42ab36e6a5b45fd4c3d9e0de1653b59ba12a1d32f4760ab9ca6932e37b"}}, &(0x7f0000000240)=<r10=>0x0)
timer_settime(r10, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, 0x0)

750.330347ms ago: executing program 2 (id=360):
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0)
ioctl$I2C_PEC(r0, 0x708, 0x3)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x80, 0x5, &(0x7f0000000080)={0x15, "863d59f4fef96442567d019b8e6cda5af9b05bdf9bc19d62c41fb384fb382bd4c0"}})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
bind$inet(r3, &(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000000)=0x401)
ioctl$USBDEVFS_RESET(r7, 0x5514)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x6c}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x0, 0x0)
readv(r8, &(0x7f0000000380)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={<r9=>0xffffffffffffffff}, 0x106, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0x40}, r9}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000004c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, {0x2, 0x4e22, 0xc00, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, r9, 0x9dfffffe}}, 0x48)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, r9, 0x1c, 0x0, @in={0x2, 0x4e23, @remote}}}, 0xa0)

508.933195ms ago: executing program 4 (id=365):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000180)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1fffffffff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x552})

449.600258ms ago: executing program 4 (id=366):
fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) (async)
r0 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000280), &(0x7f0000000300)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd97<cAZR\n w\xe6\x1c\xf0(\x96H\x88\x00\xd3\x1c\x16cj\x10\xd8\x92\xc9ad\xc0aR\x12\xd3\xc2J\xcb\x9a\xa5\xce#{e\xd3\x11\xc5}\xb4F1\xfb\xe6\xd4T\v\x87\x04\xcf\b.\xcaO\x04\x0f\x062\xcaL\x81\xa6\xbbp\xd3\xc6$4t (W\x92nr\xbe,\b\xdb\x7f[', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd97<cAZR\n w\xe6\x1c\xf0(\x96H\x88\x00\xd3\x1c\x16cj\x10\xd8\x92\xc9ad\xc0aR\x12\xd3\xc2J\xcb\x9a\xa5\xce#{e\xd3\x11\xc5}\xb4F1\xfb\xe6\xd4T\v\x87\x04\xcf\b.\xcaO\x04\x0f\x062\xcaL\x81\xa6\xbbp\xd3\xc6$4t (W\x92nr\xbe,\b\xdb\x7f[', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x880)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5ce"]) (async)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5ce"])
r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f00000002c0), &(0x7f0000000440)=r6}, 0x20)

448.952199ms ago: executing program 4 (id=367):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00')

416.819837ms ago: executing program 4 (id=368):
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xc8000, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000340)='_', 0x1}, {0x0}, {0x0}], 0x3}, 0x44864)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x1000000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

280.260112ms ago: executing program 4 (id=369):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@getlink={0x34, 0x12, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x18400, 0x2004}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', <r3=>0x0, 0x2f, 0x5, 0x3d, 0x1, 0x40, @mcast1, @loopback, 0x8000, 0x7, 0x6, 0x949}})
sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@deltfilter={0x2c, 0x2d, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0xfffb}, {0x7, 0xfff1}, {0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x44000)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x7000000)
fcntl$setpipe(r4, 0x407, 0x100000)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x10) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@getlink={0x34, 0x12, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x18400, 0x2004}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x3d, 0x1, 0x40, @mcast1, @loopback, 0x8000, 0x7, 0x6, 0x949}}) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@deltfilter={0x2c, 0x2d, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0xfffb}, {0x7, 0xfff1}, {0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x44000) (async)
pipe(&(0x7f0000000040)) (async)
fcntl$setpipe(r4, 0x407, 0x7000000) (async)
fcntl$setpipe(r4, 0x407, 0x100000) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async)

279.871842ms ago: executing program 4 (id=370):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r1, &(0x7f0000004100)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="10000000000000000000001907000000"], 0x10}, 0x4002810)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req={0x7, 0x6, 0xe4aa, 0x6}, 0x10)
recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000007c0)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1}}], 0x4, 0x400122a0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000002b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r2], 0x80}}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0xc0, &(0x7f0000000000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x4}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}, @in6={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7d13c246}, @in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r3, 0x3}, 0x8)
recvmmsg(r2, &(0x7f00000059c0)=[{{&(0x7f0000000340)=@ieee802154, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f00000008c0)=""/247, 0xf7}, {&(0x7f0000000500)=""/98, 0x62}, {&(0x7f00000009c0)=""/183, 0xb7}], 0x5, &(0x7f0000000c80)=""/226, 0xe2}, 0x9}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000000e00)=""/4096, 0x1000}, 0xf4f0}, {{&(0x7f0000001e00)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000001e80)=""/176, 0xb0}, {&(0x7f0000001f40)=""/157, 0x9d}, {&(0x7f0000002000)=""/152, 0x98}, {&(0x7f00000020c0)=""/77, 0x4d}], 0x4}, 0xfffffff6}, {{&(0x7f0000002140)=@caif=@rfm, 0x80, &(0x7f0000002400)=[{&(0x7f00000021c0)=""/234, 0xea}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/137, 0x89}, {&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f0000002380)=""/85, 0x55}], 0x5, &(0x7f0000002480)=""/150, 0x96}, 0x7}, {{&(0x7f0000002540)=@alg, 0x80, &(0x7f0000002a00)=[{&(0x7f00000025c0)=""/108, 0x6c}, {&(0x7f0000002640)=""/235, 0xeb}, {&(0x7f0000002740)=""/248, 0xf8}, {&(0x7f0000002840)=""/222, 0xde}, {&(0x7f0000002940)=""/178, 0xb2}], 0x5, &(0x7f0000002a80)=""/66, 0x42}, 0x1}, {{&(0x7f0000005140)=@hci, 0x80, &(0x7f0000000780)=[{&(0x7f00000051c0)=""/181, 0xb5}, {&(0x7f0000000700)=""/13, 0xd}, {&(0x7f0000005280)=""/136, 0x88}, {&(0x7f0000005340)=""/192, 0xc0}], 0x4, &(0x7f0000005400)=""/176, 0xb0}, 0x3}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000a80)=""/44, 0x2c}], 0x1, &(0x7f00000054c0)=""/167, 0xa7}, 0x5}, {{&(0x7f0000005580)=@generic, 0x80, &(0x7f00000056c0)=[{&(0x7f0000005600)=""/160, 0xa0}], 0x1, &(0x7f0000005700)=""/221, 0xdd}, 0x5}, {{&(0x7f0000005800)=@nfc, 0x80, &(0x7f0000005900)=[{&(0x7f0000005880)=""/113, 0x71}], 0x1, &(0x7f0000005940)=""/84, 0x54}, 0x4}], 0x9, 0x20, &(0x7f0000005c00)={0x0, 0x989680})
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04f4b263e3782f0806000000000000003400"/33], 0x7)

148.160145ms ago: executing program 2 (id=371):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (fail_nth: 5)

79.510495ms ago: executing program 3 (id=372):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/109, 0x6d, 0x1, &(0x7f00000023c0)=""/4096, 0x1000}, &(0x7f0000000400)=0x40)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aae", 0xb)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
r3 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc777", 0x7}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/247, 0xf7}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, <r7=>0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r7, r8, 0x1, 0xa, 0xffffffff, 0x802, {0x1ff, 0x1, 0x3, 0x67, 0xf4b, 0x2, 0xfffe, 0x5, 0x412f, 0xe156, 0x7, 0x6, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00f7ffffff00"}})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="c422cf4a2d9bb43e3927fb4d45ea4f92c0de363dcf80a14c28cdcb2041200cdd92a640c20a2030ff412125494001dede3e27057480b8535be100804925118d63369eda9e03bdb569dfabd04fc103e28c3c5d390f8b24f76dcb1c81ea4d841854ea08b3babdb63fdd872ade597080b022000000", @ANYRES16=r10, @ANYBLOB="8101000000000000000003000000"], 0x14}}, 0x0)
r11 = socket(0x1d, 0x2, 0x6)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x8000, 0x8000})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r12=>0x0})
bind$can_j1939(r11, &(0x7f00000000c0)={0x1d, r12, 0x8000000000000003, {0x0, 0x0, 0x1}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000033c0)=@newtaction={0xb34, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0xb20, 0x1, [@m_mpls={0x15c, 0x11, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6558}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd66c1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x6, 0x8, 0x2189, 0x100}, 0x3}}, @TCA_MPLS_BOS={0x5}]}, {0xfa, 0x6, "8f36a4725a88d92e0a734dc5dfca940c8e97919476e20bb613cf79cf055f4cfc96b3e925c6bdc8dd63d86cd471e15724a957022297d97da204318990b16af0572f7c3f6987eaff134a26fb8aff4bdb80261154c17a28fcf78166850500000000000000b859c26d4e1c1db07554fbe99c702dd0a235d8e5cbda7971bd1bb2839731030e8facb0273ece72e096a9933cc1232c8758e5348b864dfc82489bb47aa1efeeda8215baa0ba25e1853bc7d9e82d8c9f66317ff85bb306c7336901c70bcbfe530d16ab1f72602054df26ad3b3f9d72ebd3b4aca41dd0920c3ef89f96f7a73c7c997a3a63b7b228d7b3c1ebd61cd859e66f718e48"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x498, 0x13, 0x0, 0x0, {{0xb}, {0x410, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0x7f, 0x4af, 0x7, 0x9, 0x6d7c75fd, 0x1, 0xa, 0x2, 0x0, 0x7, 0x5, 0x0, 0x3, 0x1, 0x101, 0x6, 0x0, 0x4, 0x4, 0x2400, 0x200, 0x5, 0x0, 0x3, 0x200, 0x1fa, 0xfffffff9, 0xe, 0x8, 0xffffff33, 0x3, 0x3, 0x2aa95ded, 0x0, 0x7, 0x0, 0x7, 0x3ff, 0x6, 0x4, 0x81, 0x5, 0x0, 0x9, 0x68, 0x3ff, 0x3, 0x6, 0xc, 0x7, 0xd047, 0x71e3, 0x3ff, 0x0, 0x7, 0xf, 0x9, 0x3, 0x8001, 0xffff, 0x5, 0x7ff, 0x6, 0xd0, 0x7ff, 0x48, 0x2, 0xaaf, 0xd, 0x3, 0x5c7e, 0xceca, 0x4, 0x72, 0xfffeffff, 0x8, 0xffff, 0x3, 0x8, 0x3, 0x9, 0x7, 0x5, 0x4, 0x1ff, 0x7, 0x6, 0x2, 0x6, 0x1e8c802d, 0x6, 0x1ff80, 0x1, 0x0, 0x8, 0x9, 0x2, 0xb, 0x1, 0x3, 0x2, 0xf, 0x4, 0x353b81e7, 0x80000000, 0x4, 0x6, 0x7ff, 0x800, 0x200, 0x2, 0x10000, 0x6a, 0xb6a, 0x0, 0xf, 0x8, 0x7, 0x9, 0xfffffff7, 0x400, 0x9, 0x3, 0x9, 0xdc5, 0x2, 0xc3, 0x4, 0x8b, 0x3ff, 0x5, 0x7, 0x80, 0x1, 0x80000001, 0x4, 0x81, 0x3, 0x80002, 0x8, 0xf2, 0xfffffff9, 0x3, 0x400, 0x6, 0x1, 0x4, 0x3ff, 0xee, 0x3ff, 0x8, 0x5, 0x6, 0x1, 0x8, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, 0x2, 0xb, 0x4, 0x8000, 0xfffffffb, 0x4, 0x7f, 0x7fffffff, 0x4, 0x1, 0xff, 0x10001, 0x2, 0x1000, 0x1fffe, 0x9, 0x7, 0x8, 0x200, 0x3, 0x2, 0x101, 0x0, 0xfff, 0x9a, 0x6, 0x8000, 0x0, 0x3, 0xff, 0xff, 0x81, 0x1, 0xd, 0x5, 0x6, 0x7, 0x8, 0x5, 0x7, 0x4, 0x5, 0x5, 0x97, 0x5, 0x5, 0x0, 0x80, 0x3, 0x6, 0x0, 0x1, 0x1, 0x5, 0xffffffff, 0x401, 0x1, 0x7, 0xe766, 0x101, 0x1, 0x1ff, 0x6, 0xc, 0x3, 0x101, 0x1, 0x6, 0xaa9, 0x4, 0x9, 0x1, 0x2, 0x9, 0x8001, 0x7fffffff, 0x7, 0x81, 0xba22, 0x5a0f351c, 0x2, 0x1, 0xffff, 0x0, 0x5, 0x3, 0x81, 0x21e80e00, 0x8, 0x4, 0x5, 0x6, 0x200]}]]}, {0x60, 0x6, "5dde119caec708d3189cca8719cdcac1ee317ac937e546ee0e15b4b76c5f382fb1dab730622994bfa4f247c9facfc7df77a20a424b1d0e40381cd679801a0f08cd4e17f9f60b61a2b599c1bb00aa22f435fb693a0b741f905d46895c"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x528, 0x18, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xc8, 0x10000000, 0x62, 0x8, 0xffffffff, {0x1, 0x0, 0x7, 0x7, 0x2, 0x8}, {0x1, 0x0, 0x7380, 0xf34, 0x6e8, 0x1}, 0x7, 0x8, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x1, 0x6, 0x7, 0x1, 0xfff, 0xa7, 0x52400, 0xfc000000, 0x8, 0x4f6, 0x0, 0xad7, 0x0, 0x881, 0x36c7, 0xfffffff0, 0x10000, 0x2, 0x5, 0xe, 0x6, 0x3, 0x5, 0x0, 0x80000000, 0x983, 0x1, 0x6241, 0xffffff65, 0x9, 0x5, 0x3e04, 0x9, 0x101, 0x8000, 0x550, 0x400, 0x6c, 0x3, 0x5, 0x307a0142, 0x6, 0xfffffffb, 0x1, 0xf986, 0xb7, 0x5, 0x5, 0x6, 0x6, 0xdaa, 0x1, 0x8, 0x3, 0xfff, 0x2, 0x4, 0x2, 0x0, 0x0, 0x5, 0xaf, 0x4, 0x5, 0x8, 0x7fff, 0x0, 0xa02c, 0x6, 0x3ff, 0x0, 0xfffffffd, 0x9, 0x4, 0x3ff, 0x200, 0x3, 0xe, 0x4939, 0xb3, 0x4, 0x2eb, 0x2, 0x0, 0x9, 0x5, 0x4, 0x4, 0xfffff001, 0x3, 0x0, 0x80000000, 0x5, 0x6, 0x5, 0x9, 0xcc43, 0x5, 0x5, 0x8e, 0x7, 0xa457, 0x1, 0xdac6, 0xa, 0x7, 0x8, 0xfb, 0x3, 0x8001, 0x401, 0x0, 0x13d, 0xff, 0x3, 0x1, 0x0, 0x74a, 0x9, 0xffffff81, 0x1, 0x9, 0x0, 0x5, 0x9, 0x7, 0x3, 0x0, 0x7, 0x9, 0x6, 0xa, 0x2, 0x7, 0x7, 0x4, 0x7, 0x5ea21bc6, 0x8, 0x3, 0x9170, 0xff, 0x4, 0x1, 0x58, 0x7fff, 0x1ff, 0x0, 0x7, 0x200, 0x4, 0x0, 0x8000, 0x8, 0x89d, 0x3, 0x5, 0x5, 0xec7, 0x827, 0x92, 0x1ff, 0x7ee3f4eb, 0x3e80847e, 0x0, 0x40, 0x9, 0x9, 0x7eb, 0x8001, 0x5, 0x7ff, 0x4, 0x8, 0x4fbb, 0x2fa0, 0x0, 0x0, 0x5, 0x5, 0x10, 0x792, 0x2, 0x6, 0x9, 0x1, 0x80000000, 0x88f, 0x4, 0x0, 0x5, 0x4, 0x5, 0xfffffbae, 0x2, 0x1, 0x4, 0x79c04e9e, 0x3, 0xc, 0x3, 0x80000000, 0xf, 0x8, 0x0, 0x7, 0xffffc2fb, 0x9, 0x5, 0x2, 0x7, 0xffff, 0xe, 0x70, 0x0, 0x53e, 0x1, 0x0, 0xfb2, 0xf68, 0x53f5, 0xfffeffff, 0x7, 0x7f, 0xc, 0x0, 0x9, 0x2, 0x10001, 0x1166, 0x5, 0x2, 0x5, 0x100, 0x92, 0x0, 0x4, 0x6fef4b38, 0x9, 0x7, 0x7, 0x5, 0xfff, 0xfde, 0x800, 0x80, 0x7, 0x0, 0x0, 0x7, 0x9, 0x5, 0x2, 0x89, 0x9]}]]}, {0xba, 0x6, "e4496a5e60772c1f77a65e482a131014ee70f900c7c66143592ab9061dcf97685c56f6f51e3729914c2e842e92ac24c732a9b42a773b923fc9e461ebf06470df8ad2fdd122422c48034a53881b39977eb9397ac1059e050f19c51d089130f7fef490349e990d4146e0418790cf39368c7632434814d5050193386c213a85d90a8efb67aa9a862f7df34044d5583f6ba8af738ef18b6a176d6e402b6415601e78a80cdbce7990d25cb44ac3f71e1514f97d23628bcfe2"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb34}, 0x1, 0x0, 0x0, 0x44800}, 0x4091)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r11)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac2e3b94075422cad1edc0c0118dc3119d4165", @ANYRESHEX, @ANYRES64], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)

