last executing test programs:

2m6.2720486s ago: executing program 3 (id=403):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x501000, 0x0)
setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[])
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

2m6.224525002s ago: executing program 3 (id=406):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14, 0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x68, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x64010101, @local}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x1000, 0x0, 0x1c, {[@mptcp=@syn={0x1e, 0x6, 0x4, 0x1, 0x24, 0x1, 0x4}]}}}}}}, 0x42)
pipe2$watch_queue(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]})
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a0000000500040000000000090002"], 0x50}}, 0x20040000)
pipe(&(0x7f00000001c0))
mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0)

2m6.100157085s ago: executing program 3 (id=409):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r0, &(0x7f0000000040), 0xe09)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0000008019000000000000080000000000000000000000000000000600", [0x0, 0x2000000000001]}})

2m6.006316311s ago: executing program 3 (id=411):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket(0x2c, 0x3, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0xe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
timer_create(0x3, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x304}, "ae763f0c5728f807", "1cd4cedeca83559584928e48e6788b63", "33d35a36", "f3c580d0e5879d12"}, 0x28)
close_range(r0, r1, 0x0)
connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x15)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000040000000000008c00000000000000005f"], 0x0, 0x2a}, 0x20)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000))
symlinkat(&(0x7f0000000200)='./file0/file0\x00', r3, &(0x7f0000000240)='./file0\x00')

2m5.945900128s ago: executing program 3 (id=417):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000e000000000000e520d0ae5c9b7b5ba86ec2cfb6f66e5d494e65f69f4747d28220d775926240a6cc3cb40814c763a12fc8cb52308490f935ca", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
close(r2)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x3810050, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m5.706075645s ago: executing program 3 (id=424):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170900000000000000000100000005000700000000000800090002000000060002000100000008000a0000000000080018000a01010008001900ac1414bb6c30bc03a217dd81ae017f753c8dd1ee6390ba5adc9f3c64d9ca27ad0f49c98b56131bde18546cd68a3558fbb501e1d58012b3327fb74594f66921fee5c932c38423096f44c6a1ba50763fec02253b3b54f140a4061ee79c25a674ee"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x2, 0x4)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
r4 = socket(0x10, 0x803, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170900000000000000000100000005000700000000000800090002000000060002000100000008000a0000000000080018000a01010008001900ac1414bb6c30bc03a217dd81ae017f753c8dd1ee6390ba5adc9f3c64d9ca27ad0f49c98b56131bde18546cd68a3558fbb501e1d58012b3327fb74594f66921fee5c932c38423096f44c6a1ba50763fec02253b3b54f140a4061ee79c25a674ee"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x2, 0x4) (async)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async)
socket(0x10, 0x803, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) (async)
socket(0x10, 0x803, 0x1) (async)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) (async)

2m5.690438843s ago: executing program 32 (id=424):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170900000000000000000100000005000700000000000800090002000000060002000100000008000a0000000000080018000a01010008001900ac1414bb6c30bc03a217dd81ae017f753c8dd1ee6390ba5adc9f3c64d9ca27ad0f49c98b56131bde18546cd68a3558fbb501e1d58012b3327fb74594f66921fee5c932c38423096f44c6a1ba50763fec02253b3b54f140a4061ee79c25a674ee"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x2, 0x4)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
r4 = socket(0x10, 0x803, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170900000000000000000100000005000700000000000800090002000000060002000100000008000a0000000000080018000a01010008001900ac1414bb6c30bc03a217dd81ae017f753c8dd1ee6390ba5adc9f3c64d9ca27ad0f49c98b56131bde18546cd68a3558fbb501e1d58012b3327fb74594f66921fee5c932c38423096f44c6a1ba50763fec02253b3b54f140a4061ee79c25a674ee"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x2, 0x4) (async)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async)
socket(0x10, 0x803, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) (async)
socket(0x10, 0x803, 0x1) (async)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) (async)

1m16.945038134s ago: executing program 4 (id=2117):
r0 = creat(&(0x7f0000000600)='./file0\x00', 0x1)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r1, 0x0)
write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x500, 0x2}}, 0x40)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)

1m16.940527176s ago: executing program 4 (id=2119):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004)
accept4(0xffffffffffffffff, &(0x7f0000000180)=@hci, &(0x7f0000000040)=0x80, 0x80000)
listxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)=""/85, 0x55)

1m16.87581786s ago: executing program 4 (id=2120):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000940), 0x10)
close(0x3)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90000000430000042bbd7000fbdbdf251c00000008000200050000002c0006800c000d00ff0f000000000000080009000600002904000f00c90000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000400050000001c0006800c00070004000000000000000c000f0004000000000000000c000800feffffffffffffff180006800c00060000fcffffffffffff0800110007080000"], 0x90}}, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x9edb29158fb1f65f, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x11}, {0xffe6, 0xb}, {0xf, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804)
setsockopt$inet_tcp_int(r6, 0x6, 0x4, &(0x7f00000002c0)=0x8, 0x4)
r11 = accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14)
fcntl$setsig(r11, 0xa, 0x1a)

1m16.720649745s ago: executing program 4 (id=2125):
iopl(0x3)
iopl(0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={<r2=>0x0}, &(0x7f0000000580)=0xc)
syz_clone3(&(0x7f0000000740)={0x180000, &(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480), {0x3a}, &(0x7f00000004c0)=""/90, 0x5a, &(0x7f0000000680)=""/152, &(0x7f0000000600)=[r2], 0x1, {r1}}, 0x58)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000900)={0x0, 0x7, 0x200f, 0x1})
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r4 = socket$inet6(0xa, 0x80803, 0x1)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r6=>r0, {0x6}}, './file0\x00'})
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x81, @mcast1, 0x8}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r8, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3e5f20b6, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24008081}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty, 0x4e24, 0x2, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x2}, {0xf25a, 0x1000, 0x0, 0x20000000000400}, 0x3, 0x0, 0x1}, {{@in6=@private0, 0x4d5, 0x2b}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x10000000, 0x3, 0x3, 0x4, 0xc5b5, 0x0, 0x200001}}, 0xe8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

1m16.625717411s ago: executing program 4 (id=2126):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000000d0a01030000000000000000050000050900020073797a33000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8020}, 0x8000)
close(r0)
recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a3000000000090002"], 0x104}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r2, 0x0, 0x1}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xb, 0x1, @dev}]}, 0x40}}, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfe33)

1m16.565555037s ago: executing program 4 (id=2129):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000100)="f4440f20c03504000000440f8cc066ba4267663e66460fe750bf26430858fac4a2fd252f410f2ed8f30fc7303439c74424000c000000c7442402bb000000c7442406000000000f0114244e48c2c971dd13", 0x51}], 0x1, 0x80, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000580)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0]}, &(0x7f00000005c0)=0x1c)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000680)=r6, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_GETINFO(r7, 0xffffffff80000500, 0x0, &(0x7f00000002c0))
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r7)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r8, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80010)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4)
sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r10, @ANYBLOB="00002cbd7000fedbdf25340000000c00990004000000360000001400fe0000fdbfa11000000077be0d007cde9e26050020014e000000140055008b4e0e46c214ab24e3abb7520c0034006333d0ae042cc7f81400cf0000000000000064d6cb6fb1898595000800000000000043f89f28e4dd17e2025d7995edba1400550018e88803eca939a140586e6c84b94a14005500790008fda84e5a7bf2bfe4da2c32689300000000"], 0xac}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
r11 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11)
getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000004c0)={'erspan0\x00', <r13=>r12, 0x1, 0x1, 0x5, 0x1, {{0x23, 0x4, 0x0, 0x7, 0x8c, 0x66, 0x0, 0x1, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x2c, 0x61, 0x1, 0x0, [{@multicast2, 0xc}, {@rand_addr=0x64010101, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb5}, {@rand_addr=0x64010102, 0xff}]}, @ssrr={0x89, 0x13, 0x20, [@multicast2, @loopback, @multicast2, @private=0xa49c]}, @timestamp={0x44, 0x8, 0x47, 0x0, 0x8, [0x5b28]}, @timestamp_prespec={0x44, 0x24, 0x86, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x56}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}, {@private=0xa010101, 0x70}]}, @rr={0x7, 0xb, 0xa8, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
sendmsg$nl_route_sched(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtclass={0x68, 0x28, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x6, 0xd}, {0x10, 0x8}, {0x2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xf7, 0x52}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x4}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010)

1m16.544141618s ago: executing program 33 (id=2129):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000100)="f4440f20c03504000000440f8cc066ba4267663e66460fe750bf26430858fac4a2fd252f410f2ed8f30fc7303439c74424000c000000c7442402bb000000c7442406000000000f0114244e48c2c971dd13", 0x51}], 0x1, 0x80, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000580)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0]}, &(0x7f00000005c0)=0x1c)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000680)=r6, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_GETINFO(r7, 0xffffffff80000500, 0x0, &(0x7f00000002c0))
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r7)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r8, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80010)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4)
sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r10, @ANYBLOB="00002cbd7000fedbdf25340000000c00990004000000360000001400fe0000fdbfa11000000077be0d007cde9e26050020014e000000140055008b4e0e46c214ab24e3abb7520c0034006333d0ae042cc7f81400cf0000000000000064d6cb6fb1898595000800000000000043f89f28e4dd17e2025d7995edba1400550018e88803eca939a140586e6c84b94a14005500790008fda84e5a7bf2bfe4da2c32689300000000"], 0xac}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
r11 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11)
getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000004c0)={'erspan0\x00', <r13=>r12, 0x1, 0x1, 0x5, 0x1, {{0x23, 0x4, 0x0, 0x7, 0x8c, 0x66, 0x0, 0x1, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x2c, 0x61, 0x1, 0x0, [{@multicast2, 0xc}, {@rand_addr=0x64010101, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb5}, {@rand_addr=0x64010102, 0xff}]}, @ssrr={0x89, 0x13, 0x20, [@multicast2, @loopback, @multicast2, @private=0xa49c]}, @timestamp={0x44, 0x8, 0x47, 0x0, 0x8, [0x5b28]}, @timestamp_prespec={0x44, 0x24, 0x86, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x56}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}, {@private=0xa010101, 0x70}]}, @rr={0x7, 0xb, 0xa8, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
sendmsg$nl_route_sched(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtclass={0x68, 0x28, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x6, 0xd}, {0x10, 0x8}, {0x2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xf7, 0x52}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x4}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010)

24.353340877s ago: executing program 1 (id=2914):
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x800}}}}}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='fuseblk\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1) (async, rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (rerun: 64)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f00001d9000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="ea00001400650fbae40766b9800000c00f326635008000000f3066b9800000c00f326635002000000f30f4660f38800a0f31f3643e0f4bf7b875008ec8368385b3a9fa", 0x43}], 0x1, 0x1, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

24.23974074s ago: executing program 1 (id=2918):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff)
socket$l2tp(0x2, 0x2, 0x73)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0800000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="000000da3a0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x2, 0x7, 0x6, 0x2020, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="18090000000000000000000000000000182923c4", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095", @ANYRESDEC=r4], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80)
r11 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_WATCH_KEY(0x20, r11, r10, 0x0)
r12 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "87e41f3f2518cf22b058fe40b3bfb0888226e54e123436d75a884ae89b4b8ea5dc074df2550d8bfaf75fd05332be6fb3df1d0756f1193298e53b21d91ba047f0", 0x140}, 0x48, r11)
keyctl$unlink(0x9, r12, r11)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c10dc00", @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf25020000000800090002000000"], 0x1c}}, 0x40)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="02000000", @ANYRES64=r2, @ANYRES32=r0, @ANYRESHEX=r1], 0x3c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
setfsgid(0xee01)
setresgid(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

24.172549058s ago: executing program 1 (id=2920):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x110)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffe}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r7=>0x0})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) (async)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0)

24.113272899s ago: executing program 1 (id=2922):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42000, 0x104)
mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x8000, 0x6)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000200)=0x2000000000000008, 0x6, 0x3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])

24.108956201s ago: executing program 1 (id=2924):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x20, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x3f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x20, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x3f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21}, 0x50)

24.108694537s ago: executing program 1 (id=2925):
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0) (async)
read$msr(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x841, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xb2}]}, 0x48}}, 0x40800)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
unlink(&(0x7f0000000300)='.\x00') (async)
unlink(&(0x7f0000000300)='.\x00')
listen(r1, 0x0) (async)
listen(r1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

9.100997031s ago: executing program 34 (id=2925):
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0) (async)
read$msr(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x841, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xb2}]}, 0x48}}, 0x40800)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
unlink(&(0x7f0000000300)='.\x00') (async)
unlink(&(0x7f0000000300)='.\x00')
listen(r1, 0x0) (async)
listen(r1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

1.540552245s ago: executing program 5 (id=3347):
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
getsockname(r0, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000140)=0x80) (async)
prctl$PR_MCE_KILL_GET(0x22) (async)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x5, 0x10, &(0x7f0000000040)="fba9d2e09789f8245b95f5ce20c4310b"}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.481372667s ago: executing program 5 (id=3349):
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x8081000}}, "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", "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"})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r3, 0x0)
ftruncate(r3, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = syz_open_dev$hidraw(&(0x7f0000000100), 0x4, 0xa08080)
ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f0000000440)=""/155)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = fcntl$dupfd(r1, 0x0, r1)
ioctl$KVM_CAP_VM_TYPES(r5, 0x4068aea3, &(0x7f0000000080)={0xeb, 0x0, 0x10})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40010003, &(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x8081000}}, "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", "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"}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r3, 0x0) (async)
ftruncate(r3, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_open_dev$hidraw(&(0x7f0000000100), 0x4, 0xa08080) (async)
ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f0000000440)=""/155) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
fcntl$dupfd(r1, 0x0, r1) (async)
ioctl$KVM_CAP_VM_TYPES(r5, 0x4068aea3, &(0x7f0000000080)={0xeb, 0x0, 0x10}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) (async)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40010003, &(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)

1.261578814s ago: executing program 5 (id=3354):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=@allocspi={0x100, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x4e23, 0xfd1, 0x0, 0x2, 0xa, 0x0, 0x0, 0xc}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x9, 0x4ad}, [@XFRMA_IF_ID={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000000)

1.260646283s ago: executing program 5 (id=3357):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
accept4(r0, &(0x7f00000000c0)=@tipc=@name, &(0x7f0000000000)=0x80, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

