last executing test programs:

45.110013233s ago: executing program 0 (id=90):
r0 = socket(0x1, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@udp=r0, 0x2}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'})
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="20d36099b122b3235355150f7c140000001000010000000000000000000700000a20000000030a0fdb00000000000000000a0020050900030073797a302fcd0000140000001100010000000000000000000100000a67facfcfa2d6077b49f78af0d070d6c94490a4a9afbfca90eb47a3164c97fc9c37853b1f6b78524e307c7a3e2d444abf4f9620e0c6"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24008850)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e1f, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000380)=@gcm_256={{0x7}, "0000040000000008", "e8582491a0c4050000000000f6542a9b68000000000b0000003967d2daa45b4e", '\x00', "89a06a06000000fd"}, 0x38)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0xc0}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x141000, 0xc0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000003c0)={0x2c, @rand_addr=0x64010102, 0x4e25, 0x4, 'lblc\x00', 0x6, 0xf, 0x7c}, 0x2c)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt(r7, 0x1, 0x7, 0x0, &(0x7f0000000980))
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
r8 = eventfd(0x0)
ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000780)={0x1, r8})
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000240)={0x0, "fe4bc2070c8230d64a620097e2e1ba0f1a42e3cdf62cae9e6917621a41f878718cb22ae0bbb7e638ac26b457037d91397c1455e56b87562a90ae102a79d4d8bf", {0xff, 0xfffffffffffffffd}})
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f007, 0x3})
r10 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x12, r10, 0x100000000)

44.982442225s ago: executing program 0 (id=92):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r1, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)
socket$nl_sock_diag(0x10, 0x3, 0x4)

44.982255377s ago: executing program 0 (id=93):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14)
syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x64, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[], {0x0, 0x4f22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15030dcafcdaca76", "e24fcb751eeaa8add0b2f075633f64c7", {"249908bc00000000000000002000", "51f3b6750c654f5d43fbb564be51ddae"}}}}}}}}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x521}, 0x57)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r6=>0x0, 0x4, 0x8, 0x5, 0x16e5f729, 0x7, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x8, 0x40, 0xffffffff, 0x8000}})
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r2, 0x1d, 0x1, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], <r7=>0x0}, 0x40)
r8 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r6, 0x25, 0x0, @val=@tcx={@void, @value=r8, @void, @void, r7}}, 0x1c)
r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r10, 0x80489439, &(0x7f0000000180))
ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000000)=@x86={0xf6, 0x89, 0x2b, 0x0, 0x5d, 0x1, 0xb, 0xd2, 0x0, 0x9, 0xf8, 0xa, 0x0, 0xf, 0x3, 0x9, 0x9, 0xa0, 0x7, '\x00', 0x0, 0x4})
ioctl$KVM_RUN(r9, 0xae80, 0x0)