79.285288ms ago: executing program 0 (id=373):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='file_check_and_advance_wb_err\x00'}, 0x18)
socket$kcm(0x2d, 0x2, 0x0)
close(0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0)
r2 = dup(r1)
fallocate(r2, 0x10, 0x0, 0x1062200)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000340)=""/67, &(0x7f00000002c0)=0x43)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2})
capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14)
write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6)
listen(r3, 0x1)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x81, 0xc9}}}, 0x6)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
syz_open_dev$usbmon(&(0x7f0000000700), 0xeba, 0x101283)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r7, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000180)='\x00', 0x1}], 0x2)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_page_scan_activity={{0x2}, {0x0, 0x0, 0x4}}}}, 0xb)

78.706373ms ago: executing program 2 (id=374):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') (async)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000105000/0x1000)=nil) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x250, 0x268, 0x300, 0x250, 0x268, 0x360, 0x460, 0x460, 0x360, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x24, 0x0, 0x0, 0x5, 0x9, 0x0, 0x18}}}, @common=@frag={{0x30}, {[0x2, 0x4], 0x8, 0x30, 0x4}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x2}}}, {{@ipv6={@private2, @mcast2, [], [], 'vlan0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1a, 0x0, 0x20000000, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) (async)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r2=>r1, {r1}}, './file0\x00'})
getsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000640), &(0x7f0000000680)=0x4)

78.596753ms ago: executing program 2 (id=375):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x6, 0x1, 0x3, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x5, [{0x4, 0x1, 0x3}, {0x0, 0x1, 0x1}]}]}, {0x0, [0x5f, 0x0, 0x2e, 0x2e]}}, 0x0, 0x42, 0x0, 0x1, 0xfffffc00, 0x0, @void, @value}, 0x20)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c000580"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048c4}, 0x0)

0s ago: executing program 2 (id=376):
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x48, &(0x7f0000001800)=ANY=[]}, @subvolid=0x2})
r0 = socket(0x6, 0x4, 0x400003ff)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc)
socket(0x11, 0xa, 0x5)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd00)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000040)={0x7fff, 0x3200e0, "a80706000000000000fb00", {0x4, 0x2}, 0xffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1})
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000280)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3})
r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x200, 0x10)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000000c0)={0x1, 'macvlan0\x00', {}, 0x7ee2})
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x800)
memfd_create(&(0x7f0000000040)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbc\x04\x00i\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\x02\xf1\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10Dh$P\x99\xbf2\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9aY\xbb\x86O\xcc:8\x7f\n\xeeAS]\xb2\xb2\x1b9K\x92\\f\xfaf\xaaG\x1fK\x90\xdaK^\rT\x8cW\v\xda~\\-u\xc9\xe3\xef\x1fvL', 0x6)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04000f08"], 0x7)
syz_io_uring_setup(0x5d4b, &(0x7f0000001340)={0x0, 0x86f7, 0x4, 0x0, 0x1ed, 0x0, r4}, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRESOCT=r5, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0)
sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
read$FUSE(r4, &(0x7f0000001a00)={0x2020}, 0x2020)
r9 = dup(r8)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000001980)={0xbe, 0x0, 0x80001})
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000034d564b"])
ioctl$KVM_GET_MSRS(r9, 0xc008ae88, &(0x7f0000000040))
ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000140)={0x3, 0x2, 0x3, {0x7, @sdr={0x47504a4d, 0x7}}, 0x5})

kernel console output (not intermixed with test programs):