837.550847ms ago: executing program 5 (id=3359):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x5, 0x615b}}, './file0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x4, 0x0, 0x8, 0x20040, r0, 0x2, '\x00', r2, r3, 0x0, 0x3, 0x258f2944}, 0x50)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000140)={0xad92, 0x8})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r0, {<r5=>r0}}, './file0\x00'})
ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f00000001c0)={0xffffffffffffffff, 0x5, "4d0443", 0x6, 0x7})
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x18}, 0x18)
r6 = accept4$llc(0xffffffffffffffff, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x10, 0x80800)
ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000380)={0x2, 0x7, 0x68, &(0x7f0000000300)=""/104})
bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e22, @remote}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000400)="371ff9fbe4a4bbebb56be76a05c643010eae5a2eb74aa3986daaa2e50e961f8484441da582d225aa06c10fa867735b989d709f5abb435645c0689a2248367721c4ae199c2a29f0b553bd576146137b3a2ac199b1659ea58ccb2167b9b4cb39dcd719172addb5b5fae576bd86c4b6295682b5f526b5b0447e9720af25a6c5725a525bca6c7f7b52d7353267d18183244a4e476b39279d80783218d290ec86213367f48745b5850b820fd62a16cbbf062dfe01e0a5b08a0757b19156daffca50e39fa5f12e81d2dac6de0a14307600e47efe5fe95f671157bb2b793c4dd14eb85ca0f049510a1bccd290b704fb92fbe160dbf4fd1d1f23e8ceb5a6dd7b1ed90e9d7a53520fa58e3e5bf25fe88cdb5edbcff64b9127937276c1a85fb3a542d40dc952aefaae1565b02ccce152e66b9e200fdc9966d4473af36b73c9cd885e4beca2c77fb9f37ca7523f94a8ceb3edfbdf6dc830cf9c85ce0ea9d00dd89919d9b61e4f1afde563d98ba004d1e4587fad6893b499f947c9d53967f2f9f7053d3c4d37c360640ae78006fb3dfe423ec1670d92a2f311d85ed7ae6093925b59fae018d64683d956c5b8235698c74846ef22c203315f68d9c311702cf366f7d68f6fee2a3742516f5b71f4512013e793517f4c4500a78d61a8eb1a24331aa26e8f4b54389ff634899a510e2d9d3a51b49ceb82cea9a534195bcafbbd77f77f611fcfbd5af79f88be3de65943d020c74913a2b7392dc17db6ee75537f69a9166a1fbfbb62adffe8888b280fcc12270eba94d6b7d4c142069ea20a1157483db00508fedb032d99017d21ffb1f16f80806f340aff4098600909beda537df6427662dabcc7178dc22cb34040b9c315b777dd5f5cdbc4cca949b4300772f84aa6b6f2ee9f32edd7d13f7b19ee803f2802a25e7899d4eaa862bb1f4e3dc5c664d7208b743888d240bc8f3c024f8d021deaf4a26c761a4398e0343ef56b44ef78ff81fc1228fe991c4889458e780c56a2b1ecbc8db9c571df2d680620a0ef8b72cf388e59c4d99ea0ca130dddfac350569aeb23f1b395a37f0b2f5b271aca41466fca3d3abe1ee9c331ebe99f664c0a94a10e4b2026fcbc5bd7453948453e0bd426fac714648656de1ef0ff88c83b318a7eda8c6a043ebac1965f4f9ae2e43b464f74df094c3258c50b9411b96fdca20e4d384300ea5eb7f72ab721a109ce67974dfc9f4943a77993eb6faf98fd3645dcdece52c1b58bbe631ee9c026b6016223c95dbab26d252e73c7585f1ae0333ed99d8d22910fae0e863ea587b60d5af308f58a00a9653b9b6a615537c7a07d596e328b0e8754a551020f58150a10f85e0ff5840d7b2294695d95c69717800b49c05d5701aa7bbcb2331690531ac8e0fe5099b629f9daf188d243375086269b2d8ab40ef9f566567c92b1a372e58c5b56e2b1f3e6040a8adc265861f5144b7062088eb6ba60fdc14f492b0aaefa109240718b789eba0f5134fead47a1aa3d965e1ebcba4c4660a986fd6c7f98eaa3ec6e4b2cec69d7bf3cddb0f520faa0a90f8175970311ca8b1bdcfdf925efdbb52d54998eae5812be45555780e8f407fb4d9e885f960f42007cd43b11a15d24ec7c9feff248ee127c1738be4ba675e9368314893183f1906942e7717a65fb692c387b7c8aa296206c12dba888bcc78767ffc9748965bf0aa9a5d4fb736b14121a1e739be59565ca4f6c32132fc29855c4d30e1587d3e46957e76113a649f69f8a7855ef774f46a0dc6893847292a9419a070800f2f82ec2cdc599eb8e63868d4bedff05aa4082327e38963822eea5c1728e7841d6545f5c1f4d22bd5b975660593ae9618a8ac8e35f96de98d3709927076635f15d4805577f81306167b368419ac8082e574a131020ff495111795d92aef343093750de1d6d62bce9e05147146bea55f140d53ed0e975de0de8e3c45628c0c1f6a7dacf7f0f7ba12d9cb9313a460621c58227ab73c8565af32b102a26601d071ec97fb3f25036d9cf1e9b4058cd71c963fd108d3ec2c207f2058b1f6b46ce46c9b4cda3807f240a065fa95ed055cf96177028ae02b22239bf6b220412485ffa526a37561a560dcf50fdefe94f5726f7d8724185518f855a286c0664d7d2c851f27d99e1564eebefd12afa48b79c8e10fe8bf2a293fd692ffb41c62a270ba55c3290b9c8d7d7cf3ba59137f8b5bad09e6ec5e4cf81f089abb783f2afd66ba3fb46b98b35439f12caf529268a620705b6cea78741df4908537499b73a8fddc853bd3c514079669d92fbf4835ee9ed04d6f5fc1d54e9a74988144ad5669385cdf2e4a7fa353b9139bf0a1896ded4e968314d6e4694ded043794e753e646ed0a525de7fce6e0c1d4e53c672c3fbce13cf69330b3356722e2ee6cfef183cea684fe760660fdb185a9fbf0017f566d4989a68d5770de062c6d57b8bef54b1591df457f6ae7f6aae7e875e4b61c947f08fe84eed9b584ad3328ecc1bf773d81fd26baf285c64d2ef9377f6d48e676f910f4e44db9513ba4d692a93788ef181b0b6650299634afd4b39d165a36756d845457e4141c7f58317430ae36a68298dbc89c9e62541a94e2769529c52017992394fc1927296ff2b11ac32963d87d368256a0f06a8c7d6490ea4e3f3e2d71f45867cddcdfdfebf83beb1fdd6b4e99a45d0776645ad495b797436c906e3aca135c0cd6e2f7c6e6fdd94d270d2927ab2bde53a1e5a8e96739e146001a5e102dd7ffe37d9d37c2992df8f0b66a0653fd056a9c156d8a084e951c3d4ea17c621372ca7d4be402736a5dfc48e39ada7e4db4b8f945a9010af468defdd67021744208ef85f3fb9d91d59f33305d87a895b8befa80d9606186d4e4b9b090c5eeab638cba6909ccfad39e9a395b19b69fc60aed2b55f5617f9a8399439727331f222ecc2d67f4d7c72c2124cb06e7391d0c56b6820a440d0ab791e10d925125be15a5179e4e281a15967c7fbdeacc37a095865506401a0b4100b77557afc9c04c137cf8a04b47a0e919b6a6a4778d4de35a80246502bd80f5eb7c6965b8eeda367ebe24fffa116d50a9119dd6afde2818ad65b77a163c8b5e808a3b37ca79c65fbb80515c5eaf1ed0115d753e71db4753e983c6c5cc68a9710cd690c452c9d6294e89db944ae984bd5bed9d3f90d5dff629c87cab274c6a2e8226be071fe4d43c53ec2b035f7c6a7fe5644255e3357b57755a88f5f9d841e38a88b651081599fed4d575a037877ca124bc3c07acaf0db4d02f32233f677fd35bc1501fd34709c81f1c7826b4fc82b8f06899c5a0eedfe2047d445e0cad7432bf22cc0cb37cdbef29a0d5bf708f32e6b04c3f14368f12e535433714c5092a9fdbd3ab68f55a3980971c7f660b3467c4923c6c5bea58f1493b2b87f4169b61472dc99b5a319dd77458b81478bcf6c1ad7543adeda6572580b90789fd9c9873b16b4e04046bd993482046894c762f63a4be733b560af3dd9edce202b7fd5f19ab4d85fe6f7ca11964d5ddec2e93a948895cf5028be4202524c2e2e6e31aaf3459431384d09c31441ab03d1479720a3431058ff00b3e1d0dfbe78fca7ea5352543d72f459865fd838b755d5a7c738700147cb881b717721bedebea4011c5951174efb9c879565e1b7fc842e9af6f1379f33db9bd99036e118805d3d5617c5e0d8dad594787ac111044341d5cca52084b16184e65fc5a4b2571a7e8ab6698d0f0b9bba4f5efb4fc6dbe48b20da01e81f3fe3e660cf682abe9ff9b7437d56b6ca3f2583b7ff3732d682377f748eff8ee629d78428492417abae3db1f3a1eccca01893f6641403edc154b25d095d815a6ae0a3deafbeed0a37a38de754cd9668160646c23daeb2fcb4fe10bd5825dffae383351f42a75fcca8463f4fa42feec149f33f5c66acb7abe5693d2e7e2e0f477ffed7ae0ea24aec449e18077b73ab60d68c4bb40b7ca74f47cb98c48dc192dc40536a15c5db763ad516d1f3c2326e52cf80cfb1d8cd470fdab6a77c77e8afb4a526d628cf9694f3644453844ee00fbd931fc19ebc0dd8de7aa757420d724edd6cdf2e1efbf2abd177895aecd03569293ebd59ede9f7e11e43a0a471d88d2ee05721575e7bc928ec2b14ded8ae53d179e655fbf8e85e03d8c74090c03aafcd1fe15a46ae1f120d2430f6ca0bc45559d6d2111c0445f381f1d59d484a0deaaadffa0c1c56e7a77cf41b15a8e6cf56ad1404689edd943e1390a2411455deb480dce460290c88fc54421147b1c93d9a8e960e555fcfd5e6c03c43eed1c09730fe5bdc21477a3a40122903f1fab6cd57f7968396b2b7ee545fe421c6a2819b42d5a19b21747f6a6c2ce5293599b9ef0c968376f52bc9fcbda588d12274afb6ab6c03db655020d997104a6126e5d5eaa993a2fa3a570e75d959a834104725cce601b301a477c19f6fefa8bd382053eaf8c5a032aa522377815184092ede3094986dda2b8588e1085a6f03dd225e4872f4e77ff8a61df4e6112e0aa328980d72a5450819193097d27995e5f1479dce175174adf7bb2fda2799d41e2974379fd76975dd87349602630a973348ef1cd3007678b9eb95c66bb5e3f743d000a1c9c0d03ecd53e74efeacfc69d12f9cf858d2356b4b1c0ae3e10bbf2e2ac548c726583c2975bfe6da8718f9fd6bea80a0c56183fc9e736f17ab8e3e2ed37db64f04134fb2627727746275db5f9787afaef74e31aaeca7e1e4b12e1c68e1e43af2f2decf077a07ac146e715b894ece107218dea56db6f61ac2b6cc9042f6b39e556303faf112a1d1e865b0c0c59d474d18c3987747d83f4d58833e46bf367356fcae147cd405f49dc017feeebb279ada22a16202ea3d5bfb3761af506949ba849ed63121a98da5ceceec8a7a04934ff7ace7ed8263d828dbb8eca4aa570f8d488aab40662fe18d26da2bcdd36a4ba8846008d44193b49ae1217ffa4529dbd4ed60f4602e57d0da42f44135decf2257aed84f1c914a24224fe0375db0d53012c05c3207a0544ca562b803f419e45f218f538b7bb213fc87dbea1f7b99ebd20933cbadb00c63f6aa8fc6fe530b3249e8269c1e5ac164b6ca150509a1886c01d89b048daccf0e8f4cd1ee6dad825e79299504308c6d6516cf667be9543197cd3da0d00949dd0049d73d95fdf7deba46e8ae5523bbfb9174a95489d7ba10a5e663e9ceb3066e19e2f9b3cdc3ef6b2ce96c0d10ecbaab004bfb2067bcd5a4768c4a0f8ad94ccf05c5a3ab1b10f8c09aca709f59897fc4c4a3c7fcdc44c5e32339a4961d79ceef36647da09c575c93521547ad9c74a30606628cdf4952ac1f57747986b4f4a1421bbf3923c32ada694906fd3236d3e948ae5076f737da5263e8734bf0bb4bf5629a643e53e7b3b0f295c678af8f74847b4d4c08d53ddf9cc8380dd3592e2af5f1909b301ede4e2a13cd34c22506cb2428c54e8c71fb7be24b4e034a8aef5def998eb79e1814b1050a5a9b9ed1f3d7c2171b2a992fb3fa2cdbad23c2f0bc5c6cb6e324fcaaee93e2519d824ddd65328d457c74b9eee9233b26b237fc38b268736d5d089c1db6ffb219a82c9511e11de5b05ac0c4de65fbdf584c10235fffeebbc22507f70f8ed8175ff3459dbc27697eba85fce06662e7a13bb64d69c6035d8471d76675b0628d048a806a86bc5ab6f015c776b2d624db9e1bcac66b445bb1f1780cfbff4cf748416846f24f9c2717f78b8077ba7185727a43b3038b9c0967f592d5531e45e3c15457f6376bf7d8a9ce583ac23ff6408c5e0701230f025acfdab45dda72e2000ab20713e09133", 0x1000)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001400)={0x4, 0x3, 0x1, 0x0, 0x2})
ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000001440)={0xaa05, 0xb48d})
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000001480), &(0x7f00000014c0)={'U-', 0x9}, 0x16, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001500)={0x0, ""/256, 0x0, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000001700)=r7)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000001740)={0x2, 0x32315559, 0x2, @stepwise={0x7fffffff, 0x7ff, 0x1, 0x2, 0x7b96, 0xd}})
setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000001780)=@routing={0xc, 0x2, 0x1, 0x3, 0x0, [@rand_addr=' \x01\x00']}, 0x18)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000017c0)={0x0, 0x7}, 0x8)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000001800)={0x2, 0x2, @start={0x10001, 0x1}})
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r6, 0x8002f515, &(0x7f0000001880))
ioctl$SNDCTL_MIDI_INFO(r5, 0xc074510c, &(0x7f00000018c0)={"0063f8a2b31ceb6e8977c5636c96ca32cf6f4d1e0e27e14071299e1be289", 0x1ff, 0x9, 0x2, [0x9, 0x1, 0x7, 0x5f2, 0x80000001, 0x7, 0x0, 0x0, 0x1, 0x10001, 0x5, 0x9, 0x9, 0x2, 0x4, 0xb, 0x10, 0xffff]})
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001940)=<r9=>0x0)
syz_open_procfs(r9, &(0x7f0000001980)='statm\x00')
write$selinux_access(r3, &(0x7f00000019c0)={'system_u:object_r:null_device_t:s0', 0x20, 'unconfined', 0x20, 0xc18}, 0x43)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001a40)='[\x00', 0x0, r8)
ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000001a80)={{r8}, "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"})

831.536401ms ago: executing program 5 (id=3360):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x88c040, 0x59)
fcntl$setlease(r2, 0x400, 0x1)
fcntl$setlease(r2, 0x400, 0x2)
ioctl$EVIOCGKEY(r1, 0x80404518, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0)

829.982118ms ago: executing program 6 (id=3363):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0)={0x0, 0x7}, 0x2)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x41)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000280)={0x1, 0x3}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x9}, 0x2)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file0'}, 0xb)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000370400000084fb82e942e58ef700", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100626f6e64000000002c00028005001d00000000000500010004000000050015"], 0x5c}}, 0x0)

825.556649ms ago: executing program 6 (id=3366):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet(0x2b, 0x801, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814)
listen(r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x9, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = syz_open_dev$swradio(&(0x7f0000000940), 0x1, 0x2)
ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000a80)={0x7, @win={{0x38305543, 0x9, 0xfff, 0x2}, 0x1, 0x2, 0x0, 0x5, 0x0, 0x8f}})
setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f00000000c0)=0xffffff18, 0x4)
semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000500)=""/96)

761.309123ms ago: executing program 6 (id=3367):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000100)={0x0, 0xec0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) (async)
sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x74, r6, 0x403, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x4}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x30}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44080}, 0x4040890)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf253900000008000300", @ANYRES32=r7, @ANYBLOB="14005a801000038005000700"], 0x30}}, 0x0)

759.708699ms ago: executing program 6 (id=3369):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044)
mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x204001, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlinkat(r2, &(0x7f0000000040)='./cgroup\x00', 0x0) (async)
unlinkat(r2, &(0x7f0000000040)='./cgroup\x00', 0x0)
socket$inet6(0xa, 0x80002, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x7, 0x3, 0x3, 0x0, 0x100, 0x5}, &(0x7f00000000c0)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x7, 0x3, 0x3, 0x0, 0x100, 0x5}, &(0x7f00000000c0)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, 0x0)
r4 = openat$comedi(0xffffff9c, &(0x7f0000000280)='/dev/comedi0\x00', 0x6e2dc2, 0x0)
ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) (async)
ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000})
ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x3ea3) (async)
ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x3ea3)
pivot_root(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00')
ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000140))
mq_open(&(0x7f0000000200)='\x00', 0x1, 0x9f6dc1719340f01e, &(0x7f00000002c0)={0xfffffffffffffe01, 0x53e, 0x1, 0x9}) (async)
r5 = mq_open(&(0x7f0000000200)='\x00', 0x1, 0x9f6dc1719340f01e, &(0x7f00000002c0)={0xfffffffffffffe01, 0x53e, 0x1, 0x9})
mq_timedsend(r5, &(0x7f0000000340)="4d83797060c10af32fac49caa7321371b30518dd8f14e880d554f555a7cc5609c8b62aff808893d21e24b4da54266ce970cd9bf3d40587522358d8d128fe9392e8f3b66d8ee1f8ac81eff292a03f86b8270bac0fe1e54380731cf59a4e09823e078c229f8858704bf316e380100efd5c8e9a444b4eb4013eb93b992986ae860a31abfe9144ad04d2f5eb741eebfcad2e87f4a5da0412f66aa4568f0410c0281ece59ef97c7e44158ca794fac4ce871a5eee7ed812c72004fd4ca694ea8c048e0003e5387fca3bd33494df59560e366e4e647bc6da81433c974954d53fe9e624a03988d8a268e30", 0xe7, 0x1ff, &(0x7f0000000440)={0x0, 0x989680})
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)

711.927597ms ago: executing program 6 (id=3370):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x40010, r0, 0x3000)

711.121089ms ago: executing program 6 (id=3372):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x9, 0x7})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x34, 0xd, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request}}}}}, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x40000000)
r4 = socket(0x21, 0x80000, 0x4)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x100, @remote, 0x5}}}, 0x108)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(0x3)
r7 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000a80)="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", 0x1000, 0xfffffffffffffffa)
stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
lchown(&(0x7f0000000180)='./bus\x00', r8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {0xee00, <r9=>0x0}}, './file1\x00'})
keyctl$chown(0x4, r7, r8, r9)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0x57, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x400065, 0x8, 0x8, &(0x7f0000000340)}}, 0x4c)
sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000110000042abd7000ffdbdf2500000000", @ANYRES32=r11, @ANYBLOB="00001c5eca700000"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x90)
socket(0x80000000000000a, 0x2, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000640)={r11, 0x1, 0x6, @broadcast}, 0x10)

709.838247ms ago: executing program 0 (id=3373):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6870ef997e2ff08f0200fe1f000002000d000200000008000c01"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000)
r4 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x0, '\x00', @p_u16=0x0}})
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x6c00}, 0x0)

631.497457ms ago: executing program 0 (id=3374):
r0 = add_key$fscrypt_v1(&(0x7f0000001500), &(0x7f00000012c0)={'fscrypt:', @desc3}, &(0x7f0000001300)={0x0, "ea0789567b674eec3b5ef3de61fb4aa887390d4d667e74f17e2d35c51ba5b6876d0bea5bc98abe76c00a99288020e4a6b7a1889df2477f6b4ac847aca7981bb0", 0x37}, 0x48, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="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", 0x1000, r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) (async)
ioctl$TIOCSLCKTRMIOS(r5, 0x80047437, &(0x7f00000010c0)) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async)
openat$sndseq(0xffffff9c, 0x0, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a020f000000028000001294", 0x55}, {&(0x7f0000001400)="365b5d1fbdd4fd311c6cf95fe10311bf102f2cca7ea6ebc9530f53524ebb13755170ece0bb8ba1ab78f6b15b157627ab9706e93d2cf2056d9c43aecd8164c709b99fb5aa8b4495eb00b54869a7bced666c22d869f4e2bb6aa1f298549dcd67a23119afab82f266a6d0114fbe16cff640ee74e1fc82518a4d63bb57215e4c560f93e722341e529db63ab42a77db19400b292b2fd8d0cd46dc70f0e2a8391b", 0x9e}], 0x2}, 0x4004800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64)
r9 = socket$netlink(0x10, 0x3, 0x6) (rerun: 64)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, &(0x7f0000001280)=ANY=[@ANYRESDEC=r1])
r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x16, &(0x7f0000000080)=ANY=[@ANYRESOCT=r10, @ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffc5, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
socket$caif_stream(0x25, 0x1, 0x4)
r11 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r12=>0x0})
sendto$packet(r11, &(0x7f0000000240)="f2435f010008ba00000000850800", 0xe, 0x40041, &(0x7f0000000200)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14)

626.835617ms ago: executing program 0 (id=3375):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
getsockopt(r1, 0x111, 0x3, 0x0, &(0x7f0000000080))
accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)
listen(r0, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000383a00fe8000000000000000000000000000bbff02000000000000000000000000000103009078060000006fd8699800062fff00000000000000000000000000000000fc020000000000000000000500"/110], 0x0)

580.394774ms ago: executing program 0 (id=3376):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x4)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x8000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r5, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x14}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x155}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x40040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)

500.985751ms ago: executing program 2 (id=3379):
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x103500, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000080)={0x38, 0x1410, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x20010014)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)

498.763341ms ago: executing program 2 (id=3380):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x80a0000})
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000080))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x3})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

440.222738ms ago: executing program 2 (id=3381):
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0)
r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8003, 0x25f}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}})
clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0)
io_uring_enter(r1, 0x6e2, 0x600, 0x1, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x18, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
r6 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$BLKFINISHZONE(r6, 0x40101288, &(0x7f0000000140)={0x4, 0x8bf})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x8, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x0, 0x40, 0x9, 0x0, 0x1ff, {0xffffffe4, 0x0, 0x0, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
ioctl$DVD_READ_STRUCT(r0, 0x5390, &(0x7f0000000440)=@physical={0x0, 0x3, [{0x8, 0x5, 0x5, 0x7, 0x3, 0x0, 0x1, 0x7, 0x6, 0x1, 0x8, 0x8, 0x7}, {0x4, 0x8, 0x3, 0x6, 0x1, 0x0, 0x1, 0x8, 0x7, 0x1, 0x4, 0x7, 0x7}, {0x1, 0xf, 0x0, 0x6, 0x4, 0x1, 0x1, 0x3, 0xc, 0x0, 0x0, 0x4, 0x1}, {0x7, 0x1, 0x3, 0x7, 0x6, 0x1, 0x1, 0xd, 0x0, 0x0, 0x9, 0xe, 0xfffffff9}]})

261.089226ms ago: executing program 2 (id=3382):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000780)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x14, 0x2c, 0x0, @remote, @mcast2, {[@routing={0x2b}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000380)=<r5=>0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0/file1\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2000)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, <r8=>0x0}, &(0x7f0000000340)=0xc)
r9 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, r8, r9)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000880)={0x0, <r10=>0x0}, &(0x7f00000008c0)=0xc)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000900)=<r11=>0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in=@remote, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000001100)=0xe8)
syz_fuse_handle_req(r1, &(0x7f0000006280)="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", 0x2000, &(0x7f0000001280)={&(0x7f0000000240)={0x50, 0x0, 0x7, {0x7, 0x2b, 0xf, 0x1800, 0x7ff, 0x22, 0x0, 0x7, 0x0, 0x0, 0x174e91331fc13ce6, 0x8}}, &(0x7f0000000000)={0x18, 0x0, 0xffffffff, {0x6}}, &(0x7f00000002c0)={0x18, 0xfffffffffffffff5, 0xfff, {0x9}}, &(0x7f0000000300)={0x18, 0x0, 0x101000000000000}, &(0x7f0000000340)={0x18, 0xffffffffffffffda, 0x8, {0x21}}, &(0x7f00000003c0)={0x28, 0x0, 0x9, {{0x7de, 0x9, 0x2, r5}}}, &(0x7f0000000480)={0x60, 0x0, 0x7, {{0x7, 0x4, 0x7, 0x1, 0x0, 0x8, 0xe, 0x81}}}, &(0x7f0000000400)={0x18, 0x0, 0x0, {0x1}}, &(0x7f0000000500)={0x12, 0xfffffffffffffff5, 0x2, {'[\x00'}}, &(0x7f0000000540)={0x20, 0x0, 0x9, {0x0, 0xc}}, &(0x7f0000000580)={0x78, 0xfffffffffffffff5, 0x3, {0xffffffff, 0x6, 0x0, {0x5, 0x8, 0xff, 0x7fffffffffffffff, 0xd8, 0x7fff, 0xffffffff, 0x4, 0x6, 0x1000, 0x3, r3, r4, 0x955, 0xbbb3}}}, &(0x7f0000000600)={0x90, 0xfffffffffffffff5, 0x7fffffff, {0x6, 0x2, 0x7ff, 0x401, 0x7, 0x6, {0x5, 0x7, 0xd7d, 0x8, 0x5, 0x100000001, 0x365b, 0x2, 0xd17, 0xc000, 0x1, r3, r4, 0x7f, 0x5}}}, &(0x7f00000006c0)={0x58, 0xfffffffffffffff5, 0x105, [{0x5, 0x3, 0x8, 0x7, 'group_id'}, {0x3, 0x2, 0xa, 0x2, '/dev/ptmx\x00'}]}, &(0x7f0000000940)={0x5b8, 0x0, 0x7, [{{0x2, 0x2, 0xffffffffffffffff, 0x7fffffff, 0xffffb078, 0x1, {0x1, 0x7, 0x7, 0x1, 0x8cf0, 0xaf20, 0x8000, 0x7, 0x4, 0xa000, 0x5, r3, r6, 0x88a, 0x8}}, {0x6, 0x7fffffffffffffff, 0x0, 0x432ad2e2}}, {{0x0, 0x0, 0xfffffffffffffffa, 0x5e, 0x3, 0x7ff, {0x6, 0x2, 0x1, 0x40, 0x9, 0xaa6b, 0x7fffffff, 0x2a9b, 0x101, 0x6000, 0x2, r8, r4, 0x83cb, 0x2}}, {0x6, 0x0, 0x1, 0x1, '/'}}, {{0x6, 0x2, 0x8, 0x2, 0xb5, 0x8, {0x1, 0x8, 0x4, 0x0, 0x1, 0x3, 0x9, 0xf0f, 0x6, 0x2000, 0x0, r10, r4, 0x2, 0x7fffffff}}, {0x3, 0x4, 0x4, 0x1, '}%\'^'}}, {{0x5, 0x1, 0x69080000000, 0x5, 0x2, 0x2, {0x4, 0x5, 0xe, 0x200000000, 0x0, 0x1, 0x9, 0x3, 0x9, 0x1000, 0x7, r3, r4, 0x1, 0xfff}}, {0x4, 0xff, 0x6, 0x8, '\xbb\xbb\xbb\xbb\xbb\xbb'}}, {{0x2, 0x1, 0xffffffff, 0x9, 0x7, 0x1, {0x6, 0x9, 0x2, 0x9, 0x1, 0x4, 0x5d, 0x3d3, 0xf, 0xc000, 0x101, r3, r4, 0xffff1aab, 0xdd39}}, {0x0, 0x0, 0x6, 0x8, '\xbb\xbb\xbb\xbb\xbb\xbb'}}, {{0x0, 0x1, 0x10, 0x1a, 0x101, 0x2, {0x0, 0x5, 0x6, 0x0, 0x1dd, 0x401, 0x3, 0xfffffff8, 0x5, 0x6000, 0xb, r3, r4, 0x80000000, 0x1}}, {0x2, 0x7, 0xa, 0x4, '/dev/ptmx\x00'}}, {{0x4, 0x3, 0x1, 0x1, 0x0, 0x1000, {0x6, 0xa, 0x4, 0x10, 0xc, 0x1, 0x4, 0x7, 0x6, 0x6000, 0x0, r3, r4, 0x2, 0x1}}, {0x6, 0x4, 0x8, 0x9, 'rootmode'}}, {{0x5, 0x2, 0x200, 0x9, 0x7, 0x81, {0x0, 0x0, 0x9, 0xfffffffffffffff8, 0xbba, 0xb7c, 0x8000, 0x0, 0x0, 0x80e50bcaa9646770, 0x6, r11, r4, 0x7}}, {0x2, 0x6, 0x8, 0x5269, 'group_id'}}, {{0x2, 0x0, 0xfffffffffffffff2, 0x10000, 0x8, 0x5, {0x1, 0x1000, 0x4, 0x1, 0x9, 0xfffffffffffffffe, 0x0, 0x40000000, 0x80, 0x1000, 0x7fff, r3, r4, 0x8, 0xcd}}, {0x3, 0xba2, 0xa, 0xf9, '/dev/fuse\x00'}}]}, &(0x7f0000000f00)={0xa0, 0x0, 0x46c2, {{0x5, 0x1, 0xffffffffffffff6f, 0x2e59, 0x0, 0x8, {0x0, 0x1, 0xa, 0x6f, 0x2, 0x2, 0xd, 0x7fff, 0x81, 0x1000, 0x0, r3, r4, 0x6, 0x80}}, {0x0, 0x8}}}, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x0, 0x4, 0x1}}, &(0x7f0000001140)={0x130, 0xfffffffffffffffe, 0xfffffffffffff801, {0x6, 0x1000, 0x0, '\x00', {0x140a, 0x9, 0x7, 0x7, r12, r4, 0x6000, '\x00', 0x1, 0x0, 0x0, 0x5, {0x8, 0x4}, {0x1, 0x3}, {0xfffffffffffffbff, 0x6}, {0x5, 0x2}, 0xfffffff7, 0x3, 0x2, 0xffffffff}}}})
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x120}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x12e, {0xfffffffffffffffc, 0x0, 0x1, 0xffff, 0xfffffff8, 0x200, {0x6, 0x40000000005, 0xb5b, 0xf, 0x1000, 0x4, 0x7d59, 0x7fff, 0x480, 0x2000, 0x10001, r3, r4, 0xa0f, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x400, 0x30)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5)
ioctl$TCSETS(r0, 0x8926, &(0x7f0000000100)={0xfffffff8, 0x0, 0x0, 0x7ff, 0x0, "0000005f9ed6280000000000edfc001900"})