44.742798741s ago: executing program 0 (id=97):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0xd031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x86ae02ee59647494)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c040020", @ANYRES16=r3, @ANYBLOB="010700000000000000002e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000000801381ce08800000000000a00000805000300060000000900010073797a31000000000900010073797a3100000000060002406558000006000240891700000c000480080006400000020b"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000f40)={0x0, 0x4bf, "949469920e610cbe11c74d0b529e016f05bf0e17bc7e8d72cec26ea0247756bbd85636852c712928c35151d56134bcb499c623191f4a7a09c4009431fb31a3c8ffb71cc161ddb3d2338ee19eba1c9619e884d0fe3e35bda64838d4489469c7d46d5a31c0ac5a56b7363280c4aff9a551e7000f2b9385bb518045791737b87de36a187ca7171ac87b64a673bc211c95ee7464617155947afd0d6b61e6e8fcadcb1f92b4c40b2df6e9ade88b75c0c05d96e6f014ca59e609ee21037f19bbec2bdc65789084fd49a3576a20b1d53ccc51307929a5326e02749d08f84ecbe28a28addd49d17874f8ccad9254395132d23ac2a44b109405b84e00701d20294cb735078d5183636b0bb044ab00057d11f8102f076504ea5e34c3b14795e7baf7dd5911e23d2f176f91a786a843746269b7e68ee0ed2bd2dcf1777fec09f1abf46c3c2966b5262dc3d16a297d3d98e7bd9506ca2fab4bb0276f5ef4f490357726fba9ee979b236cd47d7281e833a1454af2810cdc72a793957c5f677fff9e9cd9b91f8fe77a5ff8a8b67a74292f53acf2ea78b5cd319eaf48aef35cbd6fa3fbedb21b24b2f313fbe7b2695de713712201e46f8bd2cf9bf281bd5ce31a27899e5129ae47de88027fb14aab727d7fe026b220f3187a3bba403557fc17740ed4738f6b44890cac121e81859b8de52db2104803e16083a6f84b0ad7e28e0ab4031901c2b2ae0919b3abbdf914c54b21353ed4ecf353cb17b6902b7e8a5312df321212a86a731f5c3d790a7568283cffcb8bd45775df1ef8238e1b4597733b0d2def31fdfb65be7d9b9af0bc39cbb0e386f0863ad0b09e53168d50bab405422b423ded50739a5f993e5a11332e70bb419b8716286aafada6b3dfea62f0414357d4c5bda0ad5a6212f8d404bfa422b8d0d500d1966eb8560b947e4223c03e74bd614ede96b2776deaf3ff8dfc8127ea9f0d5d1783cc04a982f15231a558b296bc5b068cc8b9dde50390474cd77592159bec3998f67a9648edb395056c9c2bb7f69718df30035e31f7e3d15afed261bee7cbf590245ab9ee6d1d68b2fc82a8f847149a0cf5cf00f2386b047800c190779529c3da5f59989e1de30d91c7e735c8cb3bf12b00c959cc5b9bb3dacfd6f573c4b56fde64d8e49dc58fab7c7e1370208bcbad15fc055328f0719787e7f32ac7745f60c26bbfa0b0ce12a0523fbdaae8d10dd2a8bc425d0121b6829900fe5f0548a95436fe7f7b0064839c8ed5e57605a2fb9264703a4decddbe227091e89984b7ba3d7ca42f8d478ee4d4c67b3f912baa7cc96c0dbfd56e7d38574fad4c3d7c0da51ee4e561e223b99a1a6fecf075b71f173459c17163a0cceec6d0a42641e63702a6f80dd4954f8d9726c4ab3ff492b437c5f3b8866211a7e65b4c7fe0c65b0aa28a0357e6d190cfa72c804e5a90d161e2b8a7ac490cad0269051a1c596abc6a69167e7c80a2d08d2becc1d5e3dcb701347aed89a73720a09d95583c3964b5a9f1ed121e194495869bd10ad7e64a04473844da23eee590afe31031180bf89ed39b13b1f75c89fa203b7b6f6976fedecb8e61237419c9b96479d09a660409cb1e10e2bf9c100d74b7b1e1002354113f385abbfca0719fd83edd8d12f7fd2176d02ecfeada4f5846106cd967070523a6b2a7eb3b7809ee0be328d591ff47ef75b29a02043cbd5d28850a891204b38f69bf4b926f587f"}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_RUN(r11, 0xae80, 0x0)
bind$802154_raw(r8, &(0x7f0000000180)={0x24, @short={0x2, 0x3}}, 0x14)

44.34167189s ago: executing program 0 (id=108):
syz_open_procfs(0x0, &(0x7f0000002180)='net/dev\x00') (async)
r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/dev\x00')
preadv(r0, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0)
mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x204001, 0x0) (async)
mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x204001, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001fc0), r1)
sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01ac36d06494", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x8800)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8})
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41b28, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4054)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=<r8=>0x0)
stat(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) (async)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000480)={0x0, <r10=>0x0}, &(0x7f00000004c0)=0xc)
mount$overlay(0x0, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380), 0x19, &(0x7f0000000500)={[{@redirect_dir_off}, {@index_off}, {@redirect_dir_nofollow}, {@default_permissions}, {@redirect_dir_off}], [{@fowner_lt={'fowner<', r9}}, {@euid_lt={'euid<', r10}}]})
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)=<r11=>0x0)
unshare(0x6a040000) (async)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier')
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0)
r12 = socket(0xa, 0x1, 0x0)
getsockopt$inet_int(r12, 0x0, 0x22, 0x0, 0x0)
getsockopt$EBT_SO_GET_INFO(r12, 0x0, 0x80, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [0xd2, 0xffffffffffffffff, 0xffffffffffffb5b3, 0x3a8e5b6d, 0x80000000, 0x10000000000008]}, &(0x7f0000000080)=0x78) (async)
getsockopt$EBT_SO_GET_INFO(r12, 0x0, 0x80, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [0xd2, 0xffffffffffffffff, 0xffffffffffffb5b3, 0x3a8e5b6d, 0x80000000, 0x10000000000008]}, &(0x7f0000000080)=0x78)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x300, 0x70bd29, 0x50f, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4044c40)