[   44.127346][   T40] audit: type=1400 audit(1749423043.079:60): avc:  denied  { rlimitinh } for  pid=5891 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   44.133406][   T40] audit: type=1400 audit(1749423043.079:61): avc:  denied  { siginh } for  pid=5891 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '[localhost]:45901' (ED25519) to the list of known hosts.
[   46.129981][   T40] audit: type=1400 audit(1749423045.099:62): avc:  denied  { name_bind } for  pid=5924 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   46.156028][   T40] audit: type=1400 audit(1749423045.129:63): avc:  denied  { write } for  pid=5925 comm="sh" path="pipe:[6183]" dev="pipefs" ino=6183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   46.177139][   T40] audit: type=1400 audit(1749423045.149:64): avc:  denied  { execute } for  pid=5925 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   46.184549][   T40] audit: type=1400 audit(1749423045.149:65): avc:  denied  { execute_no_trans } for  pid=5925 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   48.078992][   T40] audit: type=1400 audit(1749423047.049:66): avc:  denied  { mounton } for  pid=5925 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   48.081340][ T5925] cgroup: Unknown subsys name 'net'
[   48.217378][ T5925] cgroup: Unknown subsys name 'cpuset'
[   48.221715][ T5925] cgroup: Unknown subsys name 'rlimit'
[   48.418268][ T5930] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   49.317076][ T5925] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.501758][   T40] kauditd_printk_skb: 13 callbacks suppressed
[   52.501768][   T40] audit: type=1400 audit(1749423051.469:80): avc:  denied  { execmem } for  pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   52.788185][   T40] audit: type=1400 audit(1749423051.759:81): avc:  denied  { create } for  pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.799164][   T40] audit: type=1400 audit(1749423051.759:82): avc:  denied  { read write } for  pid=5940 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   52.806257][   T40] audit: type=1400 audit(1749423051.759:83): avc:  denied  { open } for  pid=5940 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   52.813218][   T40] audit: type=1400 audit(1749423051.779:84): avc:  denied  { ioctl } for  pid=5940 comm="syz-executor" path="socket:[1963]" dev="sockfs" ino=1963 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.840053][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.843663][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.846974][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.848853][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.849237][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.853005][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   52.854177][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.858801][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   52.859117][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.862025][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   52.864077][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.866484][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   52.871660][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.873716][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   52.876927][   T40] audit: type=1400 audit(1749423051.849:85): avc:  denied  { read } for  pid=5940 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   52.877684][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.887053][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.888126][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.892783][   T40] audit: type=1400 audit(1749423051.849:86): avc:  denied  { open } for  pid=5940 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   52.895594][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.902132][   T40] audit: type=1400 audit(1749423051.849:87): avc:  denied  { mounton } for  pid=5940 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   52.906420][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.917200][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.133408][   T40] audit: type=1400 audit(1749423052.109:88): avc:  denied  { module_request } for  pid=5940 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   53.210869][ T5943] chnl_net:caif_netlink_parms(): no params data found
[   53.226088][ T5940] chnl_net:caif_netlink_parms(): no params data found
[   53.325196][ T5950] chnl_net:caif_netlink_parms(): no params data found
[   53.388265][ T5947] chnl_net:caif_netlink_parms(): no params data found
[   53.395223][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.398426][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.401361][ T5943] bridge_slave_0: entered allmulticast mode
[   53.405632][ T5943] bridge_slave_0: entered promiscuous mode
[   53.449799][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.452117][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.454628][ T5943] bridge_slave_1: entered allmulticast mode
[   53.457509][ T5943] bridge_slave_1: entered promiscuous mode
[   53.545049][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.588444][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.592377][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.595605][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.597854][ T5940] bridge_slave_0: entered allmulticast mode
[   53.600555][ T5940] bridge_slave_0: entered promiscuous mode
[   53.647188][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.649466][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.651936][ T5940] bridge_slave_1: entered allmulticast mode
[   53.654912][ T5940] bridge_slave_1: entered promiscuous mode
[   53.680564][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.683307][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.685546][ T5950] bridge_slave_0: entered allmulticast mode
[   53.688164][ T5950] bridge_slave_0: entered promiscuous mode
[   53.787783][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.790896][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.794163][ T5950] bridge_slave_1: entered allmulticast mode
[   53.797889][ T5950] bridge_slave_1: entered promiscuous mode
[   53.802857][ T5943] team0: Port device team_slave_0 added
[   53.806939][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.856418][ T5943] team0: Port device team_slave_1 added
[   53.860566][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.877402][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.880253][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.883087][ T5947] bridge_slave_0: entered allmulticast mode
[   53.886686][ T5947] bridge_slave_0: entered promiscuous mode
[   53.906503][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.958449][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.960694][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.963133][ T5947] bridge_slave_1: entered allmulticast mode
[   53.965684][ T5947] bridge_slave_1: entered promiscuous mode
[   53.969651][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.022791][ T5940] team0: Port device team_slave_0 added
[   54.026191][ T5940] team0: Port device team_slave_1 added
[   54.082158][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.085421][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.096199][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.133109][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.138330][ T5950] team0: Port device team_slave_0 added
[   54.142178][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.145322][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.153116][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.156853][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.158924][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.167303][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.184073][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.189571][ T5950] team0: Port device team_slave_1 added
[   54.211947][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.214179][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.221446][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.286840][ T5947] team0: Port device team_slave_0 added
[   54.338350][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.340447][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.348309][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.353451][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.355661][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.363509][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.380786][ T5947] team0: Port device team_slave_1 added
[   54.387616][ T5943] hsr_slave_0: entered promiscuous mode
[   54.390907][ T5943] hsr_slave_1: entered promiscuous mode
[   54.447119][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.449287][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.458860][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.465761][ T5940] hsr_slave_0: entered promiscuous mode
[   54.468129][ T5940] hsr_slave_1: entered promiscuous mode
[   54.470285][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.473325][ T5940] Cannot create hsr debugfs directory
[   54.497029][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.499242][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.507841][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.587777][ T5950] hsr_slave_0: entered promiscuous mode
[   54.590557][ T5950] hsr_slave_1: entered promiscuous mode
[   54.593203][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.596117][ T5950] Cannot create hsr debugfs directory
[   54.673812][ T5947] hsr_slave_0: entered promiscuous mode
[   54.676101][ T5947] hsr_slave_1: entered promiscuous mode
[   54.678210][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.680571][ T5947] Cannot create hsr debugfs directory
[   54.923250][ T5955] Bluetooth: hci2: command tx timeout
[   54.923256][ T5948] Bluetooth: hci3: command tx timeout
[   54.923308][ T5946] Bluetooth: hci0: command tx timeout
[   54.923555][ T5948] Bluetooth: hci1: command tx timeout
[   54.988592][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.996412][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.001467][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.006283][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.043762][ T5950] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   55.054035][ T5950] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   55.058995][ T5950] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   55.068166][ T5950] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   55.097754][ T5947] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.105257][ T5947] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.110789][ T5947] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.118709][ T5947] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.177738][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.184825][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.192802][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.199217][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.245234][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.286347][ T5943] 8021q: adding VLAN 0 to HW filter on device team0
[   55.304337][  T226] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.306723][  T226] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.317330][ T1244] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.319371][ T1244] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.323429][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.328295][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.348081][ T5947] 8021q: adding VLAN 0 to HW filter on device team0
[   55.351656][ T5950] 8021q: adding VLAN 0 to HW filter on device team0
[   55.361135][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.363954][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.376059][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.378320][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.385676][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.387890][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.401752][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.406341][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.408567][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.429028][ T5940] 8021q: adding VLAN 0 to HW filter on device team0
[   55.445356][ T5950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.453034][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.455332][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.458721][   T40] audit: type=1400 audit(1749423054.429:89): avc:  denied  { sys_module } for  pid=5943 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   55.466086][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.468182][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.565140][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.576660][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.596759][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.633135][ T5943] veth0_vlan: entered promiscuous mode
[   55.639935][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.646237][ T5950] veth0_vlan: entered promiscuous mode
[   55.653332][ T5943] veth1_vlan: entered promiscuous mode
[   55.661153][ T5950] veth1_vlan: entered promiscuous mode
[   55.673218][ T5947] veth0_vlan: entered promiscuous mode
[   55.688452][ T5943] veth0_macvtap: entered promiscuous mode
[   55.695137][ T5943] veth1_macvtap: entered promiscuous mode
[   55.700621][ T5947] veth1_vlan: entered promiscuous mode
[   55.707296][ T5950] veth0_macvtap: entered promiscuous mode
[   55.717004][ T5950] veth1_macvtap: entered promiscuous mode
[   55.735740][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.738449][ T5940] veth0_vlan: entered promiscuous mode
[   55.745641][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.755406][ T5940] veth1_vlan: entered promiscuous mode
[   55.761415][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.765552][ T5950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.768327][ T5950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.771461][ T5950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.775762][ T5950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.782191][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.789095][ T5947] veth0_macvtap: entered promiscuous mode
[   55.792988][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.795496][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.798422][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.801318][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.810540][ T5947] veth1_macvtap: entered promiscuous mode
[   55.851196][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.868282][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.872326][ T5940] veth0_macvtap: entered promiscuous mode
[   55.880233][ T5947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.883648][ T5947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.886367][ T5947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.889151][ T5947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.899261][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.902142][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.905820][ T5940] veth1_macvtap: entered promiscuous mode
[   55.933849][ T1244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.937341][ T1244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.947383][ T1244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.950540][ T1244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.958024][  T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.961371][  T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.976188][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.979712][  T226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.984018][  T226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.000810][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.009187][ T5940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.014631][ T5940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.015565][ T5943] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.017795][ T5940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.026486][ T5940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.033029][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.036851][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.120314][  T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.129238][  T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.151547][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5'.
[   56.152331][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.158740][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.177801][ T6040] bridge0: port 3(syz_tun) entered blocking state
[   56.180508][ T6040] bridge0: port 3(syz_tun) entered disabled state
[   56.182947][ T6040] syz_tun: entered allmulticast mode
[   56.185470][ T6040] syz_tun: entered promiscuous mode
[   56.187617][ T6040] bridge0: port 3(syz_tun) entered blocking state
[   56.189763][ T6040] bridge0: port 3(syz_tun) entered forwarding state
[   56.194251][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'.
[   56.217925][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.223941][ T6045] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   56.348053][ T6055] Zero length message leads to an empty skb
[   56.364557][   T54] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   56.411275][ T6065] capability: warning: `syz.3.11' uses deprecated v2 capabilities in a way that may be insecure
[   56.535137][   T54] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   56.538564][   T54] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   56.541765][   T54] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   56.546879][   T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.556200][ T6030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   56.564887][   T54] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[   56.704697][ T6089] syz.2.16: attempt to access beyond end of device