259.071229ms ago: executing program 0 (id=3383):
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x30102)
fstat(r0, &(0x7f0000000040))
ioctl$CDROMVOLREAD(0xffffffffffffffff, 0x5313, &(0x7f00000000c0))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
ioctl$CDROMREADAUDIO(r1, 0x530e, &(0x7f0000000180)={@lba=0x2, 0x1, 0x6, &(0x7f0000000140)=""/6})
bind$802154_raw(r0, &(0x7f00000001c0), 0x14)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000600))
pipe2$watch_queue(&(0x7f0000000640)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000680))
shutdown(r0, 0x1)
sendfile(r2, r1, &(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'ip6gre0\x00'})
ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0)
r4 = accept$nfc_llcp(r3, &(0x7f0000000740)={0x27, <r5=>0x0}, &(0x7f00000007c0)=0x60)
getsockopt$sock_buf(r4, 0x1, 0x3d, &(0x7f0000000800)=""/210, &(0x7f0000000900)=0xd2)
recvmmsg(r0, &(0x7f0000001380)=[{{&(0x7f0000000940)=@generic, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000009c0)=""/247, 0xf7}, {&(0x7f0000000ac0)=""/195, 0xc3}], 0x2, &(0x7f0000000c00)=""/2, 0x2}, 0x2}, {{&(0x7f0000000c40)=@llc, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/207, 0xcf}], 0x1, &(0x7f0000000e00)=""/248, 0xf8}, 0x9}, {{&(0x7f0000000f00)=@can, 0x80, &(0x7f0000001240)=[{&(0x7f0000000f80)=""/10, 0xa}, {&(0x7f0000000fc0)=""/65, 0x41}, {&(0x7f0000001040)=""/44, 0x2c}, {&(0x7f0000001080)=""/187, 0xbb}, {&(0x7f0000001140)=""/248, 0xf8}], 0x5, &(0x7f00000012c0)=""/160, 0xa0}}], 0x3, 0x10020, 0x0)
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001440)={0x70, 0x8d, 0x6, 0xfc, 0xf0, 0x9})
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000001ec0), &(0x7f0000001f00)=0x4)
fcntl$getownex(r1, 0x10, &(0x7f0000001f40))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001f80)={r3}, 0x8)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001fc0)={'pim6reg\x00', 0x4000})
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000002000)=0x2)
ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f0000002040)={0x6, 0x1f, 0x0, 0x2, 0x2, 0x7, @msf={0xe2, 0x5, 0x10}, @lba=0x16f09e44})
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000002080)={0x3})
sendmmsg$nfc_llcp(r4, &(0x7f00000025c0)=[{&(0x7f00000020c0)={0x27, r5, 0x1, 0x1, 0x68, 0x2, "7f53677e3d8bcf943a9c8704f2c8165a4e27e08f681ca3f7f9c313bc61fcddbb77542101ff6c49844e1de3fa5001a769c64a2f8bced3177a772d17757656b4", 0x4}, 0x60, &(0x7f0000002500)=[{&(0x7f0000002140)="b451f9dee63fecd38c2c650cd49990d3f17b528aca4386b3fed3424303e4c7e0", 0x20}, {&(0x7f0000002180)="dd8575f52b6ca7b339ce54002edc90c6dcbc470d09233d9942930d3e9ef17771358493500077b8d632495fc34f5b84c0aead4d2c322727d30e4ad85db1106f3ad02844e17b25d6954255caaa8995309c90d3d4ccad45351d44be082832cfef12", 0x60}, {&(0x7f0000002200)="d27ae88ca534b7898052a51f123b8f5daabff7af1ef46bf0d325de0f3c2466a9642e27ca9646e3e9bd0469", 0x2b}, {&(0x7f0000002240)="159cd27f8287520014225241fee7acf242f34e4e803d75f9ff0b8d0e3442a4d422210df58407d4ac9a77dade5d0907a78bdf997fa80bd97dedfd5a867765192f406ab58a2bc5610b04f3b68326bc7ed18b8f61582ef5bd33acaba594b1d7dd1234982b937e6f04a310e8ee1f3e3a22efad0190ba3fb41351c6a61dbf1eb0cf5f5effa971b17e031ffb8d546a4414f9b7924c077ff500e7e10fa110447378c1362927cb7b1b78e12ff873f2e2ff5c2f4b3fef7d8e33abd17ab44b6dab07c091e546b58750218e731e6a4a5991a07e68d6bd", 0xd1}, {&(0x7f0000002340)="12009aa6ff3a0bfd3588f30bacaa6b154817f2c0ac17780be22d833be1f4ad36598f95533abe6389d51c1d13fa37395f947a50f39f6e91c0c9718e5f02db7d5eb4b20ce4d76ea86fe7c94fc006a13938cb0c1603d9c121d3ea794ad5cd511380f88248e8bba933a518dc032777b96e743dac794f0a3d9792f23482644efdcd9f2079d647383eb23426f5be30ac0be2c8d66c818cc8e6482c98a39ff36c82bf0c22e68ca79a09ab01db9f3700ab2455b1bc3f205dd514c301", 0xb8}, {&(0x7f0000002400)="76c8244ad9fd7f511a9972bb6cdfbb6aaee2f14e0e93e724881184c1c5956c56a87515fb58a78184b5c98847e45d52e7fa8fc6a27c6176efd55e7b2cb80d689e165b3ce1f4f7d5c742736a793622665b251ecbb724f5ab432eb33ed9fd74a7bd779efcabe2cd1f4a3c1f7067d490a3db30880d27d45e2c9ddf2b986f74f90fed4557dcb25f362abda6bd4af727f065016134cf89c294d2f6caed00a0785ffa0563ebd81c22c47140ce8c5914c6f2fcb4da", 0xb1}, {&(0x7f00000024c0)="0b2f1777b3d88fce11b555006ad1dbe8", 0x10}], 0x7, &(0x7f0000002580)={0x10, 0x115, 0x7}, 0x10, 0x8000}], 0x1, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000002600)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

258.315001ms ago: executing program 0 (id=3384):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
fsopen(&(0x7f0000000140)='erofs\x00', 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x51060, 0x0)
mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000000010000000'])
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x4, 0x0, {0xa, 0x4e20, 0xffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}}}, 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000f0ff000014000800000000000000000000000000000000000500130400000000"], 0x41}}, 0x2)
r4 = socket(0x10, 0x3, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x48)
mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, 0x0, r5, 0x0, 0x154)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001400)=@newqdisc={0x24, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x0, 0x6}, {0xc, 0xfff3}}}, 0x24}}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
listen(r6, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r8 = accept4$alg(r7, 0x0, 0x0, 0x0)
unlinkat(r5, &(0x7f00000001c0)='./file0/../file0\x00', 0x0)
sendmmsg$alg(r8, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001)
recvmmsg(r8, &(0x7f000000b480)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001080)=""/4095, 0xfff}], 0x1}, 0x7ff}], 0x1, 0x102, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000012c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_disconnect(r9)

1.103911ms ago: executing program 2 (id=3385):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000b40)={0xf8, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x807fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x13}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x64}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x566}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf65f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008810}, 0x4000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff070004000000010000000400000014000180100004"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

0s ago: executing program 2 (id=3386):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002"], 0x104}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d4, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7f}, @TIPC_NLA_NODE_ID={0xb0, 0x3, "fce89e6bf7607c749db6e64641bc5ae7849004203b4d5b879148aa2ea012cc2d2ff1739ee5d764d21a149812b8f980892e63ceb77bd1948240e9a224f152f6fd76911b74bfdfb2a6f0a4c3d04df53a55d8bdb3f7189e143f48e2eccefea80893693d1a2a8359d51475345b16cad21c7596d7995345b1474cd7c6a418a40e63512b4850cbe40890248281831e53bf38e7bfd32e6f5ba48fe5338b5915f8292b683237bf1d563c37b6560f4ea0"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x862}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "cd662a8eca55b5c0528a0cc01dbb0b3b3351387160ba"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "5a7c6da57b932c9e79342c7d3f40f2cec9ebb8ba6549b94727f3bb5851f3a34a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "029d61fde7c4595ea035e4bd937d802037c7a9ae403182c40fa956152dda"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd7d4}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

kernel console output (not intermixed with test programs):