[   56.704697][ T6089] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[   56.718562][ T6089] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[   56.722042][ T6089] overlayfs: missing 'lowerdir'
[   56.756608][ T6093] input: syz0 as /devices/virtual/input/input5
[   56.842417][ T6007] usb 6-1: USB disconnect, device number 2
[   56.850177][ T6098] FAULT_INJECTION: forcing a failure.
[   56.850177][ T6098] name failslab, interval 1, probability 0, space 0, times 1
[   56.857453][ T6098] CPU: 3 UID: 0 PID: 6098 Comm: syz.2.18 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) 
[   56.857479][ T6098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   56.857489][ T6098] Call Trace:
[   56.857496][ T6098]  <TASK>
[   56.857502][ T6098]  dump_stack_lvl+0x16c/0x1f0
[   56.857533][ T6098]  should_fail_ex+0x512/0x640
[   56.857557][ T6098]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[   56.857584][ T6098]  should_failslab+0xc2/0x120
[   56.857609][ T6098]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[   56.857633][ T6098]  ? __d_alloc+0x31/0xaa0
[   56.857658][ T6098]  ? __lock_acquire+0x622/0x1c90
[   56.857687][ T6098]  __d_alloc+0x31/0xaa0
[   56.857716][ T6098]  d_alloc+0x4a/0x1e0
[   56.857743][ T6098]  d_alloc_parallel+0xe3/0x12e0
[   56.857761][ T6098]  ? find_held_lock+0x2b/0x80
[   56.857782][ T6098]  ? avc_has_perm_noaudit+0x117/0x3b0
[   56.857804][ T6098]  ? map_id_range_up+0x2ce/0x3b0
[   56.857825][ T6098]  ? __pfx_d_alloc_parallel+0x10/0x10
[   56.857848][ T6098]  ? lockdep_init_map_type+0x5c/0x280
[   56.857875][ T6098]  ? lockdep_init_map_type+0x5c/0x280
[   56.857906][ T6098]  __lookup_slow+0x193/0x460
[   56.857925][ T6098]  ? __pfx___lookup_slow+0x10/0x10
[   56.857947][ T6098]  ? mod_zone_page_state+0xf0/0x120
[   56.857972][ T6098]  ? mod_zone_page_state+0xf0/0x120
[   56.857991][ T6098]  ? d_lookup+0xe7/0x190
[   56.858015][ T6098]  lookup_one_unlocked+0xd4/0x120
[   56.858035][ T6098]  lookup_one_positive_unlocked+0x24/0xc0
[   56.858056][ T6098]  ovl_lookup_index+0x20d/0x800
[   56.858100][ T6098]  ? __pfx_ovl_lookup_index+0x10/0x10
[   56.858123][ T6098]  ? ovl_lookup+0x1a7d/0x21a0
[   56.858148][ T6098]  ovl_lookup+0x98f/0x21a0
[   56.858177][ T6098]  ? __pfx_ovl_lookup+0x10/0x10
[   56.858195][ T6098]  ? __lock_acquire+0xb8a/0x1c90
[   56.858233][ T6098]  ? do_raw_spin_lock+0x12c/0x2b0
[   56.858258][ T6098]  ? do_raw_spin_unlock+0x172/0x230
[   56.858285][ T6098]  ? _raw_spin_unlock+0x28/0x50
[   56.858313][ T6098]  lookup_one_qstr_excl_raw.part.0+0xec/0x160
[   56.858331][ T6098]  ? lookup_dcache+0x66/0x170
[   56.858351][ T6098]  lookup_one_qstr_excl+0x3e/0x120
[   56.858372][ T6098]  do_renameat2+0x56d/0xc90
[   56.858408][ T6098]  ? __pfx_do_renameat2+0x10/0x10
[   56.858436][ T6098]  ? find_held_lock+0x2b/0x80
[   56.858455][ T6098]  ? __might_fault+0xe3/0x190
[   56.858476][ T6098]  ? __might_fault+0x13b/0x190
[   56.858510][ T6098]  ? getname_flags.part.0+0x1c5/0x550
[   56.858533][ T6098]  __x64_sys_rename+0x7d/0xa0
[   56.858560][ T6098]  do_syscall_64+0xcd/0x4c0
[   56.858588][ T6098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.858606][ T6098] RIP: 0033:0x7fbfb9b8e929
[   56.858620][ T6098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.858636][ T6098] RSP: 002b:00007fbfba94d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[   56.858654][ T6098] RAX: ffffffffffffffda RBX: 00007fbfb9db5fa0 RCX: 00007fbfb9b8e929
[   56.858665][ T6098] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180
[   56.858675][ T6098] RBP: 00007fbfba94d090 R08: 0000000000000000 R09: 0000000000000000
[   56.858685][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   56.858695][ T6098] R13: 0000000000000000 R14: 00007fbfb9db5fa0 R15: 00007ffc8fc43da8
[   56.858720][ T6098]  </TASK>
[   56.858914][ T6098] overlayfs: failed inode index lookup (ino=2, key=00fb210001f13e62a100614dcdbbf4fb0ba48ed06def527fa90200000000000000, err=-12);
[   56.858914][ T6098] overlayfs: mount with '-o index=off' to disable inodes index.
[   57.006233][ T5946] Bluetooth: hci3: command tx timeout
[   57.007086][ T5955] Bluetooth: hci2: command tx timeout
[   57.014073][ T5955] Bluetooth: hci0: command tx timeout
[   57.097311][ T6050] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   57.099797][ T6050] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   57.108245][ T6050] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   57.110224][ T6050] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   57.116206][ T6050] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   57.118698][ T6050] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   57.127143][ T6050] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   57.131489][ T6050] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   57.159952][ T6111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   57.163220][ T6111] IPv6: NLM_F_CREATE should be set when creating new route
[   57.173931][ T6111] lo: entered allmulticast mode
[   57.178452][ T6111] tunl0: entered allmulticast mode
[   57.183114][ T6111] gre0: entered allmulticast mode
[   57.190800][ T6111] gretap0: entered allmulticast mode
[   57.196305][ T6111] erspan0: entered allmulticast mode
[   57.202115][ T6111] ip_vti0: entered allmulticast mode
[   57.208291][ T6111] ip6_vti0: entered allmulticast mode
[   57.213520][ T6111] sit0: entered allmulticast mode
[   57.219391][ T6111] ip6tnl0: entered allmulticast mode
[   57.222988][ T6111] ip6gre0: entered allmulticast mode
[   57.226021][ T6111] syz_tun: entered allmulticast mode
[   57.230714][ T6111] ip6gretap0: entered allmulticast mode
[   57.234401][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.237193][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.240705][ T6111] bridge0: entered allmulticast mode
[   57.244798][ T6111] vcan0: entered allmulticast mode
[   57.247652][ T6111] bond0: entered allmulticast mode
[   57.249298][ T6111] bond_slave_0: entered allmulticast mode
[   57.251022][ T6111] bond_slave_1: entered allmulticast mode
[   57.255160][ T6111] team0: entered allmulticast mode
[   57.256816][ T6111] team_slave_0: entered allmulticast mode
[   57.258579][ T6111] team_slave_1: entered allmulticast mode
[   57.261810][ T6111] dummy0: entered allmulticast mode
[   57.266752][ T6111] nlmon0: entered allmulticast mode
[   57.270345][ T6111] caif0: entered allmulticast mode
[   57.273064][ T6111] batadv0: entered allmulticast mode
[   57.277175][ T6111] vxcan0: entered allmulticast mode
[   57.279963][ T6111] vxcan1: entered allmulticast mode
[   57.283420][ T6111] veth0: entered allmulticast mode
[   57.288213][ T6111] veth1: entered allmulticast mode
[   57.294810][ T6111] wg0: entered allmulticast mode
[   57.298964][ T6111] wg1: entered allmulticast mode
[   57.304676][ T6111] wg2: entered allmulticast mode
[   57.308765][ T6111] veth0_to_bridge: entered allmulticast mode
[   57.316545][ T6111] veth1_to_bridge: entered allmulticast mode
[   57.323984][ T6111] veth0_to_bond: entered allmulticast mode
[   57.328526][ T6111] veth1_to_bond: entered allmulticast mode
[   57.334185][ T6111] veth0_to_team: entered allmulticast mode
[   57.341473][ T6111] veth1_to_team: entered allmulticast mode
[   57.349194][ T6111] veth0_to_batadv: entered allmulticast mode
[   57.353919][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.357791][ T6111] batadv_slave_0: entered allmulticast mode
[   57.363798][ T6111] veth1_to_batadv: entered allmulticast mode
[   57.368379][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.372293][ T6111] batadv_slave_1: entered allmulticast mode
[   57.375953][ T6111] xfrm0: entered allmulticast mode
[   57.378990][ T6111] veth0_to_hsr: entered allmulticast mode
[   57.383608][ T6111] hsr_slave_0: entered allmulticast mode
[   57.387621][ T6111] veth1_to_hsr: entered allmulticast mode
[   57.392094][ T6111] hsr_slave_1: entered allmulticast mode
[   57.396898][ T6111] hsr0: entered allmulticast mode
[   57.401784][ T6111] veth1_virt_wifi: entered allmulticast mode
[   57.411331][ T6111] veth0_virt_wifi: entered allmulticast mode
[   57.416150][ T6111] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   57.420283][ T6111] veth1_vlan: entered allmulticast mode
[   57.425807][ T6111] veth0_vlan: entered allmulticast mode
[   57.437341][ T6111] vlan0: entered allmulticast mode
[   57.439829][ T6111] vlan1: entered allmulticast mode
[   57.444276][ T6111] macvlan0: entered allmulticast mode
[   57.449168][ T6111] macvlan1: entered allmulticast mode
[   57.453443][ T6111] ipvlan0: entered allmulticast mode
[   57.455989][ T6111] ipvlan1: entered allmulticast mode
[   57.459337][ T6111] veth1_macvtap: entered allmulticast mode
[   57.465039][ T6111] veth0_macvtap: entered allmulticast mode
[   57.469942][ T6111] macvtap0: entered allmulticast mode
[   57.474640][ T6111] macsec0: entered allmulticast mode
[   57.480359][ T6111] geneve0: entered allmulticast mode
[   57.487560][ T6111] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.491569][ T6111] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.495507][ T6111] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.499220][ T6111] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.503345][ T6111] geneve1: entered allmulticast mode
[   57.508020][ T6111] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   57.515282][ T6111] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[   57.520659][ T6111] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[   57.527291][ T6111] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[   57.541006][ T6111] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[   57.551167][ T6111] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[   57.584097][   T40] kauditd_printk_skb: 98 callbacks suppressed
[   57.584112][   T40] audit: type=1400 audit(1749423056.559:188): avc:  denied  { create } for  pid=6119 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   57.585031][ T6120] netlink: 'syz.1.22': attribute type 1 has an invalid length.
[   57.586718][   T40] audit: type=1400 audit(1749423056.559:189): avc:  denied  { ioctl } for  pid=6119 comm="syz.1.22" path="socket:[6945]" dev="sockfs" ino=6945 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   57.587330][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'.
[   57.593848][ T6120] netlink: 'syz.1.22': attribute type 2 has an invalid length.
[   57.614772][   T40] audit: type=1400 audit(1749423056.589:190): avc:  denied  { map } for  pid=6122 comm="syz.2.23" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   57.622164][   T40] audit: type=1400 audit(1749423056.589:191): avc:  denied  { read write } for  pid=6122 comm="syz.2.23" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   57.664293][   T40] audit: type=1326 audit(1749423056.639:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.2.24" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9b8e929 code=0x0
[   57.764632][   T40] audit: type=1400 audit(1749423056.739:193): avc:  denied  { create } for  pid=6133 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   57.771659][   T40] audit: type=1400 audit(1749423056.739:194): avc:  denied  { accept } for  pid=6133 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   57.825737][   T40] audit: type=1400 audit(1749423056.799:195): avc:  denied  { create } for  pid=6131 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   57.844095][   T40] audit: type=1400 audit(1749423056.819:196): avc:  denied  { create } for  pid=6141 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   57.850135][   T40] audit: type=1400 audit(1749423056.819:197): avc:  denied  { ioctl } for  pid=6141 comm="syz.0.30" path="socket:[8994]" dev="sockfs" ino=8994 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   57.881112][ T6132] kvm: kvm [6131]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0xdb30
[   57.890680][ T6132] kvm_intel: kvm [6131]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x5981
[   57.914054][ T6132] kvm: kvm [6131]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0xd508
[   57.918700][ T6132] kvm: kvm [6131]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000
[   57.943285][ T6132] kvm: kvm [6131]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0xc390
[   57.985289][ T6145] capability: warning: `syz.0.32' uses 32-bit capabilities (legacy support in use)
[   58.069249][ T6149] netlink: 'syz.2.33': attribute type 3 has an invalid length.
[   58.071763][ T6149] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33'.
[   58.138581][ T6155] overlayfs: missing 'lowerdir'
[   58.727873][ T6185] pim6reg1: entered promiscuous mode
[   58.729869][ T6185] pim6reg1: entered allmulticast mode
[   58.758526][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'.
[   58.761221][ T6190] netlink: 'syz.2.47': attribute type 30 has an invalid length.
[   58.767959][ T6190] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   58.770754][ T6190] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   58.774637][ T6190] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   58.777356][ T6190] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   58.982400][ T6204] FAULT_INJECTION: forcing a failure.
[   58.982400][ T6204] name failslab, interval 1, probability 0, space 0, times 0
[   58.987725][ T6204] CPU: 0 UID: 0 PID: 6204 Comm: syz.2.52 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) 
[   58.987748][ T6204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   58.987758][ T6204] Call Trace:
[   58.987764][ T6204]  <TASK>
[   58.987770][ T6204]  dump_stack_lvl+0x16c/0x1f0
[   58.987801][ T6204]  should_fail_ex+0x512/0x640
[   58.987826][ T6204]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[   58.987852][ T6204]  should_failslab+0xc2/0x120
[   58.987877][ T6204]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[   58.987901][ T6204]  ? __d_alloc+0x31/0xaa0
[   58.987931][ T6204]  __d_alloc+0x31/0xaa0
[   58.987960][ T6204]  d_alloc+0x4a/0x1e0
[   58.987987][ T6204]  d_alloc_parallel+0xe3/0x12e0
[   58.988010][ T6204]  ? __lock_acquire+0xb8a/0x1c90
[   58.988039][ T6204]  ? is_bpf_text_address+0x94/0x1a0
[   58.988062][ T6204]  ? __pfx_d_alloc_parallel+0x10/0x10
[   58.988083][ T6204]  ? lockdep_init_map_type+0x5c/0x280
[   58.988109][ T6204]  ? lockdep_init_map_type+0x5c/0x280
[   58.988138][ T6204]  __lookup_slow+0x193/0x460
[   58.988157][ T6204]  ? __pfx___lookup_slow+0x10/0x10
[   58.988178][ T6204]  ? mod_zone_page_state+0xf0/0x120
[   58.988202][ T6204]  ? mod_zone_page_state+0xf0/0x120
[   58.988220][ T6204]  ? d_lookup+0xe7/0x190
[   58.988243][ T6204]  lookup_one_unlocked+0xd4/0x120
[   58.988263][ T6204]  ovl_lookup_single+0x214/0xfc0
[   58.988294][ T6204]  ? __pfx_ovl_lookup_single+0x10/0x10
[   58.988320][ T6204]  ovl_lookup_layer+0x3d4/0x480
[   58.988342][ T6204]  ? __pfx_ovl_lookup_layer+0x10/0x10
[   58.988358][ T6204]  ? trace_kmalloc+0x2b/0xd0
[   58.988389][ T6204]  ovl_lookup+0x13f9/0x21a0
[   58.988418][ T6204]  ? __pfx_ovl_lookup+0x10/0x10
[   58.988436][ T6204]  ? __lock_acquire+0xb8a/0x1c90
[   58.988472][ T6204]  ? do_raw_spin_lock+0x12c/0x2b0
[   58.988495][ T6204]  ? do_raw_spin_unlock+0x172/0x230
[   58.988513][ T6204]  ? _raw_spin_unlock+0x28/0x50
[   58.988538][ T6204]  lookup_one_qstr_excl_raw.part.0+0xec/0x160
[   58.988554][ T6204]  ? lookup_dcache+0x66/0x170
[   58.988572][ T6204]  lookup_one_qstr_excl+0x3e/0x120
[   58.988590][ T6204]  do_renameat2+0x5aa/0xc90
[   58.988622][ T6204]  ? __pfx_do_renameat2+0x10/0x10
[   58.988649][ T6204]  ? find_held_lock+0x2b/0x80
[   58.988667][ T6204]  ? __might_fault+0xe3/0x190
[   58.988688][ T6204]  ? __might_fault+0x13b/0x190
[   58.988720][ T6204]  ? getname_flags.part.0+0x1c5/0x550
[   58.988741][ T6204]  __x64_sys_rename+0x7d/0xa0
[   58.988766][ T6204]  do_syscall_64+0xcd/0x4c0
[   58.988794][ T6204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.988812][ T6204] RIP: 0033:0x7fbfb9b8e929
[   58.988825][ T6204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.988841][ T6204] RSP: 002b:00007fbfba94d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[   58.988858][ T6204] RAX: ffffffffffffffda RBX: 00007fbfb9db5fa0 RCX: 00007fbfb9b8e929
[   58.988869][ T6204] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180
[   58.988879][ T6204] RBP: 00007fbfba94d090 R08: 0000000000000000 R09: 0000000000000000
[   58.988889][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   58.988899][ T6204] R13: 0000000000000000 R14: 00007fbfb9db5fa0 R15: 00007ffc8fc43da8
[   58.988922][ T6204]  </TASK>
[   59.097696][    C0] vkms_vblank_simulate: vblank timer overrun
[   59.140476][ T6214] input: syz1 as /devices/virtual/input/input6
[   59.452233][ T6228] sp0: Synchronizing with TNC
[   59.801536][ T6237] MINIX-fs: blocksize too small for device
[   59.809671][ T6237] MINIX-fs: blocksize too small for device
[   59.861452][ T6241] xt_l2tp: v2 sid > 0xffff: 150994944
[   60.011982][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'.
[   60.029039][ T6257] FAULT_INJECTION: forcing a failure.
[   60.029039][ T6257] name failslab, interval 1, probability 0, space 0, times 0
[   60.032964][ T6257] CPU: 3 UID: 0 PID: 6257 Comm: syz.0.68 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) 
[   60.032986][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   60.032996][ T6257] Call Trace:
[   60.033002][ T6257]  <TASK>
[   60.033009][ T6257]  dump_stack_lvl+0x16c/0x1f0
[   60.033038][ T6257]  should_fail_ex+0x512/0x640
[   60.033060][ T6257]  ? fs_reclaim_acquire+0xae/0x150
[   60.033080][ T6257]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[   60.033103][ T6257]  should_failslab+0xc2/0x120
[   60.033128][ T6257]  __kmalloc_noprof+0xd2/0x510
[   60.033156][ T6257]  tomoyo_realpath_from_path+0xc2/0x6e0
[   60.033182][ T6257]  ? tomoyo_profile+0x47/0x60
[   60.033211][ T6257]  tomoyo_path2_perm+0x2a1/0x710
[   60.033230][ T6257]  ? tomoyo_path2_perm+0x293/0x710
[   60.033250][ T6257]  ? _raw_spin_unlock+0x28/0x50
[   60.033271][ T6257]  ? __pfx_tomoyo_path2_perm+0x10/0x10
[   60.033323][ T6257]  ? do_raw_spin_lock+0x12c/0x2b0
[   60.033345][ T6257]  tomoyo_path_rename+0xfc/0x1a0
[   60.033371][ T6257]  ? __pfx_tomoyo_path_rename+0x10/0x10
[   60.033407][ T6257]  security_path_rename+0x18e/0x3c0
[   60.033434][ T6257]  do_renameat2+0x735/0xc90
[   60.033468][ T6257]  ? __pfx_do_renameat2+0x10/0x10
[   60.033495][ T6257]  ? find_held_lock+0x2b/0x80
[   60.033520][ T6257]  ? __might_fault+0xe3/0x190
[   60.033541][ T6257]  ? __might_fault+0x13b/0x190
[   60.033574][ T6257]  ? getname_flags.part.0+0x1c5/0x550
[   60.033597][ T6257]  __x64_sys_rename+0x7d/0xa0
[   60.033624][ T6257]  do_syscall_64+0xcd/0x4c0
[   60.033652][ T6257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.033670][ T6257] RIP: 0033:0x7fb13d18e929
[   60.033684][ T6257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.033700][ T6257] RSP: 002b:00007fb13e09f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[   60.033716][ T6257] RAX: ffffffffffffffda RBX: 00007fb13d3b5fa0 RCX: 00007fb13d18e929
[   60.033726][ T6257] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180
[   60.033737][ T6257] RBP: 00007fb13e09f090 R08: 0000000000000000 R09: 0000000000000000
[   60.033747][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   60.033756][ T6257] R13: 0000000000000000 R14: 00007fb13d3b5fa0 R15: 00007ffde7bb2f18
[   60.033779][ T6257]  </TASK>
[   60.033787][ T6257] ERROR: Out of memory at tomoyo_realpath_from_path.
[   60.505692][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   60.553941][ T6292] netlink: 'syz.2.77': attribute type 17 has an invalid length.
[   60.556382][ T6292] netlink: 5 bytes leftover after parsing attributes in process `syz.2.77'.
[   60.557373][ T6291] netlink: 'syz.3.79': attribute type 1 has an invalid length.
[   60.559905][ T6292] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[   60.562278][ T6291] netlink: 244 bytes leftover after parsing attributes in process `syz.3.79'.
[   60.643387][    T9] usb 5-1: device descriptor read/64, error -71
[   60.766745][ T6306] overlayfs: missing 'lowerdir'
[   60.882590][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   61.012817][    T9] usb 5-1: device descriptor read/64, error -71
[   61.123177][    T9] usb usb5-port1: attempt power cycle
[   61.375606][ T6336] overlayfs: missing 'lowerdir'
[   61.421256][ T6338] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.458476][ T6338] ieee802154 phy0 wpan0: encryption failed: -22
[   61.463319][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   61.483982][    T9] usb 5-1: device descriptor read/8, error -71
[   61.515263][ T1244] tipc: Subscription rejected, illegal request
[   61.520758][ T6345] Bluetooth: MGMT ver 1.23
[   61.525509][ T6345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.98'.
[   61.607330][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.100'.
[   61.610936][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.100'.
[   61.681229][ T6358] overlayfs: missing 'lowerdir'
[   61.724040][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   61.744348][    T9] usb 5-1: device descriptor read/8, error -71
[   61.759376][ T6361] mac80211_hwsim hwsim5 ������: renamed from wlan0
[   61.853051][    T9] usb usb5-port1: unable to enumerate USB device
[   61.978466][ T6380] overlayfs: missing 'lowerdir'
[   62.021091][ T6382] mmap: syz.2.114 (6382) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   62.084316][ T6389] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967291 (274877906624 ns) > initial count (30400 ns). Using initial count to start timer.
[   62.164369][ T6401] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   62.345068][ T6410] overlayfs: missing 'lowerdir'
[   62.357620][ T6412] binder: 6411:6412 ioctl c0306201 2000000003c0 returned -14
[   62.361361][ T6412] binder: 6411:6412 ioctl 80207011 2000000001c0 returned -22
[   62.466133][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'.
[   62.469823][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'.
[   62.616802][ T6427] nfs4: Unknown parameter 'fsmagic'
[   62.675000][ T6428] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[   62.677661][ T6428] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   62.681130][ T6428] vhci_hcd vhci_hcd.0: Device attached
[   62.952858][ T5819] usb 44-1: SetAddress Request (2) to port 0
[   62.954914][ T5819] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[   63.391943][ T6429] vhci_hcd: connection reset by peer
[   63.398439][   T61] vhci_hcd: stop threads
[   63.400622][   T61] vhci_hcd: release socket
[   63.404512][   T61] vhci_hcd: disconnect device
[   63.424556][   T40] kauditd_printk_skb: 89 callbacks suppressed
[   63.424572][   T40] audit: type=1400 audit(1749423062.399:287): avc:  denied  { write } for  pid=6435 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   63.458956][ T6438] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[   63.561935][   T40] audit: type=1400 audit(1749423062.529:288): avc:  denied  { block_suspend } for  pid=6447 comm="syz.0.132" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   63.577839][ T6448] netlink: 'syz.0.132': attribute type 39 has an invalid length.
[   63.746785][ T6450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.133'.
[   63.826947][ T6451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6451 comm=syz.0.133
[   64.014229][ T6463] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   64.017209][ T6463] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   64.097293][   T40] audit: type=1400 audit(1749423063.069:289): avc:  denied  { write } for  pid=6468 comm="syz.3.141" name="ptp1" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   64.139038][   T40] audit: type=1400 audit(1749423063.109:290): avc:  denied  { read } for  pid=6471 comm="syz.2.143" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   64.145422][   T40] audit: type=1400 audit(1749423063.109:291): avc:  denied  { append } for  pid=6470 comm="syz.3.142" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   64.191399][ T6472] netlink: 448 bytes leftover after parsing attributes in process `syz.3.142'.
[   64.195652][ T6472] unsupported nla_type 14345
[   64.222663][ T6007] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   64.232808][   T40] audit: type=1400 audit(1749423063.209:292): avc:  denied  { append } for  pid=6478 comm="syz.3.145" name="ubi_ctrl" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   64.244239][   T40] audit: type=1400 audit(1749423063.219:293): avc:  denied  { append } for  pid=6474 comm="syz.2.144" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   64.259379][ T6479] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.145'.
[   64.269458][   T40] audit: type=1400 audit(1749423063.239:294): avc:  denied  { create } for  pid=6478 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   64.277081][   T40] audit: type=1400 audit(1749423063.239:295): avc:  denied  { getopt } for  pid=6478 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   64.354076][ T6486] =======================================================
[   64.354076][ T6486] WARNING: The mand mount option has been deprecated and
[   64.354076][ T6486]          and is ignored by this kernel. Remove the mand
[   64.354076][ T6486]          option from the mount to silence this warning.
[   64.354076][ T6486] =======================================================
[   64.378948][   T40] audit: type=1400 audit(1749423063.349:296): avc:  denied  { append } for  pid=6485 comm="syz.3.147" path="/45/file0/pids.current" dev="9p" ino=35913962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   64.392892][ T6007] usb 5-1: Using ep0 maxpacket: 32
[   64.397375][ T6007] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   64.400103][ T6007] usb 5-1: config 0 has no interface number 0
[   64.400851][ T6486] netfs: Couldn't get user pages (rc=-14)
[   64.404079][ T6007] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   64.407616][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.410264][ T6007] usb 5-1: Product: syz
[   64.411599][ T6007] usb 5-1: Manufacturer: syz
[   64.414902][ T6007] usb 5-1: SerialNumber: syz
[   64.418316][ T6007] usb 5-1: config 0 descriptor??
[   64.423471][ T6007] smsc95xx v2.0.0
[   64.647593][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'.
[   64.729043][ T6492] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   64.837083][ T6494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.151'.
[   64.889324][ T6496] overlayfs: missing 'lowerdir'
[   65.182114][ T6510] netlink: 'syz.3.155': attribute type 19 has an invalid length.
[   65.328444][ T6515] kvm: MONITOR instruction emulated as NOP!
[   65.913026][ T6519] warning: `syz.2.158' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.988883][ T6528] overlayfs: missing 'lowerdir'
[   66.202643][   T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   66.352649][   T29] usb 7-1: Using ep0 maxpacket: 8
[   66.355883][   T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   66.359216][   T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   66.362221][   T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   66.365516][   T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   66.369506][   T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   66.372285][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.580367][   T29] usb 7-1: GET_CAPABILITIES returned 0
[   66.582140][   T29] usbtmc 7-1:16.0: can't read capabilities
[   66.784587][    C2] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   66.788855][ T6526] usbtmc 7-1:16.0: Unable to send data, error -71
[   66.793857][    T9] usb 7-1: USB disconnect, device number 2
[   66.996403][ T6007] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[   66.999862][ T6007] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   67.003296][ T6007] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   67.007761][ T6007] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[   67.016607][ T6007] usb 5-1: USB disconnect, device number 6
[   67.126190][ T6549] __nla_validate_parse: 2 callbacks suppressed
[   67.126205][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'.
[   67.137806][ T6549] vti0: entered promiscuous mode
[   67.233946][ T6556] vivid-001: disconnect
[   67.237141][ T6555] vivid-001: reconnect
[   67.276548][ T6558] overlayfs: missing 'lowerdir'
[   67.368955][ T6566] netlink: 60 bytes leftover after parsing attributes in process `syz.0.173'.
[   67.371880][ T6566] unsupported nlmsg_type 40
[   67.644494][ T6584] overlayfs: missing 'workdir'
[   67.680931][ T6587] netlink: 48 bytes leftover after parsing attributes in process `syz.0.180'.
[   68.043026][ T5819] usb 44-1: device descriptor read/8, error -110
[   68.433843][ T5819] usb usb44-port1: attempt power cycle
[   68.485741][ T6612] overlayfs: missing 'workdir'
[   68.556819][ T6616] syz.3.190: attempt to access beyond end of device
[   68.556819][ T6616] loop3: rw=0, sector=16, nr_sectors = 1 limit=0
[   68.561608][ T6616] qnx6: unable to read the first superblock
[   68.565390][ T6616] syz.3.190: attempt to access beyond end of device
[   68.565390][ T6616] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[   68.569526][ T6616] qnx6: unable to read the first superblock
[   68.571544][ T6616] qnx6: unable to read the first superblock
[   68.601029][ T6621] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   68.709827][ T6629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6629 comm=syz.0.195
[   68.747539][ T6631] SELinux:  Context system_u:object_r:mqueue_spool_t:s0 is not valid (left unmapped).
[   68.751651][   T40] kauditd_printk_skb: 37 callbacks suppressed
[   68.751661][   T40] audit: type=1400 audit(1749423067.719:334): avc:  denied  { relabelto } for  pid=6630 comm="syz.0.196" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mqueue_spool_t:s0"
[   68.766083][   T40] audit: type=1400 audit(1749423067.719:335): avc:  denied  { associate } for  pid=6630 comm="syz.0.196" name="cgroup.procs" dev="cgroup" ino=62 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mqueue_spool_t:s0"
[   68.805438][ T6641] netlink: 48 bytes leftover after parsing attributes in process `syz.3.199'.
[   68.806430][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'.
[   68.818012][ T1244] bond0: (slave bond_slave_0): interface is now down
[   68.820819][ T1244] bond0: (slave bond_slave_1): interface is now down
[   68.828576][ T1244] bond0: now running without any active interface!
[   68.926606][   T40] audit: type=1400 audit(1749423067.899:336): avc:  denied  { create } for  pid=6655 comm="syz.3.204" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   68.932093][ T6659] 9pnet_virtio: no channels available for device syz
[   68.954794][ T6659] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[   68.960281][   T40] audit: type=1400 audit(1749423067.929:337): avc:  denied  { relabelto } for  pid=6658 comm="syz.2.205" name="file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[   68.969643][   T40] audit: type=1400 audit(1749423067.929:338): avc:  denied  { associate } for  pid=6658 comm="syz.2.205" name="file0" dev="tmpfs" ino=351 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0"
[   68.978810][   T40] audit: type=1400 audit(1749423067.929:339): avc:  denied  { mounton } for  pid=6658 comm="syz.2.205" path="/56/file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[   69.003097][ T5819] usb usb44-port1: unable to enumerate USB device
[   69.009112][ T6663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.013502][   T40] audit: type=1400 audit(1749423067.979:340): avc:  denied  { add_name } for  pid=6658 comm="syz.2.205" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0"
[   69.025002][   T40] audit: type=1400 audit(1749423067.989:341): avc:  denied  { create } for  pid=6658 comm="syz.2.205" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   69.031128][   T40] audit: type=1400 audit(1749423067.989:342): avc:  denied  { associate } for  pid=6658 comm="syz.2.205" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   69.037897][   T40] audit: type=1400 audit(1749423067.999:343): avc:  denied  { create } for  pid=6665 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   69.113445][ T6674] xt_CT: You must specify a L4 protocol and not use inversions on it
[   69.116762][ T6677] macvlan0: entered promiscuous mode
[   69.118563][ T6677] macvlan0: entered allmulticast mode
[   69.120238][ T6677] veth1_vlan: entered allmulticast mode
[   69.125445][ T6674] netlink: 'syz.2.211': attribute type 1 has an invalid length.
[   69.243573][ T6690] 9pnet_fd: p9_fd_create_unix (6690): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   69.247960][ T6691] 9pnet_fd: p9_fd_create_unix (6691): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   69.275461][    C1] vkms_vblank_simulate: vblank timer overrun
[   69.361886][ T6700] netlink: 32 bytes leftover after parsing attributes in process `syz.2.220'.
[   69.466617][ T6710] x_tables: duplicate underflow at hook 1
[   69.536900][ T6717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6717 comm=syz.0.226
[   69.771727][ T6733] Bluetooth: MGMT ver 1.23
[   69.772890][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'.
[   69.801820][ T6737] ptrace attach of "/syz-executor exec"[5940] was attempted by "/syz-executor exec"[6737]
[   69.878157][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'.
[   69.881708][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'.
[   70.083955][ T6773] netlink: 'syz.0.246': attribute type 5 has an invalid length.
[   70.343281][   T34] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[   70.375609][ T6788] sctp: [Deprecated]: syz.0.250 (pid 6788) Use of struct sctp_assoc_value in delayed_ack socket option.
[   70.375609][ T6788] Use struct sctp_sack_info instead
[   70.384533][ T6787] vxcan0: tx address claim with dlc 0
[   70.472590][   T34] usb 8-1: device descriptor read/64, error -71
[   70.532080][ T6794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6794 comm=syz.0.253
[   70.719737][ T6802] netlink: 36 bytes leftover after parsing attributes in process `syz.0.255'.
[   70.722551][   T34] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[   70.862614][   T34] usb 8-1: device descriptor read/64, error -71
[   70.972686][   T34] usb usb8-port1: attempt power cycle
[   71.085605][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[   71.087699][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[   71.332579][   T34] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[   71.353358][   T34] usb 8-1: device descriptor read/8, error -71
[   71.622556][   T34] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[   71.653025][   T34] usb 8-1: device descriptor read/8, error -71
[   71.762755][   T34] usb usb8-port1: unable to enumerate USB device
[   71.980803][ T6819] No memory to map
[   72.320528][ T6831] __nla_validate_parse: 2 callbacks suppressed
[   72.320539][ T6831] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.264'.
[   72.564521][ T6843] process 'syz.0.267' launched './file0' with NULL argv: empty string added
[   72.832589][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   72.982629][   T10] usb 5-1: Using ep0 maxpacket: 8
[   72.987021][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   72.991262][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   72.995304][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   72.998976][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   73.004168][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   73.007544][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.117433][ T6847] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   73.119370][ T6847] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   73.121624][ T6847] vhci_hcd vhci_hcd.0: Device attached
[   73.127774][ T6848] vhci_hcd: connection closed
[   73.129056][   T61] vhci_hcd: stop threads
[   73.133054][   T61] vhci_hcd: release socket
[   73.134447][   T61] vhci_hcd: disconnect device
[   73.216096][   T10] usb 5-1: GET_CAPABILITIES returned 0