ition table
[  140.471579][T13952] loop9: partition table beyond EOD, truncated
[  140.473705][T13952] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  140.605052][T13959] cgroup: Name too long
[  140.635467][ T5973] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  140.638826][ T5973] CPU: 1 UID: 0 PID: 5973 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) 
[  140.638844][ T5973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  140.638854][ T5973] Workqueue: hci4 hci_rx_work
[  140.638870][ T5973] Call Trace:
[  140.638875][ T5973]  <TASK>
[  140.638880][ T5973]  dump_stack_lvl+0x16c/0x1f0
[  140.638895][ T5973]  sysfs_warn_dup+0x7f/0xa0
[  140.638918][ T5973]  sysfs_create_dir_ns+0x24b/0x2b0
[  140.638939][ T5973]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  140.638963][ T5973]  ? kobject_add_internal+0x25b/0x9b0
[  140.638983][ T5973]  ? lock_release+0x201/0x2f0
[  140.639012][ T5973]  ? do_raw_spin_unlock+0x172/0x230
[  140.639032][ T5973]  kobject_add_internal+0x2c4/0x9b0
[  140.639055][ T5973]  kobject_add+0x16e/0x240
[  140.639076][ T5973]  ? __pfx_kobject_add+0x10/0x10
[  140.639099][ T5973]  ? lock_release+0x201/0x2f0
[  140.639160][ T5973]  ? do_raw_spin_unlock+0x172/0x230
[  140.639182][ T5973]  ? kobject_put+0xab/0x5a0
[  140.639202][ T5973]  device_add+0x288/0x1aa0
[  140.639218][ T5973]  ? __pfx_dev_set_name+0x10/0x10
[  140.639235][ T5973]  ? __pfx_device_add+0x10/0x10
[  140.639250][ T5973]  ? mgmt_send_event_skb+0x2fb/0x460
[  140.639269][ T5973]  hci_conn_add_sysfs+0x17e/0x230
[  140.639280][ T5973]  le_conn_complete_evt+0x1075/0x1d70
[  140.639298][ T5973]  ? preempt_count_sub+0x100/0x160
[  140.639322][ T5973]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  140.639340][ T5973]  ? rcu_is_watching+0x12/0xc0
[  140.639355][ T5973]  ? lock_release+0x201/0x2f0
[  140.639376][ T5973]  hci_le_conn_complete_evt+0x23c/0x370
[  140.639396][ T5973]  hci_le_meta_evt+0x357/0x5e0
[  140.639408][ T5973]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  140.639439][ T5973]  hci_event_packet+0x682/0x11c0
[  140.639459][ T5973]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  140.639469][ T5973]  ? __pfx_hci_event_packet+0x10/0x10
[  140.639486][ T5973]  ? kcov_remote_start+0x36a/0x6d0
[  140.639499][ T5973]  ? rcu_watching_snap_stopped_since+0x100/0x110
[  140.639515][ T5973]  ? rcu_is_watching+0x12/0xc0
[  140.639531][ T5973]  hci_rx_work+0x2c5/0x16b0
[  140.639543][ T5973]  ? rcu_is_watching+0x12/0xc0
[  140.639559][ T5973]  process_one_work+0x9cc/0x1b70
[  140.639577][ T5973]  ? __pfx_rxrpc_peer_keepalive_worker+0x10/0x10
[  140.639594][ T5973]  ? __pfx_process_one_work+0x10/0x10
[  140.639608][ T5973]  ? assign_work+0x1a0/0x250
[  140.639619][ T5973]  worker_thread+0x6c8/0xf10
[  140.639633][ T5973]  ? __pfx_worker_thread+0x10/0x10
[  140.639645][ T5973]  kthread+0x3c2/0x780
[  140.639656][ T5973]  ? __pfx_kthread+0x10/0x10
[  140.639666][ T5973]  ? ret_from_fork+0x25/0x6f0
[  140.639676][ T5973]  ? rcu_is_watching+0x12/0xc0
[  140.639690][ T5973]  ? rcu_is_watching+0x12/0xc0
[  140.639703][ T5973]  ? __pfx_kthread+0x10/0x10
[  140.639714][ T5973]  ret_from_fork+0x5d7/0x6f0
[  140.639724][ T5973]  ? __pfx_kthread+0x10/0x10
[  140.639734][ T5973]  ret_from_fork_asm+0x1a/0x30
[  140.639751][ T5973]  </TASK>
[  140.639800][ T5973] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  140.777824][ T5973] Bluetooth: hci4: failed to register connection device
[  140.893875][T13968] 9pnet: Could not find request transport: vic\io
[  140.995992][T13980] loop9: detected capacity change from 0 to 7
[  141.000623][T13980] Dev loop9: unable to read RDB block 7
[  141.003059][T13980]  loop9: unable to read partition table
[  141.005398][T13980] loop9: partition table beyond EOD, truncated
[  141.007962][T13980] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  141.200758][T13992] sock: sock_timestamping_bind_phc: sock not bind to device
[  141.404228][T14010] /dev/sg0: Can't lookup blockdev
[  141.481127][T14012] 9pnet: Could not find request transport: virt?!io
[  141.521753][T14019] netlink: 'syz.0.2543': attribute type 32 has an invalid length.
[  141.561955][   T53] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  141.571747][T14021] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  141.574754][T14021] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  141.578546][T14021] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null.
[  141.646552][T14025] cgroup: Name too long
[  141.688909][   T53] usb 7-1: device descriptor read/64, error -71
[  141.801756][T14028] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  141.804495][T14028] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  141.818504][T14028] vhci_hcd vhci_hcd.0: Device attached
[  141.842577][T14030] vhci_hcd: connection closed
[  141.842818][T11467] vhci_hcd: stop threads
[  141.846082][T11467] vhci_hcd: release socket
[  141.847649][T11467] vhci_hcd: disconnect device
[  141.938420][   T53] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  142.068529][   T53] usb 7-1: device descriptor read/64, error -71
[  142.179685][   T53] usb usb7-port1: attempt power cycle
[  142.518231][   T53] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  142.538619][   T53] usb 7-1: device descriptor read/8, error -71
[  142.546658][T14061] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  142.778519][   T53] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  142.812801][   T53] usb 7-1: device descriptor read/8, error -71
[  142.930053][   T53] usb usb7-port1: unable to enumerate USB device
[  143.159567][ T6034] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  143.335040][ T6034] usb 10-1: config 0 has no interfaces?
[  143.336906][ T6034] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  143.345219][ T6034] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.358982][ T6034] usb 10-1: config 0 descriptor??
[  143.383998][T14111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.387640][T14111] syzkaller0: entered promiscuous mode
[  143.391470][T14111] syzkaller0: entered allmulticast mode
[  143.446193][T14111] tipc: Resetting bearer <eth:syzkaller0>
[  143.454454][T14111] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  143.568731][   T40] kauditd_printk_skb: 348 callbacks suppressed
[  143.568747][   T40] audit: type=1400 audit(1755561725.713:50327): avc:  denied  { read append } for  pid=14083 comm="syz.5.2564" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  143.579891][ T6034] usb 10-1: USB disconnect, device number 2
[  143.589492][   T40] audit: type=1400 audit(1755561725.713:50328): avc:  denied  { open } for  pid=14083 comm="syz.5.2564" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  143.604906][   T40] audit: type=1400 audit(1755561725.743:50329): avc:  denied  { recv } for  pid=5951 comm="syz-executor" saddr=127.0.0.1 src=42550 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  143.615665][   T40] audit: type=1400 audit(1755561725.753:50330): avc:  denied  { read write } for  pid=14115 comm="syz.1.2570" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  143.624412][   T40] audit: type=1400 audit(1755561725.753:50331): avc:  denied  { open } for  pid=14115 comm="syz.1.2570" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  143.648597][   T40] audit: type=1400 audit(1755561725.793:50332): avc:  denied  { recv } for  pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=42550 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  143.668858][   T40] audit: type=1400 audit(1755561725.813:50333): avc:  denied  { execute } for  pid=14117 comm="syz.5.2571" path="/66/bus" dev="tmpfs" ino=376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  143.684560][   T40] audit: type=1400 audit(1755561725.813:50334): avc:  denied  { create } for  pid=14118 comm="syz.1.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  143.694278][   T40] audit: type=1400 audit(1755561725.823:50335): avc:  denied  { ioctl } for  pid=14118 comm="syz.1.2572" path="socket:[45754]" dev="sockfs" ino=45754 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  143.704455][   T40] audit: type=1400 audit(1755561725.843:50336): avc:  denied  { ioctl } for  pid=14124 comm="syz.5.2573" path="socket:[52609]" dev="sockfs" ino=52609 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  143.751387][T14127] __nla_validate_parse: 6 callbacks suppressed
[  143.751399][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2573'.
[  143.802515][ T6034] libceph: connect (1)[c::]:6789 error -101
[  143.805394][ T6034] libceph: mon0 (1)[c::]:6789 connect error
[  143.852580][T14130] ceph: No mds server is up or the cluster is laggy
[  143.930847][T14136] debugfs: Bad value for 'uid'
[  143.932695][T14136] debugfs: Bad value for 'uid'
[  143.973382][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2577'.
[  143.980411][ T6431] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  143.981295][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2577'.
[  143.983631][ T6431] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  143.993954][ T6431] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  143.997683][ T6431] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.263284][T14153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2583'.
[  144.598224][    C3] net_ratelimit: 37466 callbacks suppressed
[  144.598237][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:9c:df:67:70:c5, vlan:0)
[  144.598351][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.598529][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.598678][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  144.598702][    C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.598845][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.598868][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.598995][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.599025][    C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:46:9c:df:67:70:c5, vlan:0)
[  144.599169][    C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.611487][T14187] veth1_to_bond: entered allmulticast mode
[  144.679637][T14186] veth1_to_bond: left allmulticast mode
[  144.734786][T14192] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2596'.
[  144.786834][T14192] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2596'.
[  144.890289][T14205] fuse: Bad value for 'fd'
[  144.895400][T14207] syzkaller1: tun_chr_ioctl cmd 1074025677
[  144.897329][T14207] syzkaller1: linktype set to 32
[  144.916505][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2604'.
[  145.024642][T14214] netlink: 'syz.0.2597': attribute type 1 has an invalid length.
[  145.172382][T14233] loop9: detected capacity change from 0 to 7
[  145.175229][T14233] Dev loop9: unable to read RDB block 7
[  145.177096][T14233]  loop9: unable to read partition table
[  145.179314][T14233] loop9: partition table beyond EOD, truncated
[  145.184640][T14233] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  145.212951][T14243] fuse: Bad value for 'fd'
[  145.269048][T14252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2618'.
[  145.294351][T14242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2616'.
[  145.409542][T14258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=14258 comm=syz.1.2620
[  145.413860][T14258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=14258 comm=syz.1.2620
[  145.464497][T14276] loop9: detected capacity change from 0 to 7
[  145.467542][T14276] Dev loop9: unable to read RDB block 7
[  145.469471][T14276]  loop9: unable to read partition table
[  145.471729][T14276] loop9: partition table beyond EOD, truncated
[  145.473721][T14276] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  145.477868][T14277] netlink: 'syz.0.2625': attribute type 6 has an invalid length.
[  145.481132][T14277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2625'.
[  145.552256][   T10] hid_parser_main: 4124 callbacks suppressed
[  145.552270][   T10] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  145.556957][   T10] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  145.560518][   T10] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  145.565926][   T10] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  145.568675][   T10] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  145.571192][   T10] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  145.573714][   T10] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  145.576156][   T10] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  145.579198][   T10] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  145.582289][   T10] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0
[  145.586632][   T10] hid-generic 0003:0004:0000.0009: hidraw1: USB HID v0.02 Device [syz0] on syz1
[  145.786890][T14310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14310 comm=syz.0.2631
[  145.791380][T14310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14310 comm=syz.0.2631
[  145.795575][T14310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14310 comm=syz.0.2631
[  145.802116][T14310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14310 comm=syz.0.2631
[  145.806235][T14310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14310 comm=syz.0.2631
[  145.811718][T14310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14310 comm=syz.0.2631
[  145.817567][T14310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14310 comm=syz.0.2631
[  145.822447][T14310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14310 comm=syz.0.2631
[  146.390329][T14344] binder: 14343:14344 ioctl c0306201 200000000540 returned -22
[  146.433875][T14355] netlink: 'syz.5.2641': attribute type 16 has an invalid length.
[  146.463952][T14358] netlink: 'syz.0.2642': attribute type 10 has an invalid length.
[  146.531806][T14358] team0: Port device geneve0 added
[  146.586414][ T5975] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  146.888317][ T5979] Bluetooth: hci4: command 0x0406 tx timeout
[  146.892178][T14378] loop9: detected capacity change from 0 to 7
[  146.897537][ T6364] Dev loop9: unable to read RDB block 7
[  146.900543][ T6364]  loop9: unable to read partition table
[  146.902840][ T6364] loop9: partition table beyond EOD, truncated
[  146.906257][T14378] Dev loop9: unable to read RDB block 7
[  146.909403][T14378]  loop9: unable to read partition table
[  146.911906][T14378] loop9: partition table beyond EOD, truncated
[  146.914640][T14378] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  147.189575][T14397] random: crng reseeded on system resumption
[  147.345373][T14404] netlink: 'syz.5.2657': attribute type 2 has an invalid length.
[  147.424993][T14408] netlink: 'syz.1.2658': attribute type 4 has an invalid length.
[  147.476789][T14410] netlink: 'syz.1.2658': attribute type 4 has an invalid length.
[  147.608264][ T5973] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  147.608864][ T5975] Bluetooth: hci3: command 0x1003 tx timeout
[  147.777249][T14419] netlink: 'syz.2.2660': attribute type 1 has an invalid length.
[  147.780645][T14419] netlink: 'syz.2.2660': attribute type 4 has an invalid length.
[  148.236490][T14440] overlayfs: upper fs does not support file handles, falling back to index=off.
[  148.508282][   T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  148.660243][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.664178][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.667628][   T10] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  148.671202][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.675602][   T10] usb 10-1: config 0 descriptor??
[  148.735159][   T40] kauditd_printk_skb: 395 callbacks suppressed
[  148.735174][   T40] audit: type=1400 audit(1755561730.873:50732): avc:  denied  { create } for  pid=14443 comm="syz.1.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  148.746324][   T40] audit: type=1400 audit(1755561730.873:50733): avc:  denied  { read } for  pid=14443 comm="syz.1.2669" dev="nsfs" ino=4026533133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  148.758273][   T40] audit: type=1400 audit(1755561730.873:50734): avc:  denied  { open } for  pid=14443 comm="syz.1.2669" path="pid:[4026533133]" dev="nsfs" ino=4026533133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  148.765882][   T40] audit: type=1400 audit(1755561730.883:50735): avc:  denied  { ioctl } for  pid=14443 comm="syz.1.2669" path="pid:[4026533133]" dev="nsfs" ino=4026533133 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  148.775965][   T40] audit: type=1400 audit(1755561730.883:50736): avc:  denied  { bind } for  pid=14443 comm="syz.1.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  148.782407][   T40] audit: type=1400 audit(1755561730.883:50737): avc:  denied  { setopt } for  pid=14443 comm="syz.1.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  148.788471][   T40] audit: type=1400 audit(1755561730.883:50738): avc:  denied  { accept } for  pid=14443 comm="syz.1.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  148.794482][   T40] audit: type=1400 audit(1755561730.883:50739): avc:  denied  { write } for  pid=14443 comm="syz.1.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  148.800551][   T40] audit: type=1400 audit(1755561730.913:50740): avc:  denied  { unmount } for  pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  148.804558][T14450] kernel read not supported for file /policy (pid: 14450 comm: syz.2.2671)
[  148.806572][   T40] audit: type=1400 audit(1755561730.933:50742): avc:  denied  { sendto } for  pid=33 comm="ksoftirqd/3" saddr=fe80::449c:dfff:fe67:70c5 daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  148.842603][T14453] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  148.845128][T14453] __nla_validate_parse: 145 callbacks suppressed
[  148.845138][T14453] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2672'.
[  148.882009][   T10] usbhid 10-1:0.0: can't add hid device: -71
[  148.883995][   T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  148.890765][   T10] usb 10-1: USB disconnect, device number 3
[  148.895855][T14461] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2675'.
[  149.010585][T14461] smc: removing net device bond0 with user defined pnetid SYZ2
[  149.018894][T14461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.033152][T14461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.044532][T14461] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  149.066957][T14461] bond0 (unregistering): Released all slaves
[  149.211474][T14468] smc: adding net device bond0 with user defined pnetid SYZ2
[  149.214562][T14468] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.296394][T14468] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  149.306909][T14468] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2677'.
[  149.315761][T14468] veth0_to_bridge: left allmulticast mode
[  149.317706][T14468] veth0_to_bridge: left promiscuous mode
[  149.319654][T14468] bridge0: port 4(veth0_to_bridge) entered disabled state
[  149.323365][T14468] bridge_slave_0: left allmulticast mode
[  149.325163][T14468] bridge_slave_0: left promiscuous mode
[  149.326970][T14468] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.330549][T14468] bridge_slave_1: left allmulticast mode
[  149.332518][T14468] bridge_slave_1: left promiscuous mode
[  149.334640][T14468] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.339758][T14468] team0: Port device team_slave_0 removed
[  149.343949][T14468] team0: Port device team_slave_1 removed
[  149.346161][T14468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.348957][T14468] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.351825][T14468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.354250][T14468] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.363103][T14468] team0: Port device geneve0 removed
[  149.365776][T14468] gretap1: left promiscuous mode
[  149.367492][T14468] bridge0: port 3(gretap1) entered disabled state
[  149.372529][T14468] bond0: (slave ip6gretap1): Removing an active aggregator
[  149.375206][T14468] bond0: (slave ip6gretap1): Releasing backup interface
[  149.639250][T14484] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  149.696695][T14489] loop6: detected capacity change from 0 to 63
[  149.701747][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read
[  149.704495][T14484] Buffer I/O error on dev loop6, logical block 0, async page read
[  149.708045][T14484] Buffer I/O error on dev loop6, logical block 0, async page read
[  149.711778][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read
[  149.714571][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read
[  149.717681][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read
[  149.721643][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read
[  149.894191][ T5973] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  149.898070][ T5973] CPU: 1 UID: 0 PID: 5973 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) 
[  149.898096][ T5973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  149.898110][ T5973] Workqueue: hci1 hci_rx_work
[  149.898131][ T5973] Call Trace:
[  149.898138][ T5973]  <TASK>
[  149.898146][ T5973]  dump_stack_lvl+0x16c/0x1f0
[  149.898179][ T5973]  sysfs_warn_dup+0x7f/0xa0
[  149.898202][ T5973]  sysfs_create_dir_ns+0x24b/0x2b0
[  149.898225][ T5973]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  149.898248][ T5973]  ? kobject_add_internal+0x25b/0x9b0
[  149.898270][ T5973]  ? lock_release+0x201/0x2f0
[  149.898297][ T5973]  ? do_raw_spin_unlock+0x172/0x230
[  149.898323][ T5973]  kobject_add_internal+0x2c4/0x9b0
[  149.898346][ T5973]  kobject_add+0x16e/0x240
[  149.898366][ T5973]  ? __pfx_kobject_add+0x10/0x10
[  149.898386][ T5973]  ? lock_release+0x201/0x2f0
[  149.898413][ T5973]  ? do_raw_spin_unlock+0x172/0x230
[  149.898432][ T5973]  ? kobject_put+0xab/0x5a0
[  149.898454][ T5973]  device_add+0x288/0x1aa0
[  149.898479][ T5973]  ? __pfx_dev_set_name+0x10/0x10
[  149.898506][ T5973]  ? __pfx_device_add+0x10/0x10
[  149.898529][ T5973]  ? mgmt_send_event_skb+0x2fb/0x460
[  149.898558][ T5973]  hci_conn_add_sysfs+0x17e/0x230
[  149.898576][ T5973]  le_conn_complete_evt+0x1075/0x1d70
[  149.898601][ T5973]  ? preempt_count_sub+0x100/0x160
[  149.898625][ T5973]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  149.898649][ T5973]  ? rcu_is_watching+0x12/0xc0
[  149.898671][ T5973]  ? lock_release+0x201/0x2f0
[  149.898701][ T5973]  hci_le_conn_complete_evt+0x23c/0x370
[  149.898729][ T5973]  hci_le_meta_evt+0x357/0x5e0
[  149.898745][ T5973]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  149.898772][ T5973]  hci_event_packet+0x682/0x11c0
[  149.898798][ T5973]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  149.898814][ T5973]  ? __pfx_hci_event_packet+0x10/0x10
[  149.898838][ T5973]  ? kcov_remote_start+0x36a/0x6d0
[  149.898857][ T5973]  ? rcu_watching_snap_stopped_since+0x100/0x110
[  149.898882][ T5973]  ? rcu_is_watching+0x12/0xc0
[  149.898907][ T5973]  hci_rx_work+0x2c5/0x16b0
[  149.898923][ T5973]  ? rcu_is_watching+0x12/0xc0
[  149.898945][ T5973]  process_one_work+0x9cc/0x1b70
[  149.898968][ T5973]  ? __pfx_rxrpc_peer_keepalive_worker+0x10/0x10
[  149.898995][ T5973]  ? __pfx_process_one_work+0x10/0x10
[  149.899016][ T5973]  ? assign_work+0x1a0/0x250
[  149.899058][ T5973]  worker_thread+0x6c8/0xf10
[  149.899084][ T5973]  ? __pfx_worker_thread+0x10/0x10
[  149.899105][ T5973]  kthread+0x3c2/0x780
[  149.899123][ T5973]  ? __pfx_kthread+0x10/0x10
[  149.899139][ T5973]  ? ret_from_fork+0x25/0x6f0
[  149.899157][ T5973]  ? rcu_is_watching+0x12/0xc0
[  149.899180][ T5973]  ? rcu_is_watching+0x12/0xc0
[  149.899203][ T5973]  ? __pfx_kthread+0x10/0x10
[  149.899221][ T5973]  ret_from_fork+0x5d7/0x6f0
[  149.899238][ T5973]  ? __pfx_kthread+0x10/0x10
[  149.899255][ T5973]  ret_from_fork_asm+0x1a/0x30
[  149.899282][ T5973]  </TASK>
[  149.995191][    C1] vkms_vblank_simulate: vblank timer overrun
[  149.998711][ T5973] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  150.003437][ T5973] Bluetooth: hci1: failed to register connection device
[  150.068651][T14507] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2690'.
[  150.095870][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2691'.
[  150.167323][T14517] loop9: detected capacity change from 0 to 7
[  150.172136][T14517] Dev loop9: unable to read RDB block 7
[  150.174473][T14517]  loop9: unable to read partition table
[  150.176990][T14517] loop9: partition table beyond EOD, truncated
[  150.181037][T14517] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  150.243571][T14522] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2695'.
[  150.326010][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2694'.
[  150.445887][ T5973] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  150.449457][ T5973] CPU: 0 UID: 0 PID: 5973 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) 
[  150.449475][ T5973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  150.449485][ T5973] Workqueue: hci2 hci_rx_work
[  150.449502][ T5973] Call Trace:
[  150.449508][ T5973]  <TASK>
[  150.449513][ T5973]  dump_stack_lvl+0x16c/0x1f0
[  150.449531][ T5973]  sysfs_warn_dup+0x7f/0xa0
[  150.449549][ T5973]  sysfs_create_dir_ns+0x24b/0x2b0
[  150.449566][ T5973]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  150.449584][ T5973]  ? kobject_add_internal+0x25b/0x9b0
[  150.449600][ T5973]  ? lock_release+0x201/0x2f0
[  150.449621][ T5973]  ? do_raw_spin_unlock+0x172/0x230
[  150.449635][ T5973]  kobject_add_internal+0x2c4/0x9b0
[  150.449651][ T5973]  kobject_add+0x16e/0x240
[  150.449667][ T5973]  ? __pfx_kobject_add+0x10/0x10
[  150.449681][ T5973]  ? lock_release+0x201/0x2f0
[  150.449700][ T5973]  ? do_raw_spin_unlock+0x172/0x230
[  150.449713][ T5973]  ? kobject_put+0xab/0x5a0
[  150.449729][ T5973]  device_add+0x288/0x1aa0
[  150.449745][ T5973]  ? __pfx_dev_set_name+0x10/0x10
[  150.449763][ T5973]  ? __pfx_device_add+0x10/0x10
[  150.449778][ T5973]  ? mgmt_send_event_skb+0x2fb/0x460
[  150.449798][ T5973]  hci_conn_add_sysfs+0x17e/0x230
[  150.449811][ T5973]  le_conn_complete_evt+0x1075/0x1d70
[  150.449830][ T5973]  ? preempt_count_sub+0x100/0x160
[  150.449848][ T5973]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  150.449866][ T5973]  ? rcu_is_watching+0x12/0xc0
[  150.449882][ T5973]  ? lock_release+0x201/0x2f0
[  150.449902][ T5973]  hci_le_conn_complete_evt+0x23c/0x370
[  150.449922][ T5973]  hci_le_meta_evt+0x357/0x5e0
[  150.449933][ T5973]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  150.449953][ T5973]  hci_event_packet+0x682/0x11c0
[  150.449971][ T5973]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  150.449982][ T5973]  ? __pfx_hci_event_packet+0x10/0x10
[  150.449999][ T5973]  ? kcov_remote_start+0x36a/0x6d0
[  150.450012][ T5973]  ? rcu_watching_snap_stopped_since+0x100/0x110
[  150.450030][ T5973]  ? rcu_is_watching+0x12/0xc0
[  150.450047][ T5973]  hci_rx_work+0x2c5/0x16b0
[  150.450058][ T5973]  ? rcu_is_watching+0x12/0xc0
[  150.450074][ T5973]  process_one_work+0x9cc/0x1b70
[  150.450090][ T5973]  ? __pfx_rxrpc_peer_keepalive_worker+0x10/0x10
[  150.450109][ T5973]  ? __pfx_process_one_work+0x10/0x10
[  150.450129][ T5973]  ? assign_work+0x1a0/0x250
[  150.450146][ T5973]  worker_thread+0x6c8/0xf10
[  150.450170][ T5973]  ? __pfx_worker_thread+0x10/0x10
[  150.450189][ T5973]  kthread+0x3c2/0x780
[  150.450210][ T5973]  ? __pfx_kthread+0x10/0x10
[  150.450228][ T5973]  ? ret_from_fork+0x25/0x6f0
[  150.450247][ T5973]  ? rcu_is_watching+0x12/0xc0
[  150.450277][ T5973]  ? rcu_is_watching+0x12/0xc0
[  150.450302][ T5973]  ? __pfx_kthread+0x10/0x10
[  150.450322][ T5973]  ret_from_fork+0x5d7/0x6f0
[  150.450341][ T5973]  ? __pfx_kthread+0x10/0x10
[  150.450361][ T5973]  ret_from_fork_asm+0x1a/0x30
[  150.450390][ T5973]  </TASK>
[  150.450403][ T5973] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  150.542100][ T5973] Bluetooth: hci2: failed to register connection device
[  150.835782][T14585] syz.1.2713: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  150.841148][T14585] CPU: 2 UID: 0 PID: 14585 Comm: syz.1.2713 Not tainted syzkaller #0 PREEMPT(full) 
[  150.841165][T14585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  150.841173][T14585] Call Trace:
[  150.841177][T14585]  <TASK>
[  150.841182][T14585]  dump_stack_lvl+0x16c/0x1f0
[  150.841198][T14585]  warn_alloc+0x248/0x3a0
[  150.841210][T14585]  ? __pfx_warn_alloc+0x10/0x10
[  150.841222][T14585]  ? kasan_save_stack+0x42/0x60
[  150.841233][T14585]  ? kasan_save_stack+0x33/0x60
[  150.841243][T14585]  ? kasan_save_track+0x14/0x30
[  150.841254][T14585]  ? vb2_vmalloc_alloc+0xf9/0x3f0
[  150.841270][T14585]  ? __vb2_queue_alloc+0x8c9/0x1280
[  150.841282][T14585]  ? vb2_core_create_bufs+0x559/0xab0
[  150.841303][T14585]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  150.841318][T14585]  __vmalloc_node_range_noprof+0xff5/0x14b0
[  150.841337][T14585]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  150.841352][T14585]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  150.841371][T14585]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  150.841385][T14585]  vmalloc_user_noprof+0x9e/0xe0
[  150.841402][T14585]  ? vb2_vmalloc_alloc+0x135/0x3f0
[  150.841417][T14585]  vb2_vmalloc_alloc+0x135/0x3f0
[  150.841432][T14585]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  150.841448][T14585]  __vb2_queue_alloc+0x8c9/0x1280
[  150.841465][T14585]  vb2_core_create_bufs+0x559/0xab0
[  150.841480][T14585]  ? __pfx_vb2_core_create_bufs+0x10/0x10
[  150.841495][T14585]  ? __pfx_stack_trace_save+0x10/0x10
[  150.841511][T14585]  ? __mutex_trylock_common+0xe9/0x250
[  150.841529][T14585]  vb2_create_bufs+0x5e8/0x840
[  150.841542][T14585]  ? __pfx_vb2_create_bufs+0x10/0x10
[  150.841554][T14585]  ? v4l_sanitize_colorspace+0x213/0x400
[  150.841567][T14585]  vb2_ioctl_create_bufs+0x244/0x3e0
[  150.841579][T14585]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  150.841592][T14585]  vidioc_create_bufs+0x7d/0xf0
[  150.841604][T14585]  v4l_create_bufs+0x156/0x270
[  150.841620][T14585]  __video_do_ioctl+0xb40/0xfc0
[  150.841630][T14585]  ? __might_fault+0x13b/0x190
[  150.841641][T14585]  ? __pfx___video_do_ioctl+0x10/0x10
[  150.841650][T14585]  ? lock_release+0x201/0x2f0
[  150.841668][T14585]  video_usercopy+0x4cd/0x1720
[  150.841679][T14585]  ? __pfx___video_do_ioctl+0x10/0x10
[  150.841689][T14585]  ? selinux_kernel_read_file+0xb0/0x130