[   73.217804][   T10] usbtmc 5-1:16.0: can't read capabilities
[   73.263041][ T6851] netlink: 52 bytes leftover after parsing attributes in process `syz.2.270'.
[   73.266016][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'.
[   73.418575][ T6845] FAULT_INJECTION: forcing a failure.
[   73.418575][ T6845] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   73.422829][ T6845] CPU: 0 UID: 0 PID: 6845 Comm: syz.0.268 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) 
[   73.422844][ T6845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   73.422851][ T6845] Call Trace:
[   73.422854][ T6845]  <TASK>
[   73.422859][ T6845]  dump_stack_lvl+0x16c/0x1f0
[   73.422879][ T6845]  should_fail_ex+0x512/0x640
[   73.422896][ T6845]  _copy_from_user+0x2e/0xd0
[   73.422912][ T6845]  usbtmc_write+0x60f/0xca0
[   73.422930][ T6845]  ? __pfx_usbtmc_write+0x10/0x10
[   73.422943][ T6845]  ? bpf_lsm_file_permission+0x9/0x10
[   73.422960][ T6845]  ? security_file_permission+0x71/0x210
[   73.422976][ T6845]  ? rw_verify_area+0xcf/0x680
[   73.422990][ T6845]  ? __pfx_usbtmc_write+0x10/0x10
[   73.423001][ T6845]  vfs_writev+0x5df/0xde0
[   73.423017][ T6845]  ? __pfx_vfs_writev+0x10/0x10
[   73.423039][ T6845]  ? __fget_files+0x20e/0x3c0
[   73.423053][ T6845]  ? __fget_files+0x1c0/0x3c0
[   73.423070][ T6845]  ? do_writev+0x132/0x340
[   73.423081][ T6845]  do_writev+0x132/0x340
[   73.423093][ T6845]  ? __pfx_do_writev+0x10/0x10
[   73.423110][ T6845]  do_syscall_64+0xcd/0x4c0
[   73.423127][ T6845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.423138][ T6845] RIP: 0033:0x7fb13d18e929
[   73.423148][ T6845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.423158][ T6845] RSP: 002b:00007fb13e09f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[   73.423169][ T6845] RAX: ffffffffffffffda RBX: 00007fb13d3b5fa0 RCX: 00007fb13d18e929
[   73.423176][ T6845] RDX: 0000000000000001 RSI: 00002000000023c0 RDI: 0000000000000004
[   73.423182][ T6845] RBP: 00007fb13e09f090 R08: 0000000000000000 R09: 0000000000000000
[   73.423188][ T6845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   73.423194][ T6845] R13: 0000000000000000 R14: 00007fb13d3b5fa0 R15: 00007ffde7bb2f18
[   73.423207][ T6845]  </TASK>
[   73.425029][   T10] usb 5-1: USB disconnect, device number 7
[   73.552624][ T6007] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   73.700395][ T6855] netdevsim netdevsim3 ������: renamed from netdevsim0 (while UP)
[   73.703037][ T6007] usb 7-1: Using ep0 maxpacket: 8
[   73.706553][ T6007] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   73.710232][ T6007] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   73.710248][ T6007] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   73.710260][ T6007] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   73.710283][ T6007] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   73.710294][ T6007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.753577][ T6857] syz.3.273 uses obsolete (PF_INET,SOCK_PACKET)
[   73.766130][ T6857] binder: 6856:6857 ioctl c0306201 2000000003c0 returned -22
[   73.933066][ T6007] usb 7-1: GET_CAPABILITIES returned 0
[   73.935024][ T6007] usbtmc 7-1:16.0: can't read capabilities
[   74.009626][   T40] kauditd_printk_skb: 43 callbacks suppressed
[   74.009636][   T40] audit: type=1400 audit(1749423072.979:387): avc:  denied  { accept } for  pid=6865 comm="syz.0.276" lport=54856 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   74.020601][   T40] audit: type=1400 audit(1749423072.979:388): avc:  denied  { write } for  pid=6865 comm="syz.0.276" lport=54856 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   74.028209][   T40] audit: type=1400 audit(1749423072.979:389): avc:  denied  { setopt } for  pid=6865 comm="syz.0.276" lport=54856 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   74.148108][ T6853] gtp0: entered promiscuous mode
[   74.155578][    C3] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   74.158460][ T6853] usbtmc 7-1:16.0: Unable to send data, error -71
[   74.217413][   T34] usb 7-1: USB disconnect, device number 3
[   74.622044][   T40] audit: type=1400 audit(1749423073.589:390): avc:  denied  { sqpoll } for  pid=6875 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   74.669212][ T6879] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.676957][ T6879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.281'.
[   74.722570][   T40] audit: type=1400 audit(1749423073.689:391): avc:  denied  { create } for  pid=6880 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[   74.760837][   T40] audit: type=1400 audit(1749423073.729:392): avc:  denied  { ioctl } for  pid=6883 comm="syz.2.283" path="socket:[10973]" dev="sockfs" ino=10973 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   74.790467][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'.
[   74.798283][   T40] audit: type=1400 audit(1749423073.769:393): avc:  denied  { read } for  pid=6885 comm="syz.3.284" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   74.809898][   T40] audit: type=1400 audit(1749423073.769:394): avc:  denied  { open } for  pid=6885 comm="syz.3.284" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   74.818041][   T40] audit: type=1400 audit(1749423073.769:395): avc:  denied  { map } for  pid=6885 comm="syz.3.284" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   74.843116][   T40] audit: type=1400 audit(1749423073.819:396): avc:  denied  { create } for  pid=6889 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   74.857118][ T6891] pim6reg: entered allmulticast mode
[   74.897737][ T6894] xt_l2tp: missing protocol rule (udp|l2tpip)
[   74.987206][ T6901] dns_resolver: Unsupported server list version (0)
[   75.190225][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[   75.194846][ T6920] batadv_slave_0: entered promiscuous mode
[   75.196694][ T6920] batadv_slave_0: left allmulticast mode
[   75.312601][ T6018] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   75.472703][ T6018] usb 5-1: Using ep0 maxpacket: 8
[   75.476579][ T6018] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   75.480758][ T6018] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[   75.484696][ T6018] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   75.488329][ T6018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.065494][    T9] libceph: connect (1)[c::]:6789 error -22
[   76.067671][    T9] libceph: mon0 (1)[c::]:6789 connect error
[   76.108081][ T6946] ceph: No mds server is up or the cluster is laggy
[   76.543960][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.309'.
[   76.630962][ T6985] syz.3.313: attempt to access beyond end of device
[   76.630962][ T6985] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[   76.721289][ T6988] overlayfs: conflicting lowerdir path
[   76.801744][ T6990] "syz.2.315" (6990) uses obsolete ecb(arc4) skcipher
[   76.805859][ T6990] netlink: 36 bytes leftover after parsing attributes in process `syz.2.315'.
[   77.184280][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.188976][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.193630][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.196685][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.200236][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.209373][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.212049][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.216072][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.219136][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.221695][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.356951][ T7002] chnl_net:caif_netlink_parms(): no params data found
[   77.433953][ T1244] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.497475][ T1244] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.503988][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.506335][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.508697][ T7002] bridge_slave_0: entered allmulticast mode
[   77.511573][ T7002] bridge_slave_0: entered promiscuous mode
[   77.516251][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.518776][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.521145][ T7002] bridge_slave_1: entered allmulticast mode
[   77.524110][ T7002] bridge_slave_1: entered promiscuous mode
[   77.554327][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.559459][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.596902][ T7002] team0: Port device team_slave_0 added
[   77.603639][ T7002] team0: Port device team_slave_1 added
[   77.608075][ T7029] mkiss: ax0: crc mode is auto.
[   77.631012][ T7032] program syz.3.324 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   77.635307][ T7033] program syz.3.324 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   77.635854][ T1244] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.672185][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.675634][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.684977][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.689645][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.691970][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.700020][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.742102][ T7002] hsr_slave_0: entered promiscuous mode
[   77.744645][ T7002] hsr_slave_1: entered promiscuous mode
[   77.746710][ T7002] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.749057][ T7002] Cannot create hsr debugfs directory
[   77.801909][ T1244] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.835940][ T7044] xt_hashlimit: size too large, truncated to 1048576
[   77.908198][ T7002] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   77.912556][ T7002] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   77.944088][ T7002] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   77.956269][ T7002] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   77.976740][ T7061] netlink: 52 bytes leftover after parsing attributes in process `syz.2.331'.
[   77.987850][ T1244] bridge_slave_1: left allmulticast mode
[   77.989836][ T1244] bridge_slave_1: left promiscuous mode
[   77.992699][ T1244] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.006919][ T1244] bridge_slave_0: left allmulticast mode
[   78.008697][ T1244] bridge_slave_0: left promiscuous mode
[   78.010514][ T1244] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.070198][    T9] usb 5-1: USB disconnect, device number 8
[   78.086795][ T7072] netlink: 'syz.2.332': attribute type 10 has an invalid length.
[   78.089245][ T7072] netlink: 40 bytes leftover after parsing attributes in process `syz.2.332'.
[   78.297499][ T1244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.303916][ T1244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.310840][ T1244] bond0 (unregistering): Released all slaves
[   78.324325][ T7065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.335126][ T7072] geneve0: left allmulticast mode
[   78.338221][ T7072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.342035][ T7072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.346691][ T7072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.349516][ T7072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.355502][ T7072] geneve0: entered allmulticast mode
[   78.357547][ T7072] team0: Port device geneve0 added
[   78.411856][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.422244][ T7002] 8021q: adding VLAN 0 to HW filter on device team0
[   78.429765][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.432100][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.459629][ T7095] GUP no longer grows the stack in syz.2.339 (7095): 200000007000-20000000a000 (200000004000)
[   78.465156][ T7095] CPU: 3 UID: 0 PID: 7095 Comm: syz.2.339 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) 
[   78.465173][ T7095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   78.465180][ T7095] Call Trace:
[   78.465184][ T7095]  <TASK>
[   78.465189][ T7095]  dump_stack_lvl+0x16c/0x1f0
[   78.465210][ T7095]  gup_vma_lookup+0x1d2/0x220
[   78.465229][ T7095]  __get_user_pages+0x271/0x3b80
[   78.465251][ T7095]  ? kasan_save_stack+0x33/0x60
[   78.465263][ T7095]  ? kasan_save_track+0x14/0x30
[   78.465276][ T7095]  ? __kasan_kmalloc+0xaa/0xb0
[   78.465288][ T7095]  ? __kvmalloc_node_noprof+0x27b/0x620
[   78.465300][ T7095]  ? xdp_umem_create+0x652/0x1270
[   78.465315][ T7095]  ? __pfx___get_user_pages+0x10/0x10
[   78.465332][ T7095]  ? __x64_sys_setsockopt+0xbd/0x160
[   78.465348][ T7095]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.465364][ T7095]  __gup_longterm_locked+0x5e7/0x1850
[   78.465385][ T7095]  ? __pfx___gup_longterm_locked+0x10/0x10
[   78.465403][ T7095]  pin_user_pages+0x13c/0x160
[   78.465414][ T7095]  ? __pfx_pin_user_pages+0x10/0x10
[   78.465424][ T7095]  ? trace_kmalloc+0x2b/0xd0
[   78.465442][ T7095]  ? xdp_umem_create+0x652/0x1270
[   78.465461][ T7095]  xdp_umem_create+0x73c/0x1270
[   78.465481][ T7095]  xsk_setsockopt+0x5b2/0x840
[   78.465496][ T7095]  ? __pfx_xsk_setsockopt+0x10/0x10
[   78.465510][ T7095]  ? __lock_acquire+0x622/0x1c90
[   78.465532][ T7095]  ? selinux_socket_setsockopt+0x6a/0x80
[   78.465547][ T7095]  ? __pfx_xsk_setsockopt+0x10/0x10
[   78.465561][ T7095]  do_sock_setsockopt+0x224/0x470
[   78.465572][ T7095]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   78.465592][ T7095]  __sys_setsockopt+0x1a0/0x230
[   78.465610][ T7095]  __x64_sys_setsockopt+0xbd/0x160
[   78.465624][ T7095]  ? do_syscall_64+0x91/0x4c0
[   78.465640][ T7095]  ? lockdep_hardirqs_on+0x7c/0x110
[   78.465656][ T7095]  do_syscall_64+0xcd/0x4c0
[   78.465674][ T7095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.465684][ T7095] RIP: 0033:0x7fbfb9b8e929
[   78.465693][ T7095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.465703][ T7095] RSP: 002b:00007fbfba94d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   78.465714][ T7095] RAX: ffffffffffffffda RBX: 00007fbfb9db5fa0 RCX: 00007fbfb9b8e929
[   78.465721][ T7095] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003
[   78.465727][ T7095] RBP: 00007fbfb9c10b39 R08: 0000000000000020 R09: 0000000000000000
[   78.465733][ T7095] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[   78.465739][ T7095] R13: 0000000000000000 R14: 00007fbfb9db5fa0 R15: 00007ffc8fc43da8
[   78.465753][ T7095]  </TASK>
[   78.471791][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.542823][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   78.544307][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.569457][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'.
[   78.577648][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'.
[   78.692599][    T9] usb 5-1: Using ep0 maxpacket: 32
[   78.697444][    T9] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[   78.699990][    T9] usb 5-1: config 0 has no interface number 0
[   78.702376][    T9] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   78.709737][    T9] usb 5-1: config 0 interface 85 has no altsetting 0
[   78.724916][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   78.727950][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.730670][    T9] usb 5-1: Product: syz
[   78.732035][ T1244] hsr_slave_0: left promiscuous mode
[   78.734063][    T9] usb 5-1: Manufacturer: syz
[   78.735516][    T9] usb 5-1: SerialNumber: syz
[   78.738826][ T1244] hsr_slave_1: left promiscuous mode
[   78.740788][ T1244] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.743556][    T9] usb 5-1: config 0 descriptor??
[   78.747078][ T1244] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.750037][ T1244] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.752382][ T1244] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.788114][ T1244] veth1_macvtap: left promiscuous mode
[   78.790125][ T1244] veth0_macvtap: left promiscuous mode
[   78.792706][ T1244] veth1_vlan: left promiscuous mode
[   78.795061][ T1244] veth0_vlan: left promiscuous mode
[   78.845303][ T7118] netlink: 20 bytes leftover after parsing attributes in process `syz.3.342'.
[   78.900501][ T7120] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.906402][ T7120] syz.3.342: attempt to access beyond end of device
[   78.906402][ T7120] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0
[   78.910632][ T7120] syz.3.342: attempt to access beyond end of device
[   78.910632][ T7120] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0
[   78.916763][ T7120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[   78.920470][ T7120] syz.3.342: attempt to access beyond end of device
[   78.920470][ T7120] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0
[   78.925350][ T7120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[   78.934580][ T7120] syz.3.342: attempt to access beyond end of device
[   78.934580][ T7120] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0
[   78.938643][ T7120] syz.3.342: attempt to access beyond end of device
[   78.938643][ T7120] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0
[   78.942963][ T7120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[   78.946039][ T7120] syz.3.342: attempt to access beyond end of device
[   78.946039][ T7120] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0
[   78.950106][ T7120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[   78.954686][ T7120] syz.3.342: attempt to access beyond end of device
[   78.954686][ T7120] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0
[   78.958843][ T7120] syz.3.342: attempt to access beyond end of device
[   78.958843][ T7120] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0
[   78.963479][ T7120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[   78.966611][ T7120] syz.3.342: attempt to access beyond end of device
[   78.966611][ T7120] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0
[   78.970687][ T7120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[   78.975323][ T7120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[   78.978351][ T7120] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[   78.984405][ T7120] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[   79.243271][ T5955] Bluetooth: hci2: command tx timeout
[   79.416188][ T1244] team0 (unregistering): Port device team_slave_1 removed
[   79.476104][ T1244] team0 (unregistering): Port device team_slave_0 removed
[   80.014198][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.021613][   T40] kauditd_printk_skb: 37 callbacks suppressed
[   80.021628][   T40] audit: type=1400 audit(1749423078.989:434): avc:  denied  { write } for  pid=7132 comm="syz.2.345" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[   80.071820][ T7140] sctp: [Deprecated]: syz.3.346 (pid 7140) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.071820][ T7140] Use struct sctp_sack_info instead
[   80.071860][   T40] audit: type=1400 audit(1749423079.039:435): avc:  denied  { lock } for  pid=7138 comm="syz.3.346" path="socket:[11224]" dev="sockfs" ino=11224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   80.077678][ T7140] sctp: [Deprecated]: syz.3.346 (pid 7140) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.077678][ T7140] Use struct sctp_sack_info instead
[   80.077719][ T7140] sctp: [Deprecated]: syz.3.346 (pid 7140) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.077719][ T7140] Use struct sctp_sack_info instead
[   80.077782][ T7140] sctp: [Deprecated]: syz.3.346 (pid 7140) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.077782][ T7140] Use struct sctp_sack_info instead
[   80.242199][ T7002] veth0_vlan: entered promiscuous mode
[   80.250359][ T7002] veth1_vlan: entered promiscuous mode
[   80.265309][ T7002] veth0_macvtap: entered promiscuous mode
[   80.269614][ T7002] veth1_macvtap: entered promiscuous mode
[   80.281382][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.283624][ T6029] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[   80.290228][   T40] audit: type=1400 audit(1749423079.259:436): avc:  denied  { mounton } for  pid=7155 comm="syz.3.348" path="/bus" dev="ramfs" ino=14869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   80.292142][ T7159] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   80.303473][ T7159] overlayfs: failed to set xattr on upper
[   80.305271][ T7159] overlayfs: ...falling back to redirect_dir=nofollow.
[   80.305820][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.307332][ T7159] overlayfs: ...falling back to index=off.
[   80.307338][ T7159] overlayfs: ...falling back to uuid=null.
[   80.307343][ T7159] overlayfs: ...falling back to xino=off.
[   80.315924][ T7159] overlayfs: conflicting lowerdir path
[   80.321906][ T7002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.327255][ T7002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.330837][ T7002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.334600][ T7002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.409200][   T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.411723][   T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.437903][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.440412][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.448230][ T6029] usb 7-1: Invalid ep0 maxpacket: 32
[   80.465324][   T40] audit: type=1400 audit(1749423079.439:437): avc:  denied  { mounton } for  pid=7002 comm="syz-executor" path="/syzkaller.Xx97o6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   80.588737][ T7172] program syz.4.316 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   80.592773][ T6029] usb 7-1: new low-speed USB device number 5 using dummy_hcd
[   80.752647][ T6029] usb 7-1: Invalid ep0 maxpacket: 32
[   80.755219][ T6029] usb usb7-port1: attempt power cycle
[   81.092788][ T6029] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[   81.114575][ T6029] usb 7-1: Invalid ep0 maxpacket: 32
[   81.242660][ T6029] usb 7-1: new low-speed USB device number 7 using dummy_hcd
[   81.263193][ T6029] usb 7-1: Invalid ep0 maxpacket: 32
[   81.265877][ T6029] usb usb7-port1: unable to enumerate USB device
[   81.316618][    T9] appletouch 5-1:0.85: Failed to read mode from device.
[   81.323652][ T5955] Bluetooth: hci2: command tx timeout
[   81.325183][    T9] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[   81.334077][  T992] cfg80211: failed to load regulatory.db
[   81.340234][    T9] usb 5-1: USB disconnect, device number 9
[   81.397545][   T40] audit: type=1326 audit(1749423080.369:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.4.351" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f33f8e929 code=0x0
[   81.504910][ T7201] xt_CONNSECMARK: invalid mode: 0
[   81.643514][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   81.794303][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.797628][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.800783][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   81.804914][    T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   81.807706][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.811420][    T9] usb 5-1: config 0 descriptor??
[   82.221285][    T9] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max
[   82.227019][    T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   82.240028][    T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   82.614397][ T7221] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[   82.616457][ T7221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   82.618873][ T7221] vhci_hcd vhci_hcd.0: Device attached
[   82.622430][ T7222] vhci_hcd: unknown pdu 1
[   82.625527][   T94] vhci_hcd: stop threads
[   82.626918][   T94] vhci_hcd: release socket
[   82.628407][   T94] vhci_hcd: disconnect device
[   82.632219][   T40] audit: type=1400 audit(1749423081.599:439): avc:  denied  { load_policy } for  pid=7220 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   82.633264][ T7221] SELinux:  policydb string length 8200 does not match expected length 8
[   82.644932][ T7221] SELinux: failed to load policy
[   82.653114][   T40] audit: type=1326 audit(1749423081.629:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7220 comm="syz.3.355" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7c678e929 code=0x0
[   83.187529][   T40] audit: type=1400 audit(1749423082.159:441): avc:  denied  { mounton } for  pid=7234 comm="syz.2.358" path="/122/bus" dev="tmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[   83.188927][ T7236] Mount JFS Failure: -22
[   83.299324][   T40] audit: type=1400 audit(1749423082.269:442): avc:  denied  { read } for  pid=7239 comm="syz.2.360" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   83.306471][   T40] audit: type=1400 audit(1749423082.269:443): avc:  denied  { open } for  pid=7239 comm="syz.2.360" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   83.327337][ T7245] FAULT_INJECTION: forcing a failure.
[   83.327337][ T7245] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   83.332231][ T7245] CPU: 3 UID: 0 PID: 7245 Comm: syz.4.361 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) 
[   83.332246][ T7245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   83.332254][ T7245] Call Trace:
[   83.332258][ T7245]  <TASK>
[   83.332263][ T7245]  dump_stack_lvl+0x16c/0x1f0
[   83.332285][ T7245]  should_fail_ex+0x512/0x640
[   83.332303][ T7245]  strncpy_from_user+0x3b/0x2e0
[   83.332319][ T7245]  getname_flags.part.0+0x8f/0x550
[   83.332334][ T7245]  getname_flags+0x93/0xf0
[   83.332349][ T7245]  __x64_sys_rename+0x65/0xa0
[   83.332368][ T7245]  do_syscall_64+0xcd/0x4c0
[   83.332386][ T7245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.332398][ T7245] RIP: 0033:0x7f9f33f8e929
[   83.332407][ T7245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.332417][ T7245] RSP: 002b:00007f9f34dc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[   83.332428][ T7245] RAX: ffffffffffffffda RBX: 00007f9f341b5fa0 RCX: 00007f9f33f8e929
[   83.332435][ T7245] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180
[   83.332442][ T7245] RBP: 00007f9f34dc0090 R08: 0000000000000000 R09: 0000000000000000
[   83.332448][ T7245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   83.332454][ T7245] R13: 0000000000000000 R14: 00007f9f341b5fa0 R15: 00007ffda10be4b8
[   83.332468][ T7245]  </TASK>
[   83.378662][ T7249] netlink: 9 bytes leftover after parsing attributes in process `syz.2.360'.
[   83.382457][ T7249] 0�: renamed from hsr0
[   83.388240][ T7249] 0�: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   83.392900][ T7249] 0�: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.398476][ T7249] A link change request failed with some changes committed already. Interface 
70� may have been left with an inconsistent configuration, please check.
[   83.407858][ T5955] Bluetooth: hci2: command tx timeout
[   83.471024][ T7259] usb usb9: usbfs: interface 0 claimed by hub while 'syz.2.360' resets device
[   83.508155][ T7266] netlink: 104 bytes leftover after parsing attributes in process `syz.4.364'.
[   83.593428][ T7277] SELinux: security_context_str_to_sid (5���]�S9q#���) failed with errno=-22
[   83.596539][ T7276] SELinux: security_context_str_to_sid (5���]�S9q#���) failed with errno=-22
[   83.756956][ T7294] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.369'.
[   83.861636][ T7307] FAULT_INJECTION: forcing a failure.
[   83.861636][ T7307] name failslab, interval 1, probability 0, space 0, times 0
[   83.868036][ T7307] CPU: 0 UID: 0 PID: 7307 Comm: syz.2.371 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) 
[   83.868051][ T7307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   83.868058][ T7307] Call Trace:
[   83.868065][ T7307]  <TASK>
[   83.868070][ T7307]  dump_stack_lvl+0x16c/0x1f0
[   83.868091][ T7307]  should_fail_ex+0x512/0x640
[   83.868106][ T7307]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[   83.868123][ T7307]  should_failslab+0xc2/0x120
[   83.868139][ T7307]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[   83.868153][ T7307]  ? __d_alloc+0x31/0xaa0
[   83.868172][ T7307]  __d_alloc+0x31/0xaa0
[   83.868187][ T7307]  ? __d_lookup+0x266/0x4a0
[   83.868200][ T7307]  d_alloc+0x4a/0x1e0
[   83.868218][ T7307]  lookup_one_qstr_excl_raw.part.0+0x96/0x160
[   83.868229][ T7307]  ? lookup_dcache+0x66/0x170
[   83.868240][ T7307]  lookup_one_qstr_excl+0x3e/0x120
[   83.868252][ T7307]  do_renameat2+0x56d/0xc90
[   83.868273][ T7307]  ? __pfx_do_renameat2+0x10/0x10
[   83.868290][ T7307]  ? find_held_lock+0x2b/0x80
[   83.868303][ T7307]  ? __might_fault+0xe3/0x190
[   83.868317][ T7307]  ? __might_fault+0x13b/0x190
[   83.868337][ T7307]  ? getname_flags.part.0+0x1c5/0x550
[   83.868351][ T7307]  __x64_sys_rename+0x7d/0xa0
[   83.868368][ T7307]  do_syscall_64+0xcd/0x4c0
[   83.868386][ T7307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.868396][ T7307] RIP: 0033:0x7fbfb9b8e929
[   83.868405][ T7307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.868416][ T7307] RSP: 002b:00007fbfba94d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[   83.868427][ T7307] RAX: ffffffffffffffda RBX: 00007fbfb9db5fa0 RCX: 00007fbfb9b8e929
[   83.868433][ T7307] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180
[   83.868440][ T7307] RBP: 00007fbfba94d090 R08: 0000000000000000 R09: 0000000000000000
[   83.868446][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   83.868452][ T7307] R13: 0000000000000000 R14: 00007fbfb9db5fa0 R15: 00007ffc8fc43da8
[   83.868466][ T7307]  </TASK>
[   83.971435][ T7314] xt_hashlimit: overflow, rate too high: 0
[   84.009911][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'.
[   84.047200][ T7322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.376'.
[   84.156814][ T7328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'.
[   84.159976][   T61] ------------[ cut here ]------------
[   84.164882][   T61] RTNL: assertion failed at ./include/net/netdev_lock.h (72)
[   84.168543][   T61] WARNING: CPU: 1 PID: 61 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230
[   84.172465][   T61] Modules linked in:
[   84.174734][   T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u32:3 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   84.180723][   T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   84.186134][   T61] Workqueue: bond0 bond_mii_monitor
[   84.188317][   T61] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230
[   84.190821][   T61] Code: 05 ff ff ff e8 64 d1 59 f8 c6 05 76 2e 2e 07 01 90 ba 48 00 00 00 48 c7 c6 c0 88 e3 8c 48 c7 c7 60 88 e3 8c e8 64 96 18 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 3e a8 90 e8 fe 8e c0 f8 e9
[   84.199263][   T61] RSP: 0018:ffffc90000cf79f0 EFLAGS: 00010286
[   84.203251][   T61] RAX: 0000000000000000 RBX: ffff88802d084000 RCX: ffffffff817ae368
[   84.206307][   T61] RDX: ffff88801d742440 RSI: ffffffff817ae375 RDI: 0000000000000001
[   84.209047][   T61] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[   84.212375][   T61] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff9200019ef48
[   84.215256][   T61] R13: ffff88802d084cc5 R14: ffffffff8c5909a0 R15: ffffffff899b8950
[   84.217685][   T61] FS:  0000000000000000(0000) GS:ffff8880d6854000(0000) knlGS:0000000000000000
[   84.220699][   T61] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   84.223625][   T61] CR2: 00007fc7c67746c0 CR3: 000000004aa47000 CR4: 0000000000352ef0
[   84.226898][   T61] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   84.229898][   T61] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   84.233184][   T61] Call Trace:
[   84.234995][   T61]  <TASK>
[   84.236060][   T61]  ethtool_op_get_link+0x1d/0x70
[   84.237607][   T61]  bond_check_dev_link+0x3f9/0x710
[   84.237802][ T7334] netlink: 'syz.2.379': attribute type 15 has an invalid length.
[   84.239211][   T61]  ? stack_trace_save+0x8e/0xc0
[   84.241646][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.379'.
[   84.243719][   T61]  ? __pfx_bond_check_dev_link+0x10/0x10
[   84.243744][   T61]  bond_mii_monitor+0x3c0/0x2dc0
[   84.250586][   T61]  ? __pfx_bond_mii_monitor+0x10/0x10
[   84.252995][   T61]  ? rcu_is_watching+0x12/0xc0
[   84.254927][   T61]  process_one_work+0x9cf/0x1b70
[   84.256476][   T61]  ? __pfx_process_one_work+0x10/0x10
[   84.258182][   T61]  ? assign_work+0x1a0/0x250
[   84.259889][   T61]  worker_thread+0x6c8/0xf10
[   84.261810][   T61]  ? __kthread_parkme+0x19e/0x250
[   84.264020][   T61]  ? __pfx_worker_thread+0x10/0x10
[   84.266156][   T61]  kthread+0x3c5/0x780
[   84.267814][   T61]  ? __pfx_kthread+0x10/0x10
[   84.269679][   T61]  ? rcu_is_watching+0x12/0xc0
[   84.271672][   T61]  ? __pfx_kthread+0x10/0x10
[   84.273651][   T61]  ret_from_fork+0x5d4/0x6f0
[   84.275557][   T61]  ? __pfx_kthread+0x10/0x10
[   84.277508][   T61]  ret_from_fork_asm+0x1a/0x30
[   84.279597][   T61]  </TASK>
[   84.280944][   T61] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   84.283986][   T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u32:3 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) 
[   84.288844][   T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   84.293150][   T61] Workqueue: bond0 bond_mii_monitor
[   84.295262][   T61] Call Trace:
[   84.296602][   T61]  <TASK>
[   84.297863][   T61]  dump_stack_lvl+0x3d/0x1f0
[   84.299823][   T61]  panic+0x71c/0x800
[   84.301478][   T61]  ? __pfx_panic+0x10/0x10
[   84.303216][   T61]  ? show_trace_log_lvl+0x29b/0x3e0
[   84.304834][   T61]  ? check_panic_on_warn+0x1f/0xb0
[   84.306519][   T61]  ? __linkwatch_sync_dev+0x1ed/0x230
[   84.308688][   T61]  check_panic_on_warn+0xab/0xb0
[   84.310736][   T61]  __warn+0xf6/0x3c0
[   84.312384][   T61]  ? preempt_schedule_notrace+0x62/0xe0
[   84.314679][   T61]  ? __linkwatch_sync_dev+0x1ed/0x230
[   84.316915][   T61]  report_bug+0x3c3/0x580
[   84.318747][   T61]  ? __linkwatch_sync_dev+0x1ed/0x230
[   84.320979][   T61]  handle_bug+0x184/0x210
[   84.322801][   T61]  exc_invalid_op+0x17/0x50
[   84.324710][   T61]  asm_exc_invalid_op+0x1a/0x20
[   84.326770][   T61] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230
[   84.329277][   T61] Code: 05 ff ff ff e8 64 d1 59 f8 c6 05 76 2e 2e 07 01 90 ba 48 00 00 00 48 c7 c6 c0 88 e3 8c 48 c7 c7 60 88 e3 8c e8 64 96 18 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 3e a8 90 e8 fe 8e c0 f8 e9
[   84.337137][   T61] RSP: 0018:ffffc90000cf79f0 EFLAGS: 00010286
[   84.339666][   T61] RAX: 0000000000000000 RBX: ffff88802d084000 RCX: ffffffff817ae368
[   84.342911][   T61] RDX: ffff88801d742440 RSI: ffffffff817ae375 RDI: 0000000000000001
[   84.346126][   T61] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[   84.348588][   T61] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff9200019ef48
[   84.351075][   T61] R13: ffff88802d084cc5 R14: ffffffff8c5909a0 R15: ffffffff899b8950
[   84.353533][   T61]  ? __pfx_ethtool_op_get_link+0x10/0x10
[   84.355290][   T61]  ? __warn_printk+0x198/0x350
[   84.356789][   T61]  ? __warn_printk+0x1a5/0x350
[   84.358322][   T61]  ethtool_op_get_link+0x1d/0x70
[   84.359870][   T61]  bond_check_dev_link+0x3f9/0x710
[   84.361468][   T61]  ? stack_trace_save+0x8e/0xc0
[   84.363006][   T61]  ? __pfx_bond_check_dev_link+0x10/0x10
[   84.364765][   T61]  bond_mii_monitor+0x3c0/0x2dc0
[   84.366324][   T61]  ? __pfx_bond_mii_monitor+0x10/0x10
[   84.367995][   T61]  ? rcu_is_watching+0x12/0xc0
[   84.369499][   T61]  process_one_work+0x9cf/0x1b70
[   84.371064][   T61]  ? __pfx_process_one_work+0x10/0x10
[   84.372730][   T61]  ? assign_work+0x1a0/0x250
[   84.374187][   T61]  worker_thread+0x6c8/0xf10
[   84.375635][   T61]  ? __kthread_parkme+0x19e/0x250
[   84.377206][   T61]  ? __pfx_worker_thread+0x10/0x10
[   84.378825][   T61]  kthread+0x3c5/0x780
[   84.380105][   T61]  ? __pfx_kthread+0x10/0x10
[   84.381548][   T61]  ? rcu_is_watching+0x12/0xc0
[   84.383054][   T61]  ? __pfx_kthread+0x10/0x10
[   84.384493][   T61]  ret_from_fork+0x5d4/0x6f0
[   84.385958][   T61]  ? __pfx_kthread+0x10/0x10
[   84.387406][   T61]  ret_from_fork_asm+0x1a/0x30
[   84.388906][   T61]  </TASK>
[   84.390544][   T61] Kernel Offset: disabled
[   84.391915][   T61] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:51:23  Registers:
info registers vcpu 0