[  150.841705][T14585]  ? __pfx_video_usercopy+0x10/0x10
[  150.841720][T14585]  v4l2_ioctl+0x1bd/0x250
[  150.841729][T14585]  ? __pfx_v4l2_ioctl+0x10/0x10
[  150.841738][T14585]  __x64_sys_ioctl+0x18e/0x210
[  150.841756][T14585]  do_syscall_64+0xcd/0x4c0
[  150.841768][T14585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.841779][T14585] RIP: 0033:0x7ff611f8ebe9
[  150.841788][T14585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.841800][T14585] RSP: 002b:00007ff612dce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  150.841811][T14585] RAX: ffffffffffffffda RBX: 00007ff6121b5fa0 RCX: 00007ff611f8ebe9
[  150.841818][T14585] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000004
[  150.841826][T14585] RBP: 00007ff612011e19 R08: 0000000000000000 R09: 0000000000000000
[  150.841833][T14585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.841840][T14585] R13: 00007ff6121b6038 R14: 00007ff6121b5fa0 R15: 00007fff541e1dc8
[  150.841851][T14585]  </TASK>
[  150.841855][T14585] Mem-Info:
[  150.949114][T14585] active_anon:18465 inactive_anon:7 isolated_anon:0
[  150.949114][T14585]  active_file:1789 inactive_file:27391 isolated_file:0
[  150.949114][T14585]  unevictable:18116 dirty:298 writeback:0
[  150.949114][T14585]  slab_reclaimable:8694 slab_unreclaimable:84300
[  150.949114][T14585]  mapped:26306 shmem:2444 pagetables:1995
[  150.949114][T14585]  sec_pagetables:318 bounce:0
[  150.949114][T14585]  kernel_misc_reclaimable:0
[  150.949114][T14585]  free:431199 free_pcp:24675 free_cma:0
[  150.965859][T14585] Node 0 active_anon:73860kB inactive_anon:28kB active_file:7156kB inactive_file:109356kB unevictable:68928kB isolated(anon):0kB isolated(file):0kB mapped:105224kB dirty:1192kB writeback:0kB shmem:6240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16368kB pagetables:7220kB sec_pagetables:1272kB all_unreclaimable? no Balloon:0kB
[  150.976649][T14585] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  150.986944][T14585] Node 0 DMA free:14968kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  150.996131][T14585] lowmem_reserve[]: 0 1233 1233 1233 1233
[  150.997957][T14585] Node 0 DMA32 free:103124kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:73860kB inactive_anon:28kB active_file:7156kB inactive_file:109232kB unevictable:68928kB writepending:1192kB present:2080628kB managed:1263492kB mlocked:0kB bounce:0kB free_pcp:89304kB local_pcp:10020kB free_cma:0kB
[  151.007985][T14585] lowmem_reserve[]: 0 0 0 0 0
[  151.009678][T14585] Node 1 Normal free:1607844kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:10240kB local_pcp:2048kB free_cma:0kB
[  151.019524][T14585] lowmem_reserve[]: 0 0 0 0 0
[  151.021153][T14585] Node 0 DMA: 6*4kB (U) 8*8kB (U) 10*16kB (U) 6*32kB (U) 7*64kB (U) 6*128kB (U) 6*256kB (U) 5*512kB (U) 5*1024kB (U) 2*2048kB (U) 0*4096kB = 14968kB
[  151.025972][T14585] Node 0 DMA32: 2357*4kB (UME) 1071*8kB (UME) 709*16kB (UME) 162*32kB (UME) 149*64kB (UME) 76*128kB (UME) 36*256kB (UE) 18*512kB (UE) 4*1024kB (U) 5*2048kB (M) 3*4096kB (UM) = 98844kB
[  151.032083][T14585] Node 1 Normal: 115*4kB (UE) 181*8kB (UME) 181*16kB (UME) 337*32kB (UME) 225*64kB (UME) 167*128kB (UME) 148*256kB (UE) 142*512kB (UME) 134*1024kB (UE) 11*2048kB (UME) 314*4096kB (UM) = 1607844kB
[  151.038095][T14585] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  151.042026][T14585] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  151.045309][T14585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  151.048867][T14585] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  151.052949][T14585] 47937 total pagecache pages
[  151.054061][T14593] selinux_netlink_send: 57 callbacks suppressed
[  151.054072][T14593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=14593 comm=syz.0.2716
[  151.054915][T14585] 0 pages in swap cache
[  151.054926][T14585] Free swap  = 124996kB
[  151.054932][T14585] Total swap = 124996kB
[  151.054942][T14585] 1048443 pages RAM
[  151.054948][T14585] 0 pages HighMem/MovableOnly
[  151.054955][T14585] 283257 pages reserved
[  151.054961][T14585] 0 pages cma reserved
[  151.154440][T14608] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[  151.243093][T14618] loop9: detected capacity change from 0 to 7
[  151.246237][ T6364] Dev loop9: unable to read RDB block 7
[  151.247980][ T6364]  loop9: unable to read partition table
[  151.250212][ T6364] loop9: partition table beyond EOD, truncated
[  151.254093][T14618] Dev loop9: unable to read RDB block 7
[  151.256630][T14618]  loop9: unable to read partition table
[  151.260274][T14618] loop9: partition table beyond EOD, truncated
[  151.267470][T14618] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  151.313550][T14622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2725'.
[  151.324272][T14624] netlink: 'syz.2.2726': attribute type 10 has an invalid length.
[  151.327224][T14624] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2726'.
[  151.394232][T14628] net_ratelimit: 43775 callbacks suppressed
[  151.394244][T14628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.455945][T14632] wg2: entered promiscuous mode
[  151.458266][T14632] wg2: entered allmulticast mode
[  151.550640][T14649] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2734'.
[  151.679517][T14658] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001
[  151.998348][ T6158] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  152.150433][ T6158] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  152.154232][ T6158] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  152.157528][ T6158] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  152.161149][ T6158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.165682][T14675] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  152.170263][ T6158] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  152.494560][   T10] usb 6-1: USB disconnect, device number 7
[  156.648404][ T5975] Bluetooth: hci2: command 0x0406 tx timeout
[  166.322031][   T40] kauditd_printk_skb: 298 callbacks suppressed
[  166.322042][   T40] audit: type=1400 audit(1755561748.463:51040): avc:  denied  { prog_load } for  pid=14683 comm="syz.1.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  166.330308][   T40] audit: type=1400 audit(1755561748.463:51041): avc:  denied  { create } for  pid=14687 comm="syz.2.2745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  166.337025][   T40] audit: type=1400 audit(1755561748.463:51042): avc:  denied  { create } for  pid=14688 comm="syz.5.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  166.344964][   T40] audit: type=1400 audit(1755561748.463:51043): avc:  denied  { ioctl } for  pid=14688 comm="syz.5.2746" path="socket:[53841]" dev="sockfs" ino=53841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  166.352663][   T40] audit: type=1400 audit(1755561748.463:51044): avc:  denied  { bind } for  pid=14688 comm="syz.5.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  166.359157][   T40] audit: type=1400 audit(1755561748.463:51045): avc:  denied  { read } for  pid=14688 comm="syz.5.2746" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  166.365720][   T40] audit: type=1400 audit(1755561748.463:51046): avc:  denied  { open } for  pid=14688 comm="syz.5.2746" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  166.373414][   T40] audit: type=1400 audit(1755561748.463:51047): avc:  denied  { create } for  pid=14688 comm="syz.5.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  166.380107][   T40] audit: type=1400 audit(1755561748.463:51048): avc:  denied  { read } for  pid=14687 comm="syz.2.2745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  166.386196][   T40] audit: type=1400 audit(1755561748.463:51049): avc:  denied  { write } for  pid=14688 comm="syz.5.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  166.392081][T14695] netlink: 'syz.1.2744': attribute type 21 has an invalid length.
[  166.444412][ T5975] Bluetooth: hci4: unexpected event for opcode 0x1407
[  166.578290][ T6034] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  166.748274][ T6034] usb 10-1: Using ep0 maxpacket: 8
[  166.752194][ T6034] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  166.755766][ T6034] usb 10-1: config 0 has no interface number 0
[  166.758609][ T6034] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  166.763229][ T6034] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  166.767039][ T6034] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.770585][ T6034] usb 10-1: config 0 descriptor??
[  166.773839][ T6034] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  167.028387][ T6034] usb 10-1: USB disconnect, device number 4
[  167.225879][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2747'.
[  167.230375][T14709] usb usb9: usbfs: process 14709 (syz.0.2747) did not claim interface 0 before use
[  167.292846][T14732] xfrm0 speed is unknown, defaulting to 1000
[  167.294935][T14732] xfrm0 speed is unknown, defaulting to 1000
[  167.297066][T14732] xfrm0 speed is unknown, defaulting to 1000
[  167.304131][T14732] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  167.316177][T14732] xfrm0 speed is unknown, defaulting to 1000
[  167.319791][T14732] xfrm0 speed is unknown, defaulting to 1000
[  167.322228][T14732] xfrm0 speed is unknown, defaulting to 1000
[  167.325322][T14732] xfrm0 speed is unknown, defaulting to 1000
[  167.327628][T14732] xfrm0 speed is unknown, defaulting to 1000
[  167.330736][T14732] xfrm0 speed is unknown, defaulting to 1000
[  167.491261][T14757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'.
[  167.495112][T14757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14757 comm=syz.1.2762
[  167.779941][T14777] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2768'.
[  167.784047][T14777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2768'.
[  168.216868][T14796] can0: slcan on ptm0.
[  168.269139][T14795] can0 (unregistered): slcan off ptm0.
[  168.298085][T14811] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  168.303394][T14811] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore
[  168.306882][T14811] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  168.311155][T14811] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  168.344098][T14817] tipc: Enabled bearer <ib:veth0_virt_wifi>, priority 14
[  168.347806][T14817] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2780'.
[  168.391259][T14825] vcan1: entered allmulticast mode
[  168.397170][T14827] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2785'.
[  168.402460][T14827] netlink: 'syz.1.2785': attribute type 10 has an invalid length.
[  168.405654][T14827] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2785'.
[  168.409245][T14827] dummy0: entered promiscuous mode
[  168.411587][T14827] bridge0: port 1(dummy0) entered blocking state
[  168.414024][T14827] bridge0: port 1(dummy0) entered disabled state
[  168.416533][T14827] dummy0: entered allmulticast mode
[  168.419782][T14827] bridge0: port 1(dummy0) entered blocking state
[  168.421905][T14827] bridge0: port 1(dummy0) entered forwarding state
[  168.473985][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2788'.
[  168.673298][T14852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2793'.
[  168.712236][T14854] netlink: 'syz.0.2794': attribute type 10 has an invalid length.
[  168.715609][T14854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2794'.
[  168.782956][T14858] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  168.840449][T14862] netlink: 'syz.1.2798': attribute type 10 has an invalid length.
[  168.866892][ T5975] Bluetooth: hci4: unexpected event for opcode 0x0c7b
[  168.889616][ T5975] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  169.366668][T14877] XFS (nbd5): no-recovery mounts must be read-only.
[  169.458304][   T10] tipc: Node number set to 1188211020
[  170.162439][T14909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28688 sclass=netlink_route_socket pid=14909 comm=syz.1.2811
[  170.195898][T14911] erspan0: entered promiscuous mode
[  170.427691][T11428] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.492286][T11428] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.591621][T11428] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.601095][T14930] batman_adv: batadv0: Adding interface: gretap1
[  170.603862][T14930] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.614501][T14930] batman_adv: batadv0: Interface activated: gretap1
[  170.654752][T11428] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.747436][T11428] team0: left allmulticast mode
[  170.750495][T11428] team_slave_0: left allmulticast mode
[  170.752359][T11428] team_slave_1: left allmulticast mode
[  170.754121][T11428] team0: left promiscuous mode
[  170.755688][T11428] team_slave_0: left promiscuous mode
[  170.757465][T11428] team_slave_1: left promiscuous mode
[  170.760188][T11428] bridge0: port 3(team0) entered disabled state
[  170.764085][T11428] bridge_slave_1: left allmulticast mode
[  170.766371][T11428] bridge_slave_1: left promiscuous mode
[  170.769086][T11428] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.772893][T11428] bridge_slave_0: left allmulticast mode
[  170.775154][T11428] bridge_slave_0: left promiscuous mode
[  170.777422][T11428] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.785001][T11428] batman_adv: batadv0: Interface deactivated: gretap1
[  170.831505][T11428] batman_adv: batadv0: Removing interface: gretap1
[  170.875550][T14965] fuse: Unknown parameter 'groupXid'
[  171.073307][T11428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.079023][T11428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.084598][T11428] bond0 (unregistering): Released all slaves
[  171.093300][T11428] bond1 (unregistering): (slave wlan0): Releasing active interface
[  171.097210][T11428] bond1 (unregistering): Released all slaves
[  171.103366][T11428] bond2 (unregistering): Released all slaves
[  171.110587][T11428] bond3 (unregistering): Released all slaves
[  171.116993][T11428] bond4 (unregistering): Released all slaves
[  171.123575][T11428] bond5 (unregistering): Released all slaves
[  171.132242][T11428] bond6 (unregistering): Released all slaves
[  171.136976][ T6051] xfrm0 speed is unknown, defaulting to 1000
[  171.139531][ T6051] infiniband s�z1: ib_query_port failed (-19)
[  171.521385][T11428] hsr_slave_0: left promiscuous mode
[  171.524692][T11428] hsr_slave_1: left promiscuous mode
[  171.527613][T11428] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.531479][T11428] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.536000][   T40] kauditd_printk_skb: 372 callbacks suppressed
[  171.536013][   T40] audit: type=1400 audit(1756086041.668:51422): avc:  denied  { read } for  pid=15005 comm="syz.0.2834" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  171.536143][T11428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.539278][   T40] audit: type=1400 audit(1756086041.668:51423): avc:  denied  { open } for  pid=15005 comm="syz.0.2834" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  171.547710][T11428] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.551878][   T40] audit: type=1400 audit(1756086041.668:51424): avc:  denied  { read } for  pid=15005 comm="syz.0.2834" name="0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  171.576504][   T40] audit: type=1400 audit(1756086041.668:51425): avc:  denied  { open } for  pid=15005 comm="syz.0.2834" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  171.585503][   T40] audit: type=1400 audit(1756086041.678:51426): avc:  denied  { name_bind } for  pid=15005 comm="syz.0.2834" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  171.586538][T11428] veth1_macvtap: left promiscuous mode
[  171.596343][   T40] audit: type=1400 audit(1756086041.678:51427): avc:  denied  { node_bind } for  pid=15005 comm="syz.0.2834" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  171.598945][T11428] veth0_macvtap: left promiscuous mode
[  171.607481][   T40] audit: type=1400 audit(1756086041.698:51428): avc:  denied  { create } for  pid=15010 comm="syz.0.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  171.609297][T11428] veth1_vlan: left promiscuous mode
[  171.616908][   T40] audit: type=1400 audit(1756086041.698:51429): avc:  denied  { read } for  pid=15010 comm="syz.0.2835" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  171.618629][T11428] veth0_vlan: left promiscuous mode
[  171.625289][   T40] audit: type=1400 audit(1756086041.698:51430): avc:  denied  { open } for  pid=15010 comm="syz.0.2835" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  171.625317][   T40] audit: type=1400 audit(1756086041.698:51431): avc:  denied  { ioctl } for  pid=15010 comm="syz.0.2835" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  171.715280][T11428] team0 (unregistering): Port device team_slave_1 removed
[  171.722433][T11428] team0 (unregistering): Port device team_slave_0 removed
[  171.784378][T15023] pimreg: entered allmulticast mode
[  171.798271][T15029] hub 9-0:1.0: USB hub found
[  171.800368][T15029] hub 9-0:1.0: 1 port detected
[  171.841524][T15037] misc userio: The device must be registered before sending interrupts
[  171.844901][T15034] mac80211_hwsim hwsim17 a���: renamed from wlan1 (while UP)
[  171.874681][T15039] 9pnet_fd: p9_fd_create_unix (15039): problem connecting socket: �q�Y�3aK: -91
[  171.961455][T15047] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  171.965109][T15047] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (255)
[  172.027370][T15054] lo speed is unknown, defaulting to 1000
[  172.064134][T15054] xfrm0 speed is unknown, defaulting to 1000
[  172.295867][T15070] mac80211_hwsim hwsim7 a���: renamed from wlan1
[  172.301804][T15064] overlayfs: missing 'lowerdir'
[  172.470480][T15079] CUSE: unknown device info ""
[  172.472642][T15079] CUSE: zero length info key specified
[  172.477575][T15079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.806166][T15095] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  172.866165][T15099] syz.5.2863 (15099): drop_caches: 2
[  172.875898][T15099] __nla_validate_parse: 5 callbacks suppressed
[  172.875910][T15099] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2863'.
[  173.034608][T15104] kvm: kvm [15103]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18
[  173.038459][T15104] kvm: kvm [15103]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18
[  173.069618][T15104] kvm: kvm [15103]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18
[  173.094869][T15104] kvm: kvm [15103]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18
[  173.098612][T15108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  173.099838][T15104] kvm: kvm [15103]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18
[  173.103609][T15113] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  173.156197][T15122] input: syz1 as /devices/virtual/input/input16
[  173.227798][T15134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.233210][T15134] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2873'.
[  173.256859][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2875'.
[  173.578630][T15163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2883'.
[  173.581137][T15165] tmpfs: Unknown parameter 'mp�D4ol'
[  173.603135][T15167] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0)
[  173.644062][T15172] ubi0: attaching mtd0
[  173.644714][T15170] netlink: 'syz.1.2885': attribute type 10 has an invalid length.
[  173.645529][T15172] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042)
[  173.654841][T15170] team0: Cannot enslave team device to itself
[  173.746503][ T5973] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  173.749564][ T5973] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  173.751120][ T5979] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  173.754670][ T5979] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  173.758409][ T5979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  173.762460][ T5979] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  173.789598][T15180] lo speed is unknown, defaulting to 1000
[  173.789667][T15192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2892'.
[  173.827889][T15180] xfrm0 speed is unknown, defaulting to 1000
[  173.832748][T15196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2894'.
[  173.877261][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2895'.
[  173.903909][T15180] chnl_net:caif_netlink_parms(): no params data found
[  173.947815][T15180] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.950208][T15180] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.952600][T15180] bridge_slave_0: entered allmulticast mode
[  173.954987][T15180] bridge_slave_0: entered promiscuous mode
[  173.957727][T15180] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.960193][T15180] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.962638][T15180] bridge_slave_1: entered allmulticast mode
[  173.965062][T15180] bridge_slave_1: entered promiscuous mode
[  173.991552][T15180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.995530][T15180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.015637][T15180] team0: Port device team_slave_0 added
[  174.018707][T15180] team0: Port device team_slave_1 added
[  174.036931][T15180] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.039355][T15180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.047731][T15180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.052594][T15180] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.054763][T15180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.062985][T15180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.086866][T15180] hsr_slave_0: entered promiscuous mode
[  174.089707][T15180] hsr_slave_1: entered promiscuous mode
[  174.093397][T15180] debugfs: 'hsr0' already exists in 'hsr'
[  174.096831][T15180] Cannot create hsr debugfs directory
[  174.129342][ T6379] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  174.145065][T15180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.175477][ T5979] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  174.203310][T15180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.253585][T15180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.298998][ T6379] usb 10-1: Using ep0 maxpacket: 8
[  174.302131][ T6379] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  174.305791][ T6379] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  174.309583][ T6379] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  174.312889][ T6379] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  174.316967][ T6379] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  174.320150][ T6379] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.329651][T15180] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.407181][T15180] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  174.411145][T15180] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  174.415307][T15180] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  174.418633][T15180] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  174.459952][T15180] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.470651][T15180] 8021q: adding VLAN 0 to HW filter on device team0
[  174.478365][T11428] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.480870][T11428] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.488177][T11428] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.490760][T11428] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.521840][T15237] netlink: 'syz.1.2903': attribute type 1 has an invalid length.
[  174.525495][T15237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=15237 comm=syz.1.2903
[  174.531018][ T6379] usb 10-1: GET_CAPABILITIES returned 0
[  174.533091][ T6379] usbtmc 10-1:16.0: can't read capabilities
[  174.578163][T15180] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.594706][T15180] veth0_vlan: entered promiscuous mode
[  174.599507][T15180] veth1_vlan: entered promiscuous mode
[  174.610652][T15180] veth0_macvtap: entered promiscuous mode
[  174.614082][T15180] veth1_macvtap: entered promiscuous mode
[  174.621376][T15180] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.628096][T15180] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.635854][T11447] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.639247][T11447] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.644138][T11447] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.646891][T11447] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.664280][T11430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.666778][T11430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.676647][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.680038][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.751504][T15262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2910'.
[  174.754457][ T6051] usb 10-1: USB disconnect, device number 5
[  174.762288][ T5979] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  174.971746][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2920'.
[  174.975368][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2920'.
[  175.007678][ T5979] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  175.012408][ T5979] CPU: 2 UID: 0 PID: 5979 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) 
[  175.012439][ T5979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  175.012453][ T5979] Workqueue: hci3 hci_rx_work
[  175.012486][ T5979] Call Trace:
[  175.012491][ T5979]  <TASK>
[  175.012499][ T5979]  dump_stack_lvl+0x16c/0x1f0
[  175.012518][ T5979]  sysfs_warn_dup+0x7f/0xa0
[  175.012539][ T5979]  sysfs_create_dir_ns+0x24b/0x2b0
[  175.012563][ T5979]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  175.012587][ T5979]  ? kobject_add_internal+0x25b/0x9b0
[  175.012612][ T5979]  ? lock_release+0x201/0x2f0
[  175.012642][ T5979]  ? do_raw_spin_unlock+0x172/0x230
[  175.012664][ T5979]  kobject_add_internal+0x2c4/0x9b0
[  175.012689][ T5979]  kobject_add+0x16e/0x240
[  175.012711][ T5979]  ? __pfx_kobject_add+0x10/0x10
[  175.012732][ T5979]  ? lock_release+0x201/0x2f0
[  175.012760][ T5979]  ? do_raw_spin_unlock+0x172/0x230
[  175.012780][ T5979]  ? kobject_put+0xab/0x5a0
[  175.012804][ T5979]  device_add+0x288/0x1aa0
[  175.012828][ T5979]  ? __pfx_dev_set_name+0x10/0x10
[  175.012853][ T5979]  ? __pfx_device_add+0x10/0x10
[  175.012877][ T5979]  ? mgmt_send_event_skb+0x2fb/0x460
[  175.012909][ T5979]  hci_conn_add_sysfs+0x17e/0x230
[  175.012929][ T5979]  le_conn_complete_evt+0x1075/0x1d70
[  175.012974][ T5979]  ? preempt_count_sub+0x100/0x160
[  175.013004][ T5979]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  175.013033][ T5979]  ? rcu_is_watching+0x12/0xc0
[  175.013057][ T5979]  ? lock_release+0x201/0x2f0
[  175.013088][ T5979]  hci_le_conn_complete_evt+0x23c/0x370
[  175.013118][ T5979]  hci_le_meta_evt+0x357/0x5e0
[  175.013135][ T5979]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  175.013165][ T5979]  hci_event_packet+0x682/0x11c0
[  175.013191][ T5979]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  175.013209][ T5979]  ? __pfx_hci_event_packet+0x10/0x10
[  175.013234][ T5979]  ? kcov_remote_start+0x36a/0x6d0
[  175.013253][ T5979]  ? rcu_watching_snap_stopped_since+0x100/0x110
[  175.013279][ T5979]  ? rcu_is_watching+0x12/0xc0
[  175.013313][ T5979]  hci_rx_work+0x2c5/0x16b0
[  175.013333][ T5979]  ? rcu_is_watching+0x12/0xc0
[  175.013358][ T5979]  process_one_work+0x9cc/0x1b70
[  175.013385][ T5979]  ? __pfx_rxrpc_peer_keepalive_worker+0x10/0x10
[  175.013416][ T5979]  ? __pfx_process_one_work+0x10/0x10
[  175.013442][ T5979]  ? assign_work+0x1a0/0x250
[  175.013462][ T5979]  worker_thread+0x6c8/0xf10
[  175.013487][ T5979]  ? __pfx_worker_thread+0x10/0x10
[  175.013508][ T5979]  kthread+0x3c2/0x780
[  175.013526][ T5979]  ? __pfx_kthread+0x10/0x10
[  175.013541][ T5979]  ? ret_from_fork+0x25/0x6f0
[  175.013557][ T5979]  ? rcu_is_watching+0x12/0xc0
[  175.013580][ T5979]  ? rcu_is_watching+0x12/0xc0
[  175.013601][ T5979]  ? __pfx_kthread+0x10/0x10
[  175.013614][ T5979]  ret_from_fork+0x5d7/0x6f0
[  175.013625][ T5979]  ? __pfx_kthread+0x10/0x10
[  175.013636][ T5979]  ret_from_fork_asm+0x1a/0x30
[  175.013654][ T5979]  </TASK>
[  175.013705][ T5979] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  175.123254][ T5979] Bluetooth: hci3: failed to register connection device
[  175.197497][T15314] IPv6: sit1: Disabled Multicast RS
[  175.200529][T15314] sit1: entered allmulticast mode
[  175.293319][T15316] netlink: 'syz.5.2928': attribute type 1 has an invalid length.
[  175.304031][T15316] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.464826][ T5979] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  175.769135][ T5975] Bluetooth: hci3: command tx timeout
[  176.306195][T15355] lo speed is unknown, defaulting to 1000
[  176.343450][T15355] xfrm0 speed is unknown, defaulting to 1000
[  176.572478][   T40] kauditd_printk_skb: 444 callbacks suppressed
[  176.572489][   T40] audit: type=1400 audit(1756086046.708:51876): avc:  denied  { create } for  pid=15362 comm="syz.0.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  176.583703][   T40] audit: type=1400 audit(1756086046.718:51877): avc:  denied  { setopt } for  pid=15362 comm="syz.0.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  176.593753][   T40] audit: type=1400 audit(1756086046.718:51878): avc:  denied  { create } for  pid=15362 comm="syz.0.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  176.600017][   T40] audit: type=1400 audit(1756086046.718:51879): avc:  denied  { ioctl } for  pid=15362 comm="syz.0.2940" path="socket:[58982]" dev="sockfs" ino=58982 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  176.608190][   T40] audit: type=1400 audit(1756086046.718:51880): avc:  denied  { bind } for  pid=15362 comm="syz.0.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  176.615105][   T40] audit: type=1400 audit(1756086046.718:51881): avc:  denied  { ioctl } for  pid=15362 comm="syz.0.2940" path="socket:[58349]" dev="sockfs" ino=58349 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  176.831397][   T40] audit: type=1400 audit(1756086046.968:51882): avc:  denied  { read } for  pid=15366 comm="syz.5.2941" name="comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  176.832219][T15367] netlink: 'syz.5.2941': attribute type 8 has an invalid length.
[  176.841712][   T40] audit: type=1400 audit(1756086046.968:51883): avc:  denied  { open } for  pid=15366 comm="syz.5.2941" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  176.853461][   T40] audit: type=1400 audit(1756086046.968:51884): avc:  denied  { ioctl } for  pid=15366 comm="syz.5.2941" path="/dev/comedi4" dev="devtmpfs" ino=1306 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  177.103164][   T40] audit: type=1400 audit(1756086047.238:51885): avc:  denied  { unmount } for  pid=15180 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  177.370188][T15374] netlink: 'syz.5.2944': attribute type 1 has an invalid length.
[  177.382663][T15374] 8021q: adding VLAN 0 to HW filter on device bond2
[  177.425524][T15380] dlm: no locking on control device
[  177.427808][T15380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.433343][T15380] netlink: 'syz.5.2946': attribute type 1 has an invalid length.
[  177.446648][T15380] 8021q: adding VLAN 0 to HW filter on device bond3
[  177.566463][T15385] netlink: 'syz.0.2947': attribute type 1 has an invalid length.
[  177.568913][T15385] netlink: 'syz.0.2947': attribute type 1 has an invalid length.
[  177.589973][T15389] sg_write: process 615 (syz.0.2948) changed security contexts after opening file descriptor, this is not allowed.
[  177.849532][ T5979] Bluetooth: hci3: command tx timeout
[  177.886160][T11434] Bluetooth: hci0: Frame reassembly failed (-84)
[  177.888162][T15417] __nla_validate_parse: 7 callbacks suppressed
[  177.888177][T15417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2956'.
[  177.976332][T15431] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2961'.
[  178.024691][T15439] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2966'.
[  178.183168][T15460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2973'.
[  178.203812][T15460] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15460 comm=syz.0.2973
[  179.328395][ T5976] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  179.930086][ T5975] Bluetooth: hci3: command 0x040f tx timeout
[  179.930500][ T5976] Bluetooth: hci0: command 0x1003 tx timeout
[  179.932227][ T5979] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  180.240133][T15523] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2994'.
[  180.268798][T15527] program syz.5.2995 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  180.315555][T15527] program syz.5.2995 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  180.533205][T15547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3001'.
[  180.537884][T15547] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.554346][T15547] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.824202][T15560] netlink: 'syz.2.3006': attribute type 13 has an invalid length.
[  180.827754][T15560] netlink: 'syz.2.3006': attribute type 27 has an invalid length.
[  180.843161][T15560] gretap0: refused to change device tx_queue_len
[  180.846124][T15560] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  181.201778][ T6034] Process accounting resumed
[  181.312862][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'.
[  181.315675][T15593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3017'.
[  181.319103][T15593] netlink: 'syz.0.3017': attribute type 18 has an invalid length.
[  181.347236][T15596] kvm: kvm [15595]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000004)
[  181.440634][T15602] usb usb9: usbfs: process 15602 (syz.0.3020) did not claim interface 0 before use
[  181.445376][T15602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3020'.
[  181.453154][T15602] geneve2: entered promiscuous mode
[  181.455605][T15602] geneve2: entered allmulticast mode
[  181.651226][   T40] kauditd_printk_skb: 309 callbacks suppressed
[  181.651239][   T40] audit: type=1400 audit(1756086051.787:52195): avc:  denied  { read } for  pid=15614 comm="syz.5.3026" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  181.665360][   T40] audit: type=1400 audit(1756086051.787:52196): avc:  denied  { open } for  pid=15614 comm="syz.5.3026" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  181.676749][T15619] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  181.681727][   T40] audit: type=1400 audit(1756086051.797:52197): avc:  denied  { create } for  pid=15616 comm="syz.0.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  181.688768][   T40] audit: type=1400 audit(1756086051.797:52198): avc:  denied  { create } for  pid=15618 comm="syz.5.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  181.697503][   T40] audit: type=1400 audit(1756086051.797:52199): avc:  denied  { write } for  pid=15618 comm="syz.5.3027" name="packet" dev="proc" ino=4026533262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  181.706362][   T40] audit: type=1400 audit(1756086051.797:52200): avc:  denied  { watch watch_reads } for  pid=15618 comm="syz.5.3027" path="/178" dev="tmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  181.714461][   T40] audit: type=1400 audit(1756086051.797:52201): avc:  denied  { map_create } for  pid=15618 comm="syz.5.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  181.723686][   T40] audit: type=1400 audit(1756086051.817:52202): avc:  denied  { connect } for  pid=15616 comm="syz.0.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  181.732969][   T40] audit: type=1400 audit(1756086051.817:52203): avc:  denied  { name_connect } for  pid=15616 comm="syz.0.3025" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  181.742855][   T40] audit: type=1400 audit(1756086051.817:52204): avc:  denied  { listen } for  pid=15616 comm="syz.0.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  181.834441][T15634] syz.0.3032 (15634): drop_caches: 2
[  181.949160][T15643] program syz.0.3034 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  182.010351][ T5979] Bluetooth: hci3: command 0x040f tx timeout
[  182.440225][  T141] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  182.592377][  T141] usb 10-1: config index 0 descriptor too short (expected 39, got 27)
[  182.595862][  T141] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  182.600288][  T141] usb 10-1: config 0 interface 0 has no altsetting 0
[  182.604906][  T141] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  182.607799][  T141] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  182.610696][  T141] usb 10-1: Product: syz
[  182.612060][  T141] usb 10-1: Manufacturer: syz
[  182.613583][  T141] usb 10-1: SerialNumber: syz
[  182.616749][  T141] usb 10-1: config 0 descriptor??
[  182.621835][  T141] hub 10-1:0.0: bad descriptor, ignoring hub
[  182.624779][  T141] hub 10-1:0.0: probe with driver hub failed with error -5
[  182.629567][  T141] usb 10-1: selecting invalid altsetting 0
[  182.689127][T15675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  182.721592][T15681] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  182.755991][T15685] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3045'.
[  182.759683][T15685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32801 sclass=netlink_route_socket pid=15685 comm=syz.2.3045
[  182.889275][ T5979] Bluetooth: hci2: unexpected event for opcode 0x200c
[  183.225659][T15716] lo speed is unknown, defaulting to 1000
[  183.263863][T15716] xfrm0 speed is unknown, defaulting to 1000
[  183.268282][T15724] bridge_slave_0: left allmulticast mode
[  183.270982][T15724] bridge_slave_0: left promiscuous mode
[  183.272946][T15724] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.310821][T15724] bridge_slave_1: left allmulticast mode
[  183.313163][T15724] bridge_slave_1: left promiscuous mode
[  183.315205][T15724] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.319430][T15724] bond0: (slave bond_slave_0): Releasing backup interface
[  183.323255][T15724] bond0: (slave bond_slave_1): Releasing backup interface
[  183.328319][T15724] team0: Port device team_slave_0 removed
[  183.333097][T15724] team0: Port device team_slave_1 removed
[  183.335549][T15724] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.338261][T15724] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.342459][T15724] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.345378][T15724] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.510104][T15666] usb 10-1: reset high-speed USB device number 6 using dummy_hcd
[  183.573416][T15744] syzkaller1: entered promiscuous mode
[  183.575338][T15744] syzkaller1: entered allmulticast mode
[  183.579043][T15744] netlink: 'syz.2.3059': attribute type 10 has an invalid length.
[  183.582745][T15744] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3059'.
[  183.585545][T15744] dummy0: entered promiscuous mode
[  183.587463][T15744] bridge0: port 1(dummy0) entered blocking state
[  183.589539][T15744] bridge0: port 1(dummy0) entered disabled state
[  183.592268][T15744] dummy0: entered allmulticast mode
[  183.596080][T15744] bridge0: port 1(dummy0) entered blocking state
[  183.598844][T15744] bridge0: port 1(dummy0) entered forwarding state
[  183.664734][T15666] usb 10-1: device firmware changed
[  183.667409][ T6379] usb 10-1: USB disconnect, device number 6
[  183.800070][ T6379] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  183.846569][T15759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3061'.
[  183.849405][T15759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3061'.
[  183.872129][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'.
[  183.874997][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'.
[  183.951834][ T6379] usb 10-1: config index 0 descriptor too short (expected 39, got 27)
[  183.954411][ T6379] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  183.957595][ T6379] usb 10-1: config 0 interface 0 has no altsetting 0
[  183.972026][ T6379] usb 10-1: string descriptor 0 read error: -22
[  183.974037][ T6379] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  183.976840][ T6379] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  183.984894][ T6379] usb 10-1: config 0 descriptor??
[  183.987646][ T6379] hub 10-1:0.0: bad descriptor, ignoring hub
[  183.989548][ T6379] hub 10-1:0.0: probe with driver hub failed with error -5
[  183.993039][ T6379] usb 10-1: selecting invalid altsetting 0
[  184.090166][ T5976] Bluetooth: hci3: command 0x040f tx timeout
[  184.192081][T15666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3039'.
[  184.758995][T15777] syz_tun: entered allmulticast mode
[  184.812383][ T6379] usb 10-1: USB disconnect, device number 7
[  185.015021][T15794] syz.2.3074: attempt to access beyond end of device
[  185.015021][T15794] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0
[  185.019165][T15794] syz.2.3074: attempt to access beyond end of device
[  185.019165][T15794] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0
[  185.024063][T15794] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  185.027214][T15794] syz.2.3074: attempt to access beyond end of device
[  185.027214][T15794] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0
[  185.028731][T15796] mkiss: ax0: crc mode is auto.
[  185.034408][T15794] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  185.038550][T15796] netlink: zone id is out of range
[  185.038760][T15794] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[  185.041116][T15796] netlink: zone id is out of range
[  185.044475][T15794] UDF-fs: Scanning with blocksize 512 failed
[  185.045302][T15796] netlink: zone id is out of range
[  185.045308][T15796] netlink: zone id is out of range
[  185.045312][T15796] netlink: zone id is out of range
[  185.045315][T15796] netlink: zone id is out of range
[  185.045319][T15796] netlink: zone id is out of range
[  185.045322][T15796] netlink: zone id is out of range
[  185.062100][T15794] syz.2.3074: attempt to access beyond end of device
[  185.062100][T15794] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0
[  185.067453][T15794] syz.2.3074: attempt to access beyond end of device
[  185.067453][T15794] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0
[  185.073557][T15794] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  185.077697][T15794] syz.2.3074: attempt to access beyond end of device
[  185.077697][T15794] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0
[  185.083456][T15794] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  185.083714][T15797] ata1.00: invalid multi_count 1 ignored
[  185.086490][T15794] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[  185.092001][T15794] UDF-fs: Scanning with blocksize 1024 failed
[  185.095158][T15794] syz.2.3074: attempt to access beyond end of device
[  185.095158][T15794] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0
[  185.101047][T15794] syz.2.3074: attempt to access beyond end of device
[  185.101047][T15794] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0
[  185.106421][T15794] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  185.110429][T15794] syz.2.3074: attempt to access beyond end of device
[  185.110429][T15794] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0
[  185.116145][T15794] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  185.119845][T15794] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[  185.122344][T15794] UDF-fs: Scanning with blocksize 2048 failed
[  185.124443][T15794] syz.2.3074: attempt to access beyond end of device
[  185.124443][T15794] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0
[  185.128658][T15794] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  185.133187][T15794] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  185.137274][T15794] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[  185.141768][T15794] UDF-fs: Scanning with blocksize 4096 failed
[  185.144351][T15794] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1)
[  185.150400][T15800] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3076'.
[  185.154527][T15800] macsec0: entered promiscuous mode
[  185.156540][T15800] macsec0: entered allmulticast mode
[  185.158358][T15800] veth1_macvtap: entered allmulticast mode
[  185.515907][T15811] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3080'.
[  185.541975][T15814] @: renamed from vlan0 (while UP)
[  185.548813][T15814] tmpfs: Cannot change global quota limit on remount
[  186.078265][T15819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3083'.
[  186.102812][T15822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3082'.
[  186.109969][T15822] vxlan0: entered promiscuous mode
[  186.113956][T11428] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.117544][T11428] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.123726][T11428] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.127110][T11428] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.170558][T15828] netlink: 'syz.2.3086': attribute type 7 has an invalid length.
[  186.180709][ T5976] Bluetooth: hci3: command 0x040f tx timeout
[  186.220176][T15832] bridge0: port 1(dummy0) entered disabled state
[  186.225346][T15832] dummy0 (unregistering): left allmulticast mode
[  186.227933][T15832] bridge0: port 1(dummy0) entered disabled state
[  186.403621][T15843] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock
[  186.421395][T15844] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock
[  186.454296][T15847] tmpfs: Invalid uid '0x00000000ffffffff'
[  186.668848][T15861] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1540 sclass=netlink_tcpdiag_socket pid=15861 comm=syz.2.3095
[  186.673203][T15861] netlink: 'syz.2.3095': attribute type 16 has an invalid length.
[  186.675786][T15861] netlink: 'syz.2.3095': attribute type 17 has an invalid length.
[  186.729563][ T6433] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.733421][ T6433] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.738878][ T6433] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.741913][ T6433] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.798781][   T40] kauditd_printk_skb: 378 callbacks suppressed
[  186.798796][   T40] audit: type=1400 audit(1756086056.927:52583): avc:  denied  { create } for  pid=15863 comm="syz.2.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  186.809390][   T40] audit: type=1400 audit(1756086056.927:52584): avc:  denied  { setopt } for  pid=15863 comm="syz.2.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  186.816347][   T40] audit: type=1400 audit(1756086056.927:52585): avc:  denied  { write } for  pid=15863 comm="syz.2.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  186.822041][T15864] fuse: Bad value for 'fd'
[  186.822716][   T40] audit: type=1400 audit(1756086056.927:52586): avc:  denied  { module_request } for  pid=15863 comm="syz.2.3096" kmod="net-pf-27" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  186.832140][   T40] audit: type=1400 audit(1756086056.947:52587): avc:  denied  { create } for  pid=15863 comm="syz.2.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  186.840147][   T40] audit: type=1400 audit(1756086056.957:52588): avc:  denied  { read write } for  pid=15863 comm="syz.2.3096" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  186.847964][   T40] audit: type=1400 audit(1756086056.957:52589): avc:  denied  { open } for  pid=15863 comm="syz.2.3096" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  186.855189][   T40] audit: type=1400 audit(1756086056.957:52590): avc:  denied  { mounton } for  pid=15863 comm="syz.2.3096" path="/69/file0" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  186.862208][   T40] audit: type=1400 audit(1756086056.967:52591): avc:  denied  { read write } for  pid=15180 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  186.869576][   T40] audit: type=1400 audit(1756086056.967:52592): avc:  denied  { open } for  pid=15180 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  186.984759][T15873] netlink: 'syz.5.3100': attribute type 1 has an invalid length.
[  186.987585][T15873] net_ratelimit: 6 callbacks suppressed
[  186.987596][T15873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.025087][T15873] netlink: 'syz.5.3100': attribute type 7 has an invalid length.
[  187.028020][T15873] netlink: 'syz.5.3100': attribute type 8 has an invalid length.
[  187.077007][T15887] overlayfs: missing 'lowerdir'
[  187.160105][T15899] xt_socket: unknown flags 0x20
[  187.332570][T15909] program syz.2.3113 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  187.943645][T15925] netlink: 'syz.2.3118': attribute type 12 has an invalid length.
[  187.967487][T15927] 9pnet_fd: Insufficient options for proto=fd
[  188.103382][T15939] netlink: 'syz.5.3122': attribute type 4 has an invalid length.
[  188.113830][T15942] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  188.152663][T15949] "syz.5.3126" (15949) uses obsolete ecb(arc4) skcipher
[  188.380673][ T3250] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  188.533065][T15965] netlink: 'syz.5.3132': attribute type 4 has an invalid length.
[  188.540716][ T3250] usb 7-1: Using ep0 maxpacket: 8
[  188.544370][ T3250] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  188.547505][ T3250] usb 7-1: config 0 has no interface number 0
[  188.549540][ T3250] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  188.554524][ T3250] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  188.558111][ T3250] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  188.561781][ T3250] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  188.564799][ T3250] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.574889][ T3250] usb 7-1: config 0 descriptor??
[  188.579754][ T3250] ldusb 7-1:0.55: Interrupt out endpoint not found (using control endpoint instead)
[  188.584103][ T3250] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  188.674241][T15971] devpts: Bad value for 'max'
[  188.704120][T15994] __nla_validate_parse: 14 callbacks suppressed
[  188.704132][T15994] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.3137'.
[  188.760237][T16001] team0: No ports can be present during mode change
[  188.779376][T15947] ldusb 7-1:0.55: Write buffer overflow, 13 bytes dropped
[  188.802796][T16005] kernel read not supported for file /*{.Z;�E�,97�~�t�GB�x�h����ty�iN}�
[  188.802796][T16005] k���π'E����O��-%����C~Ea8<z�W7�ၹ��
ɷ|��u
[  188.802796][T16005] }dG�uޫ�ir�
[  188.802796][T16005] �a�'-��|��Ҿ�Z��˨��os�ًC����>֢�渕���_�Րh�Su�\i�5+����.� (pid: 16005 comm: syz.5.3141)
[  188.919113][T16012] fuse: Bad value for 'group_id'
[  188.921311][T16012] fuse: Bad value for 'group_id'
[  189.044954][  T839] usb 7-1: USB disconnect, device number 16
[  189.047677][  T839] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  189.097355][T16017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3146'.
[  189.422992][ T5976] Bluetooth: Unexpected continuation frame (len 10)
[  189.452372][ T5976] Bluetooth: Wrong link type (-22)
[  189.582254][T16034] block nbd0: shutting down sockets
[  189.657243][T16036] kAFS: No cell specified
[  189.672130][T16041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3153'.
[  189.675147][T16041] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  189.816914][T16049] nbd: couldn't find a device at index -1605786504
[  189.872047][ T3250] libceph: connect (1)[c::]:6789 error -101
[  189.874616][ T3250] libceph: mon0 (1)[c::]:6789 connect error
[  189.920079][T16053] ceph: No mds server is up or the cluster is laggy
[  189.945039][T16058] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3159'.
[  189.945040][T16059] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3159'.
[  190.189434][ T5979] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  190.194101][ T5979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  190.197091][ T5979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  190.200255][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  190.208466][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  190.223481][T16076] lo speed is unknown, defaulting to 1000
[  190.256471][T16076] xfrm0 speed is unknown, defaulting to 1000
[  190.274535][ T6051] IPVS: starting estimator thread 0...
[  190.310117][T16076] chnl_net:caif_netlink_parms(): no params data found
[  190.350145][T16109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3171'.
[  190.361201][T16094] IPVS: using max 34 ests per chain, 81600 per kthread
[  190.376223][T16076] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.378855][T16076] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.383065][T16076] bridge_slave_0: entered allmulticast mode
[  190.388597][T16076] bridge_slave_0: entered promiscuous mode
[  190.394211][T16076] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.397180][T16076] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.400296][T16076] bridge_slave_1: entered allmulticast mode
[  190.404119][T16076] bridge_slave_1: entered promiscuous mode
[  190.406579][T16120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3174'.
[  190.414806][T16120] autofs: Unknown parameter ''
[  190.426250][T16076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.430246][T16076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.446373][T16124] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3176'.
[  190.463668][T16076] team0: Port device team_slave_0 added
[  190.468973][T16128] JFS: discard option not supported on device
[  190.475128][T16128] bio_check_eod: 2 callbacks suppressed
[  190.475142][T16128] syz.5.3175: attempt to access beyond end of device
[  190.475142][T16128] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[  190.482899][T16128] syz.5.3175: attempt to access beyond end of device
[  190.482899][T16128] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0
[  190.488117][T16128] Mount JFS Failure: -5
[  190.491869][T11447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.495266][T11447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.502273][T16076] team0: Port device team_slave_1 added
[  190.517116][T16128] SELinux:  Context system_u:object_r:ifconfig_exec_t:s0 is not valid (left unmapped).
[  190.525811][T16076] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.528580][T16076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.539452][T16076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.545692][T16076] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.548643][T16076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.558073][T16076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.568199][T11447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.572880][T11447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.615032][T16076] hsr_slave_0: entered promiscuous mode
[  190.617892][T16076] hsr_slave_1: entered promiscuous mode
[  190.620675][T16076] debugfs: 'hsr0' already exists in 'hsr'
[  190.623385][T16076] Cannot create hsr debugfs directory
[  190.647313][T11447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.652368][T11447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.708783][T16142] futex_wake_op: syz.0.3182 tries to shift op by 32; fix this program
[  190.748052][T16076] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  190.753078][T16149] tmpfs: Bad value for 'mpol'
[  190.756626][T11447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.759867][T11447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.765790][T16076] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  190.772310][T16076] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  190.779050][T16076] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  190.790102][T16157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=16157 comm=syz.0.3186
[  190.792963][T16076] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.797697][T16076] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.800803][T16076] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.803938][T16076] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.825339][T16076] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.831583][T11428] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.834296][T11428] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.837229][T16162] binder: 16161:16162 unknown command 0
[  190.839649][T16162] binder: 16161:16162 ioctl c0306201 200000000080 returned -22
[  190.845255][T16076] 8021q: adding VLAN 0 to HW filter on device team0
[  190.849935][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.852750][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.859988][T11428] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.863369][T11428] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.908432][T11447] dummy0: left allmulticast mode
[  190.910790][T11447] bridge0: port 1(dummy0) entered disabled state
[  190.933038][T16176] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  190.935410][T16176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  190.938533][T16176] vhci_hcd vhci_hcd.0: Device attached
[  190.941831][T16178] vhci_hcd: connection closed
[  190.941933][T11428] vhci_hcd: stop threads
[  190.945867][T11428] vhci_hcd: release socket
[  190.947710][T11428] vhci_hcd: disconnect device
[  191.164727][T11447] bond1 (unregistering): Released all slaves
[  191.171367][T11447] bond2 (unregistering): Released all slaves
[  191.177659][T11447] smc: removing net device bond0 with user defined pnetid SYZ2
[  191.181236][T11447] bond0 (unregistering): Released all slaves
[  191.187674][T11447] bond3 (unregistering): Released all slaves
[  191.245327][T16076] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.264587][T11447] tipc: Disabling bearer <ib:veth0_virt_wifi>
[  191.268095][T11447] tipc: Left network mode
[  191.289151][T16187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3191'.
[  191.368288][T16076] veth0_vlan: entered promiscuous mode
[  191.374721][T16076] veth1_vlan: entered promiscuous mode
[  191.402625][T16076] veth0_macvtap: entered promiscuous mode
[  191.408847][T16076] veth1_macvtap: entered promiscuous mode
[  191.424290][T16076] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.428430][T16076] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.435105][   T73] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.438008][   T73] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.442788][   T73] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.445606][   T73] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.480311][T11447] hsr_slave_0: left promiscuous mode
[  191.482734][T11447] hsr_slave_1: left promiscuous mode
[  191.487345][T11447] veth1_macvtap: left promiscuous mode
[  191.489165][T11447] veth0_macvtap: left promiscuous mode
[  191.491978][T11447] veth1_vlan: left promiscuous mode
[  191.494546][T11447] veth0_vlan: left promiscuous mode
[  191.553397][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  191.575825][T16226] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  191.622629][T11428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.625472][T11428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.648276][ T6414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.650776][ T6414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.759480][T16245] hpfs: Bad magic ... probably not HPFS
[  191.798784][T16249] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  191.803302][   T40] kauditd_printk_skb: 613 callbacks suppressed
[  191.803317][   T40] audit: type=1400 audit(1756086061.946:53206): avc:  denied  { create } for  pid=16248 comm="syz.0.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  191.814100][   T40] audit: type=1400 audit(1756086061.946:53207): avc:  denied  { write } for  pid=16248 comm="syz.0.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  191.822161][   T40] audit: type=1400 audit(1756086061.956:53208): avc:  denied  { read } for  pid=16248 comm="syz.0.3200" dev="nsfs" ino=4026534033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  191.828987][   T40] audit: type=1400 audit(1756086061.956:53209): avc:  denied  { open } for  pid=16248 comm="syz.0.3200" path="net:[4026534033]" dev="nsfs" ino=4026534033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  191.838145][   T40] audit: type=1400 audit(1756086061.956:53210): avc:  denied  { create } for  pid=16248 comm="syz.0.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  191.845042][   T40] audit: type=1400 audit(1756086061.956:53211): avc:  denied  { ioctl } for  pid=16248 comm="syz.0.3200" path="socket:[65996]" dev="sockfs" ino=65996 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  191.853217][   T40] audit: type=1400 audit(1756086061.956:53212): avc:  denied  { create } for  pid=16248 comm="syz.0.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  191.859507][   T40] audit: type=1400 audit(1756086061.956:53213): avc:  denied  { connect } for  pid=16248 comm="syz.0.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  191.866241][   T40] audit: type=1400 audit(1756086061.956:53214): avc:  denied  { read } for  pid=16248 comm="syz.0.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  191.874444][   T40] audit: type=1400 audit(1756086061.956:53215): avc:  denied  { read open } for  pid=16251 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  191.921111][ T3250] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  192.082740][ T3250] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  192.086286][ T3250] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  192.089407][ T3250] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  192.092488][ T3250] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.096564][T16240] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  192.100081][ T3250] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  192.251359][ T5976] Bluetooth: hci0: command tx timeout