CPU#0
RAX=000000000017ea13 RBX=0000000000000000 RCX=ffffffff8b7fbc99 RDX=0000000000000000
RSI=ffffffff8de18f75 RDI=ffffffff8c157060 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08
R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001
R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a80c50 R15=0000000000000000
RIP=ffffffff8b7fa7ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6754000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fbfb79f5f98 CR3=000000005005f000 CR4=00352ef0
DR0=0000000000000040 DR1=0000000000000004 DR2=0000000000000003 DR3=00000000000010e3 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000050 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000000000 0000000000000120
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011b12
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011b1f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011b19
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011b2d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011bb3
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011c91
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3400000000000000 06082f78e363b2f4
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34ced100 00007f9f34184440 00007f9f34180004 00080000000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34184498 00007f9f34184490 00007f9f34184488 00007f9f34184480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff855b5315 RDI=ffffffff9b0883a0 RBP=ffffffff9b088360 RSP=ffffc90000cf7360
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b088360 R15=ffffffff855b52b0
RIP=ffffffff855b533f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6854000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fc7c67746c0 CR3=000000004aa47000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda10be840 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011b12
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011b1f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011b19
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011b2d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011bb3
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011c91
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8b790a42 RDX=ffff8880267e8000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88803c22ac00 RSP=ffffc900044578c8
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=ffffc90004457a78 R14=ffff88803820c0c0 R15=ffffc90004457ab5
RIP=ffffffff81bc1798 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555691aa500 ffffffff 00c00000
GS =0000 ffff8880d6954000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fbfba8e56c0 CR3=000000004eec4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000050 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000000000 0000000000000120
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011b12
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011b1f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011b19
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011b2d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011bb3
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34011c91
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3400000000000000 06082f78e363b2f4
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34ced100 00007f9f34184440 00007f9f34180004 00080000000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f34184498 00007f9f34184490 00007f9f34184488 00007f9f34184480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=ffffed1003aa3473 RBX=ffffed1003aa3474 RCX=ffffffff822e8ea9 RDX=ffffed1003aa3474
RSI=0000000000000004 RDI=ffff88801d51a398 RBP=ffffed1003aa3473 RSP=ffffc90004cb7590
R8 =0000000000000000 R9 =ffffed1003aa3473 R10=ffff88801d51a39b R11=0000000000000001
R12=ffff88801d51a350 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8222d41c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555584d71500 ffffffff 00c00000
GS =0000 ffff8880d6a54000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fc7c74e56c0 CR3=0000000051145000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5af86ad0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7c6811b12
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7c6811b1f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7c6811b19
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7c6811b2d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7c6811bb3
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7c6811c91
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000