[  192.311171][ T6034] usb 10-1: USB disconnect, device number 8
[  192.324321][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3202'.
[  192.373046][T16279] random: crng reseeded on system resumption
[  192.521357][ T3250] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0
[  192.524167][ T3250] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0
[  192.526422][T11430] Bluetooth: hci4: Frame reassembly failed (-84)
[  192.527016][ T3250] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0
[  192.534021][ T3250] hid-generic 0003:0004:0000.000A: hidraw1: USB HID v0.00 Device [syz0] on syz1
[  192.562837][T16311] fido_id[16311]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  192.659820][T16322] CIFS mount error: No usable UNC path provided in device string!
[  192.659820][T16322] 
[  192.663492][T16322] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  192.799336][T16333] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2)
[  192.925769][T16347] lo speed is unknown, defaulting to 1000
[  192.960365][T16347] xfrm0 speed is unknown, defaulting to 1000
[  193.433989][T16386] lo speed is unknown, defaulting to 1000
[  193.473222][T16386] xfrm0 speed is unknown, defaulting to 1000
[  193.790859][T16402] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  193.793588][T16402] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  193.798134][T16402] vhci_hcd vhci_hcd.0: Device attached
[  193.800887][T16406] vhci_hcd: unknown pdu 1
[  193.802768][T11428] vhci_hcd: stop threads
[  193.804548][T11428] vhci_hcd: release socket
[  193.806489][T11428] vhci_hcd: disconnect device
[  194.331487][ T5979] Bluetooth: hci0: command tx timeout
[  194.366166][T16419] __nla_validate_parse: 5 callbacks suppressed
[  194.366178][T16419] netlink: 120 bytes leftover after parsing attributes in process `syz.6.3247'.
[  194.413182][T11456] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  194.416006][T11456] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  194.418933][T11456] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  194.422146][T11456] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  194.427712][T16426] netem: incorrect ge model size
[  194.429422][T16426] netem: change failed
[  194.452720][T16433] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3253'.
[  194.510540][T16445] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3257'.
[  194.564426][T16453] ptm ptm15: ldisc open failed (-12), clearing slot 15
[  194.571598][ T5979] Bluetooth: hci4: command 0x1003 tx timeout
[  194.572003][ T5976] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  194.584879][T11428] bond0: (slave bond_slave_0): interface is now down
[  194.585610][T16459] netlink: 'syz.6.3262': attribute type 10 has an invalid length.
[  194.587051][T11428] bond0: (slave bond_slave_1): interface is now down
[  194.587324][T11428] bond0: now running without any active interface!
[  194.595237][T16459] syz_tun: entered promiscuous mode
[  194.602202][T16459] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  194.621592][T11428] bond0: (slave syz_tun): interface is now down
[  194.621678][T16461] IPv6: NLM_F_CREATE should be specified when creating new route
[  194.624299][T11428] bond0: now running without any active interface!
[  194.666290][T16472] devtmpfs: Unknown parameter ''
[  194.722492][T16488] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  194.765229][T16500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.769885][T16502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.783368][T16504] loop6: detected capacity change from 0 to 63
[  194.787635][T14691] Buffer I/O error on dev loop6, logical block 0, async page read
[  194.790461][T14691] Buffer I/O error on dev loop6, logical block 0, async page read
[  194.794152][T14691] Buffer I/O error on dev loop6, logical block 0, async page read
[  194.797112][T14691] Buffer I/O error on dev loop6, logical block 0, async page read
[  194.800100][T16487] batman_adv: batadv0: Adding interface: gretap1
[  194.800239][T14691] Buffer I/O error on dev loop6, logical block 0, async page read
[  194.802098][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3276'.
[  194.802273][T16487] batman_adv: batadv0: Interface activated: gretap1
[  194.848233][T16514] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  194.853709][T16514] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  194.855822][T16514] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  194.856701][T14691] Buffer I/O error on dev loop6, logical block 0, async page read
[  194.861926][T14691] Buffer I/O error on dev loop6, logical block 0, async page read
[  194.865349][T14691] Buffer I/O error on dev loop6, logical block 0, async page read
[  194.868599][T14691] Buffer I/O error on dev loop6, logical block 0, async page read
[  194.871495][T16514] vhci_hcd vhci_hcd.0: Device attached
[  194.879989][T16514] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(8)
[  194.882294][T16514] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  194.886196][T16514] vhci_hcd vhci_hcd.0: Device attached
[  194.889083][T14691] Buffer I/O error on dev loop6, logical block 0, async page read
[  194.890391][T16514] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(10)
[  194.895611][T16514] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  194.898324][T16514] vhci_hcd vhci_hcd.0: Device attached
[  194.900998][T16515] vhci_hcd: connection closed
[  194.901150][T11428] vhci_hcd: stop threads
[  194.901240][T16517] vhci_hcd: connection closed
[  194.904759][T11428] vhci_hcd: release socket
[  194.904968][T16519] vhci_hcd: connection closed
[  194.906298][T11428] vhci_hcd: disconnect device
[  194.911237][T11428] vhci_hcd: stop threads
[  194.913440][T11428] vhci_hcd: release socket
[  194.914924][T11428] vhci_hcd: disconnect device
[  194.916569][T11428] vhci_hcd: stop threads
[  194.918076][T11428] vhci_hcd: release socket
[  194.919489][T11428] vhci_hcd: disconnect device
[  195.255424][T16563] netlink: 'syz.2.3288': attribute type 4 has an invalid length.
[  195.259741][T16563] netlink: 'syz.2.3288': attribute type 4 has an invalid length.
[  195.266532][T16563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.479364][T16568] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  195.504526][T16578] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  195.507093][T16578] overlayfs: failed to set xattr on upper
[  195.509111][T16578] overlayfs: ...falling back to redirect_dir=nofollow.
[  195.512013][T16578] overlayfs: ...falling back to index=off.
[  195.514537][T16578] overlayfs: ...falling back to uuid=null.
[  195.516917][T16578] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  195.522176][T16578] overlay: ./file0 is not a directory
[  195.550529][T16585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16448 sclass=netlink_route_socket pid=16585 comm=syz.0.3295
[  195.871510][ T6034] usb 11-1: new low-speed USB device number 2 using dummy_hcd
[  195.983755][T16607] program syz.5.3303 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  196.043893][ T6034] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  196.047262][ T6034] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  196.050383][ T6034] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[  196.058427][ T6034] usb 11-1: string descriptor 0 read error: -22
[  196.061597][ T6034] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  196.065627][ T6034] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.072693][T16589] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  196.073439][T16614] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  196.119891][T16618] syzkaller1: entered promiscuous mode
[  196.121934][T16618] syzkaller1: entered allmulticast mode
[  196.145951][T16619] loop6: detected capacity change from 0 to 63
[  196.297405][T16628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.300251][T16628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.301612][T16627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.306511][T16627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.337095][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3310'.
[  196.468396][T16652] syzkaller1: entered promiscuous mode
[  196.470148][T16652] syzkaller1: entered allmulticast mode
[  196.595024][T16654] tracefs: Bad value for 'mode'
[  196.666670][T16658] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  196.734693][T16661] loop6: detected capacity change from 0 to 63
[  196.820347][   T40] kauditd_printk_skb: 535 callbacks suppressed
[  196.820358][   T40] audit: type=1400 audit(1756086066.945:53751): avc:  denied  { write } for  pid=16662 comm="syz.5.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  196.828819][   T40] audit: type=1400 audit(1756086066.945:53752): avc:  denied  { nlmsg_write } for  pid=16662 comm="syz.5.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  196.835464][   T40] audit: type=1400 audit(1756086066.955:53753): avc:  denied  { create } for  pid=16662 comm="syz.5.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  196.843386][   T40] audit: type=1400 audit(1756086066.955:53754): avc:  denied  { name_bind } for  pid=16662 comm="syz.5.3319" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  196.880745][ T6034] cdc_ncm 11-1:1.0: bind() failure
[  196.885320][ T6034] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found
[  196.888524][ T6034] cdc_ncm 11-1:1.1: bind() failure
[  196.891215][T16663] program syz.5.3319 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  196.892007][   T40] audit: type=1400 audit(1756086067.015:53755): avc:  denied  { read } for  pid=16662 comm="syz.5.3319" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  196.895131][ T6034] usb 11-1: USB disconnect, device number 2
[  196.897964][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3319'.
[  196.904077][   T40] audit: type=1400 audit(1756086067.015:53756): avc:  denied  { open } for  pid=16662 comm="syz.5.3319" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  196.920480][   T40] audit: type=1400 audit(1756086067.025:53757): avc:  denied  { read write } for  pid=16076 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  196.932109][   T40] audit: type=1400 audit(1756086067.025:53758): avc:  denied  { open } for  pid=16076 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  196.941931][   T40] audit: type=1400 audit(1756086067.025:53759): avc:  denied  { ioctl } for  pid=16076 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  196.951009][   T40] audit: type=1400 audit(1756086067.025:53760): avc:  denied  { read } for  pid=16662 comm="syz.5.3319" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  197.035036][T16684] syzkaller1: entered promiscuous mode
[  197.036838][T16684] syzkaller1: entered allmulticast mode
[  197.056211][T16682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3326'.
[  197.066232][T16682] team0: Device vlan2 is already an upper device of the team interface
[  197.143293][T16698] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3331'.
[  197.146223][T16698] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3331'.
[  197.151007][T16698] erspan0: entered promiscuous mode
[  197.153670][T16698] gretap0: entered promiscuous mode
[  197.233103][T16720] netlink: 'syz.0.3336': attribute type 10 has an invalid length.
[  197.238855][T16720] bond0: (slave a���): Enslaving as an active interface with an up link
[  197.296008][T16723] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3337'.
[  197.299724][T16723] openvswitch: netlink: Flow key attr not present in new flow.
[  197.324284][T16730] kAFS: No cell specified
[  197.648518][T16765] overlayfs: missing 'lowerdir'
[  197.877389][T16785] random: crng reseeded on system resumption
[  197.902918][T16789] bridge1: entered promiscuous mode
[  198.202072][  T141] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  198.354134][  T141] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.357844][  T141] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.360923][  T141] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  198.365597][  T141] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  198.368528][  T141] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.373480][  T141] usb 10-1: config 0 descriptor??
[  198.383214][T16823] netlink: 'syz.0.3368': attribute type 1 has an invalid length.
[  198.397652][T16823] 8021q: adding VLAN 0 to HW filter on device bond3
[  198.407713][T16823] bond3: (slave ip6gretap1): making interface the new active one
[  198.411094][T16823] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  198.431545][T16831] netlink: 'syz.6.3370': attribute type 83 has an invalid length.
[  198.443048][T16835] netlink: 'syz.0.3371': attribute type 2 has an invalid length.
[  198.448826][T16835] netlink: 'syz.0.3371': attribute type 2 has an invalid length.
[  198.509743][T16843] tmpfs: Unknown parameter '18446744073709551615'
[  198.569229][T16850] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.638573][T16850] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.697030][T16850] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.754928][T16850] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.773791][T16863] netlink: 'syz.2.3381': attribute type 16 has an invalid length.
[  198.776406][T16863] netlink: 'syz.2.3381': attribute type 17 has an invalid length.
[  198.783325][  T141] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  198.830310][T11434] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.834543][T11434] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.840924][T11434] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.846455][T11434] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.046761][T16869] mkiss: ax0: crc mode is auto.
[  199.137334][T16879] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.163799][T16881] tipc: Started in network mode
[  199.165790][T16881] tipc: Node identity ac1414aa, cluster identity 4711
[  199.168345][T16881] tipc: Enabled bearer <udp:s>, priority 10
[  199.170912][T16881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=16881 comm=syz.2.3386
[  200.282221][ T6051] tipc: Node number set to 2886997162
[  201.039757][T16887] overlay: Unknown parameter 'appraise'
[  201.242765][ T6158] usb 10-1: USB disconnect, device number 9
[  201.532455][ T5976] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  201.535796][ T5976] Bluetooth: hci1: Injecting HCI hardware error event
[  201.537981][ T5976] Bluetooth: hci1: hardware error 0x00
[  204.334163][   T40] kauditd_printk_skb: 310 callbacks suppressed
[  204.334175][   T40] audit: type=1400 audit(1756086074.475:54071): avc:  denied  { egress } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::1:ff00:1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  204.344842][   T40] audit: type=1400 audit(1756086074.475:54072): avc:  denied  { sendto } for  pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::1:ff00:1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  213.996810][   T40] audit: type=1400 audit(1756086084.133:54073): avc:  denied  { execute } for  pid=16891 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  214.010549][   T40] audit: type=1400 audit(1756086084.133:54074): avc:  denied  { execute_no_trans } for  pid=16891 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  214.080055][   T40] audit: type=1400 audit(1756086084.213:54075): avc:  denied  { create } for  pid=16892 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  214.087327][   T40] audit: type=1400 audit(1756086084.213:54076): avc:  denied  { read write } for  pid=16892 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  214.087479][ T5975] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  214.096357][   T40] audit: type=1400 audit(1756086084.213:54077): avc:  denied  { open } for  pid=16892 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  214.099919][ T5975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  214.110228][   T40] audit: type=1400 audit(1756086084.223:54078): avc:  denied  { ioctl } for  pid=16892 comm="syz-executor" path="socket:[68545]" dev="sockfs" ino=68545 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  214.111117][ T5975] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  214.124441][ T5975] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  214.127210][ T5975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  214.131102][   T40] audit: type=1400 audit(1756086084.263:54079): avc:  denied  { read } for  pid=16892 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  214.138918][   T40] audit: type=1400 audit(1756086084.263:54080): avc:  denied  { open } for  pid=16892 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  214.147079][   T40] audit: type=1400 audit(1756086084.263:54081): avc:  denied  { mounton } for  pid=16892 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  215.097984][ T5973] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  215.100542][ T5973] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  215.102958][ T5973] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  215.105795][ T5973] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  215.108296][ T5973] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  215.128583][ T5968] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  215.131928][ T5968] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  215.135258][ T5968] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  215.138756][ T5968] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  215.142720][ T5968] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  216.050873][ T1424] ==================================================================
[  216.053426][ T1424] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630
[  216.055675][ T1424] Read of size 1 at addr ffff8880561a1490 by task aoe_tx0/1424
[  216.058760][ T1424] 
[  216.060506][ T1424] CPU: 1 UID: 0 PID: 1424 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) 
[  216.060530][ T1424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  216.060541][ T1424] Call Trace:
[  216.060549][ T1424]  <TASK>
[  216.060556][ T1424]  dump_stack_lvl+0x116/0x1f0
[  216.060589][ T1424]  print_report+0xcd/0x630
[  216.060610][ T1424]  ? __virt_addr_valid+0x81/0x610
[  216.060632][ T1424]  ? __phys_addr+0xe8/0x180
[  216.060656][ T1424]  ? handle_tx+0x5dc/0x630
[  216.060679][ T1424]  kasan_report+0xe0/0x110
[  216.060698][ T1424]  ? handle_tx+0x5dc/0x630
[  216.060724][ T1424]  handle_tx+0x5dc/0x630
[  216.060750][ T1424]  dev_hard_start_xmit+0x97/0x740
[  216.060779][ T1424]  __dev_queue_xmit+0xa46/0x4490
[  216.060806][ T1424]  ? finish_task_switch.isra.0+0x221/0xc10
[  216.060828][ T1424]  ? rcu_is_watching+0x12/0xc0
[  216.060851][ T1424]  ? __pfx___dev_queue_xmit+0x10/0x10
[  216.060875][ T1424]  ? __schedule+0x11a3/0x5de0
[  216.060895][ T1424]  ? __smp_call_single_queue+0x161/0x2f0
[  216.060931][ T1424]  ? __pfx_select_task_rq_fair+0x10/0x10
[  216.060956][ T1424]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  216.060976][ T1424]  ? rcu_is_watching+0x12/0xc0
[  216.060997][ T1424]  ? ref_tracker_free+0x37c/0x830
[  216.061019][ T1424]  ? do_raw_spin_lock+0x12c/0x2b0
[  216.061042][ T1424]  ? rcu_is_watching+0x12/0xc0
[  216.061063][ T1424]  ? rcu_is_watching+0x12/0xc0
[  216.061086][ T1424]  tx+0xcc/0x190
[  216.061103][ T1424]  ? __pfx_tx+0x10/0x10
[  216.061117][ T1424]  kthread+0x1e4/0x3e0
[  216.061144][ T1424]  ? __pfx_kthread+0x10/0x10
[  216.061169][ T1424]  ? __pfx_default_wake_function+0x10/0x10
[  216.061191][ T1424]  ? __kthread_parkme+0x19e/0x250
[  216.061216][ T1424]  ? __pfx_kthread+0x10/0x10
[  216.061241][ T1424]  kthread+0x3c2/0x780
[  216.061257][ T1424]  ? __pfx_kthread+0x10/0x10
[  216.061273][ T1424]  ? ret_from_fork+0x25/0x6f0
[  216.061290][ T1424]  ? rcu_is_watching+0x12/0xc0
[  216.061311][ T1424]  ? __pfx_kthread+0x10/0x10
[  216.061328][ T1424]  ret_from_fork+0x5d7/0x6f0
[  216.061344][ T1424]  ? __pfx_kthread+0x10/0x10
[  216.061361][ T1424]  ret_from_fork_asm+0x1a/0x30
[  216.061387][ T1424]  </TASK>
[  216.061394][ T1424] 
[  216.129618][ T5980] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  216.130413][ T1424] Allocated by task 14075:
[  216.131700][ T5980] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  216.133671][ T1424]  kasan_save_stack+0x33/0x60
[  216.136053][ T5980] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  216.137568][ T1424]  kasan_save_track+0x14/0x30
[  216.139958][ T5980] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  216.141599][ T1424]  __kasan_kmalloc+0xaa/0xb0
[  216.144138][ T5980] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  216.145655][ T1424]  alloc_tty_struct+0x96/0x8c0
[  216.150811][ T1424]  tty_init_dev.part.0+0x1e/0x500
[  216.152436][ T1424]  tty_open+0xa50/0xf90
[  216.153775][ T1424]  chrdev_open+0x231/0x6a0
[  216.155183][ T1424]  do_dentry_open+0x982/0x1530
[  216.156665][ T1424]  vfs_open+0x82/0x3f0
[  216.157948][ T1424]  path_openat+0x1de4/0x2cb0
[  216.159396][ T1424]  do_filp_open+0x20b/0x470
[  216.160857][ T1424]  do_sys_openat2+0x11b/0x1d0
[  216.162358][ T1424]  __x64_sys_openat+0x174/0x210
[  216.163944][ T1424]  do_syscall_64+0xcd/0x4c0
[  216.165406][ T1424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.167292][ T1424] 
[  216.168076][ T1424] Freed by task 3250:
[  216.169350][ T1424]  kasan_save_stack+0x33/0x60
[  216.170892][ T1424]  kasan_save_track+0x14/0x30
[  216.172444][ T1424]  kasan_save_free_info+0x3b/0x60
[  216.174037][ T1424]  __kasan_slab_free+0x60/0x70
[  216.175577][ T1424]  kfree+0x2b4/0x4d0
[  216.176856][ T1424]  process_one_work+0x9cc/0x1b70
[  216.178491][ T1424]  worker_thread+0x6c8/0xf10
[  216.179980][ T1424]  kthread+0x3c2/0x780
[  216.181751][ T1424]  ret_from_fork+0x5d7/0x6f0
[  216.183281][ T1424]  ret_from_fork_asm+0x1a/0x30
[  216.185234][ T1424] 
[  216.186208][ T1424] Last potentially related work creation:
[  216.188054][ T1424]  kasan_save_stack+0x33/0x60
[  216.189543][ T1424]  kasan_record_aux_stack+0xa7/0xc0
[  216.191246][ T1424]  insert_work+0x36/0x230
[  216.192637][ T1424]  __queue_work+0x97e/0x1160
[  216.194064][ T1424]  queue_work_on+0x1a4/0x1f0
[  216.195530][ T1424]  release_tty+0x4de/0x5d0
[  216.196841][ T1424]  tty_release_struct+0xb7/0xe0
[  216.198381][ T1424]  tty_release+0xe2d/0x1430
[  216.199824][ T1424]  __fput+0x3ff/0xb70
[  216.201124][ T1424]  task_work_run+0x150/0x240
[  216.202599][ T1424]  do_exit+0x86f/0x2bf0
[  216.203871][ T1424]  do_group_exit+0xd3/0x2a0
[  216.205311][ T1424]  get_signal+0x2673/0x26d0
[  216.206769][ T1424]  arch_do_signal_or_restart+0x8f/0x7d0
[  216.208468][ T1424]  exit_to_user_mode_loop+0x84/0x110
[  216.210120][ T1424]  do_syscall_64+0x3f6/0x4c0
[  216.211555][ T1424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.213419][ T1424] 
[  216.214169][ T1424] The buggy address belongs to the object at ffff8880561a1000
[  216.214169][ T1424]  which belongs to the cache kmalloc-cg-2k of size 2048
[  216.218558][ T1424] The buggy address is located 1168 bytes inside of
[  216.218558][ T1424]  freed 2048-byte region [ffff8880561a1000, ffff8880561a1800)
[  216.222872][ T1424] 
[  216.223638][ T1424] The buggy address belongs to the physical page:
[  216.225700][ T1424] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x561a0
[  216.228561][ T1424] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  216.231720][ T1424] memcg:ffff888034c3d181
[  216.233057][ T1424] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  216.235433][ T1424] page_type: f5(slab)
[  216.236747][ T1424] raw: 00fff00000000040 ffff88801b84c140 dead000000000100 dead000000000122
[  216.239393][ T1424] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888034c3d181
[  216.242027][ T1424] head: 00fff00000000040 ffff88801b84c140 dead000000000100 dead000000000122
[  216.244632][ T1424] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888034c3d181
[  216.248105][ T1424] head: 00fff00000000003 ffffea0001586801 00000000ffffffff 00000000ffffffff
[  216.250833][ T1424] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  216.253640][ T1424] page dumped because: kasan: bad access detected
[  216.255669][ T1424] page_owner tracks the page as allocated
[  216.257448][ T1424] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7484, tgid 7483 (syz.1.431), ts 73829603045, free_ts 72507217564
[  216.264399][ T1424]  post_alloc_hook+0x1c0/0x230
[  216.265866][ T1424]  get_page_from_freelist+0x132b/0x38e0
[  216.267624][ T1424]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  216.269423][ T1424]  alloc_pages_mpol+0x1fb/0x550
[  216.270973][ T1424]  new_slab+0x247/0x330
[  216.272318][ T1424]  ___slab_alloc+0xcf2/0x1740
[  216.273814][ T1424]  __slab_alloc.constprop.0+0x56/0xb0
[  216.275537][ T1424]  __kmalloc_cache_noprof+0xfb/0x3e0
[  216.277231][ T1424]  bpf_prog_alloc_no_stats+0x120/0x5d0
[  216.278976][ T1424]  bpf_prog_alloc+0x3b/0x230
[  216.280483][ T1424]  bpf_prog_load+0x160e/0x2490
[  216.282032][ T1424]  __sys_bpf+0x4a3f/0x4de0
[  216.283466][ T1424]  __x64_sys_bpf+0x78/0xc0
[  216.284904][ T1424]  do_syscall_64+0xcd/0x4c0
[  216.286345][ T1424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.288238][ T1424] page last free pid 7345 tgid 7345 stack trace:
[  216.290261][ T1424]  __free_frozen_pages+0x7d5/0x10f0
[  216.291944][ T1424]  vfree+0x1fd/0xb50
[  216.293195][ T1424]  vb2_vmalloc_put+0x7b/0xc0
[  216.294676][ T1424]  __vb2_buf_mem_free+0x15a/0x2d0
[  216.296289][ T1424]  __vb2_queue_free+0x7ee/0xa30
[  216.297830][ T1424]  vb2_core_queue_release+0x70/0x190
[  216.299523][ T1424]  v4l2_m2m_ctx_release+0x2a/0x40
[  216.301124][ T1424]  vicodec_release+0x9c/0x150
[  216.302637][ T1424]  v4l2_release+0x232/0x460
[  216.304105][ T1424]  __fput+0x3ff/0xb70
[  216.305412][ T1424]  task_work_run+0x150/0x240
[  216.306875][ T1424]  exit_to_user_mode_loop+0xeb/0x110
[  216.308463][ T1424]  do_syscall_64+0x3f6/0x4c0
[  216.309918][ T1424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.312515][ T1424] 
[  216.313266][ T1424] Memory state around the buggy address:
[  216.315104][ T1424]  ffff8880561a1380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  216.317629][ T1424]  ffff8880561a1400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  216.320114][ T1424] >ffff8880561a1480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  216.322840][ T1424]                          ^
[  216.324304][ T1424]  ffff8880561a1500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  216.326882][ T1424]  ffff8880561a1580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  216.329432][ T1424] ==================================================================
[  216.332105][    C1] vkms_vblank_simulate: vblank timer overrun
[  216.334035][ T1424] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  216.336316][ T1424] CPU: 1 UID: 0 PID: 1424 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) 
[  216.339153][ T1424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  216.342604][ T1424] Call Trace:
[  216.343679][ T1424]  <TASK>
[  216.344623][ T1424]  dump_stack_lvl+0x3d/0x1f0
[  216.346081][ T1424]  vpanic+0x6e8/0x7a0
[  216.347357][ T1424]  ? __pfx_vpanic+0x10/0x10
[  216.348752][ T1424]  ? __pfx_vprintk_emit+0x10/0x10
[  216.350352][ T1424]  ? handle_tx+0x5dc/0x630
[  216.351818][ T1424]  panic+0xca/0xd0
[  216.353018][ T1424]  ? __pfx_panic+0x10/0x10
[  216.354432][ T1424]  ? check_panic_on_warn+0x1f/0xb0
[  216.356059][ T1424]  check_panic_on_warn+0xab/0xb0
[  216.357630][ T1424]  end_report+0x107/0x170
[  216.359217][ T1424]  kasan_report+0xee/0x110
[  216.360700][ T1424]  ? handle_tx+0x5dc/0x630
[  216.362365][ T1424]  handle_tx+0x5dc/0x630
[  216.363776][ T1424]  dev_hard_start_xmit+0x97/0x740
[  216.365490][ T1424]  __dev_queue_xmit+0xa46/0x4490
[  216.367152][ T1424]  ? finish_task_switch.isra.0+0x221/0xc10
[  216.369040][ T1424]  ? rcu_is_watching+0x12/0xc0
[  216.370727][ T1424]  ? __pfx___dev_queue_xmit+0x10/0x10
[  216.372452][ T1424]  ? __schedule+0x11a3/0x5de0
[  216.373955][ T1424]  ? __smp_call_single_queue+0x161/0x2f0
[  216.376197][ T1424]  ? __pfx_select_task_rq_fair+0x10/0x10
[  216.377998][ T1424]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  216.379710][ T1424]  ? rcu_is_watching+0x12/0xc0
[  216.381250][ T1424]  ? ref_tracker_free+0x37c/0x830
[  216.382843][ T1424]  ? do_raw_spin_lock+0x12c/0x2b0
[  216.384393][ T1424]  ? rcu_is_watching+0x12/0xc0
[  216.385903][ T1424]  ? rcu_is_watching+0x12/0xc0
[  216.387413][ T1424]  tx+0xcc/0x190
[  216.388528][ T1424]  ? __pfx_tx+0x10/0x10
[  216.389843][ T1424]  kthread+0x1e4/0x3e0
[  216.391198][ T1424]  ? __pfx_kthread+0x10/0x10
[  216.392682][ T1424]  ? __pfx_default_wake_function+0x10/0x10
[  216.394535][ T1424]  ? __kthread_parkme+0x19e/0x250
[  216.396103][ T1424]  ? __pfx_kthread+0x10/0x10
[  216.397569][ T1424]  kthread+0x3c2/0x780
[  216.398911][ T1424]  ? __pfx_kthread+0x10/0x10
[  216.400396][ T1424]  ? ret_from_fork+0x25/0x6f0
[  216.401902][ T1424]  ? rcu_is_watching+0x12/0xc0
[  216.403421][ T1424]  ? __pfx_kthread+0x10/0x10
[  216.404919][ T1424]  ret_from_fork+0x5d7/0x6f0
[  216.406376][ T1424]  ? __pfx_kthread+0x10/0x10
[  216.407868][ T1424]  ret_from_fork_asm+0x1a/0x30
[  216.409381][ T1424]  </TASK>
[  216.411111][ T1424] Kernel Offset: disabled
[  216.412496][ T1424] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:03:18  Registers:
info registers vcpu 0

CPU#0
RAX=000000000014d95c RBX=0000000000000000 RCX=ffffffff8b939c29 RDX=ffffed100d486656
RSI=ffffffff8c162800 RDI=ffffffff81913311 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08
R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000
R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab3f90 R15=0000000000000000
RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d66bc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f0802774030 CR3=000000000e380000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9bcc80df20cdf314 fa9452027575ec51
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4cc5a0a32ec7e73 9af8b897bcca9810
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 707763b129040f6e 40ddbd5b8ad19355
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 48900cfee75d3485 46f2c3b62656aee6
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000200
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008300000000 f9d3ac38fc8b5f5c
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000083 0000008300000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000830500dbc3 f9a04cd2000a1d16
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0091f4fcfc915808 0000008370853496
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64a6b208f1378a7f 285a539c8815edb5
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b98a0573ba0fb023 802e588ad46f53ed
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85643805 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc9000706f458
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000032343154
R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b10dfe0 R15=ffffffff856437a0
RIP=ffffffff8564382f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d67bc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f8fdf361f98 CR3=000000000e380000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000025dfdbff 0070bd2a04000011
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0c8b2276
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0c8b2276 00007ffe0c8b227c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc65d412e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc65d412e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc65d412e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc65d412e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc65d412ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc65d412fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 021e51e87f103ea1 f764e0d9d43a759c dc3f2edb464db2d1 f3e6afc497eaa4a2
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc65e0ed100 00007fc65d587460 00007fc65d580004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc65d5874b8 00007fc65d5874b0 00007fc65d5874a8 00007fc65d5874a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffffea00043d0840 RCX=ffffea00043d0840 RDX=00007f0801f3d000
RSI=ffff88811585a9e8 RDI=ffff88805f9c5900 RBP=dffffc0000000000 RSP=ffffc9000d8c7640
R8 =8000000000000027 R9 =0000000000000000 R10=000000011585a067 R11=0000000000000001
R12=ffff88805f9c5900 R13=ffff88811585a9e8 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81bb9130 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555555c12500 ffffffff 00c00000
GS =0000 ffff8880d68bc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f08027b6038 CR3=00000000456fc000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08032ed100 00007f0802787460 00007f0802787478 00007f08027874c0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000001 RBX=ffff88806a541ec0 RCX=ffffffff81af8c51 RDX=ffff88802baf8000
RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90003bd72a0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=dffffc0000000000 R13=ffffed100d4a83d9 R14=0000000000000001 R15=0000000000000001
RIP=ffffffff81bb8ac1 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d69bc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007efd856e5000 CR3=000000000e380000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b28387d20
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000030000000f 0000000200000021
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000012
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000016
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557371c1b1 000055557371b8e0
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001800302900800 0410000410000602 000000000000000b 0000555000000001
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff04038003 0180040580044808 000000010000001b 08060a0100000001
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000000482808 0980030980040880 0000000200000021 0800039000000001
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000047420cc33e 0809b00300080009 000000030000000f 0800680500000001
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0301901000089003 1000148002001800 0000000400000012 01000a8000000001
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000010001 0120100004800438 1000060102880808 0004980300000007
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9003000800000000 0100000408060480 0308028804050280 1000028000000006
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ac00100000000000 0000000806060168 e002080003e00300 0000000500000007
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03c0030200000001 0301901000089003 1000148002001800 0000000400000012
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6220303238393033 6239666666666666 66660a37322e7965 6b5f5f2062203065
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656b5f5f20622030 3638393033623966 666666666666660a 302e79656b5f5f20
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 660a372e79656b5f 5f20622030613839 3033623966666666 666666660a332e79
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2062203034666430 3362396666666666 6666660a64695f74 656e5f656b616873
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6530336239666666 66666666660a6c62 7468736168725f65 6b616873646e6168
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6220303031653033 6239666666666666 66660a322e79656b 5f5f206220306330
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6239666666666666 66660a656e6f645f 726464615f77665f 736f696269637020