44.080372434s ago: executing program 0 (id=113):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)={0x14, 0x1, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8000}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4080)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x4}, 0x38)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x18, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x154}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x46, &(0x7f0000000280)=""/70, 0xc1100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x10, 0x4, 0x800}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x3, 0x2, 0xc, 0x7}, {0x2, 0x3, 0xf, 0x1}, {0x3, 0x3, 0x2, 0x8}, {0x4, 0x4, 0x10, 0xa}], 0x10, 0x3}, 0x94)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'tunl0\x00', &(0x7f00000006c0)={'erspan0\x00', <r7=>0x0, 0x40, 0x40, 0x5, 0x3, {{0x15, 0x4, 0x2, 0x4, 0x54, 0x65, 0x0, 0x3, 0x6, 0x0, @private=0xa010101, @private=0xa010101, {[@generic={0x89, 0x7, "4c87bcef8f"}, @ssrr={0x89, 0x13, 0x37, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty]}, @end, @timestamp_prespec={0x44, 0x24, 0x40, 0x3, 0x0, [{@rand_addr=0x64010102, 0x8}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010100, 0x5}]}]}}}}})
r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$qrtrtun(r8, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f00000007c0)=""/199, 0xc7, <r9=>0x0, &(0x7f00000008c0)=""/181, 0xb5}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000580)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x8d, &(0x7f0000000600)=""/141, 0x41100, 0x45, '\x00', r7, 0x1b, r8, 0x8, &(0x7f0000000780)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r9, 0x0, 0x4, 0x0, &(0x7f0000000a00)=[{0x3, 0x5, 0x6, 0x8}, {0x2, 0x3, 0xa, 0x9}, {0x7fffffff, 0x5, 0x7}, {0x0, 0x1, 0x6, 0x1}], 0x10, 0x9}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x7d281, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0xfffffed7, 0x1, r5}]}, @IFLA_GROUP={0x8, 0x1b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0xbd9155af01ef1cc7)
copy_file_range(r0, 0x0, r5, &(0x7f0000000b00)=0x60000000, 0x1, 0x0)

29.051607442s ago: executing program 32 (id=113):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)={0x14, 0x1, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8000}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4080)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x4}, 0x38)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x18, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x154}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x46, &(0x7f0000000280)=""/70, 0xc1100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x10, 0x4, 0x800}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x3, 0x2, 0xc, 0x7}, {0x2, 0x3, 0xf, 0x1}, {0x3, 0x3, 0x2, 0x8}, {0x4, 0x4, 0x10, 0xa}], 0x10, 0x3}, 0x94)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'tunl0\x00', &(0x7f00000006c0)={'erspan0\x00', <r7=>0x0, 0x40, 0x40, 0x5, 0x3, {{0x15, 0x4, 0x2, 0x4, 0x54, 0x65, 0x0, 0x3, 0x6, 0x0, @private=0xa010101, @private=0xa010101, {[@generic={0x89, 0x7, "4c87bcef8f"}, @ssrr={0x89, 0x13, 0x37, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty]}, @end, @timestamp_prespec={0x44, 0x24, 0x40, 0x3, 0x0, [{@rand_addr=0x64010102, 0x8}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010100, 0x5}]}]}}}}})
r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$qrtrtun(r8, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f00000007c0)=""/199, 0xc7, <r9=>0x0, &(0x7f00000008c0)=""/181, 0xb5}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000580)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x8d, &(0x7f0000000600)=""/141, 0x41100, 0x45, '\x00', r7, 0x1b, r8, 0x8, &(0x7f0000000780)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r9, 0x0, 0x4, 0x0, &(0x7f0000000a00)=[{0x3, 0x5, 0x6, 0x8}, {0x2, 0x3, 0xa, 0x9}, {0x7fffffff, 0x5, 0x7}, {0x0, 0x1, 0x6, 0x1}], 0x10, 0x9}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x7d281, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0xfffffed7, 0x1, r5}]}, @IFLA_GROUP={0x8, 0x1b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0xbd9155af01ef1cc7)
copy_file_range(r0, 0x0, r5, &(0x7f0000000b00)=0x60000000, 0x1, 0x0)

29.001627072s ago: executing program 2 (id=272):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x359}, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0)

29.001218562s ago: executing program 2 (id=273):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
userfaultfd(0x40002)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setns(r3, 0x24020000)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0)
clock_nanosleep(0x1, 0x1, &(0x7f0000000280), 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x2, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})

28.872451703s ago: executing program 2 (id=274):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0)
ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000080))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000140)=0xfff, 0x4)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x178, 0x30, 0x400, 0x70bd29, 0x0, {}, [{0x164, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x130, 0x1c, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x40}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0xe3, 0x6, "ab3a43a4e6a1be647c3b81cd717d017d29807b6d941780e19716802741c2044f3275f06aed184182a99224e1e64d292d4522f0fb5e3357b41884d4d7d2131229189e2183c30e5170c2b6d58d212e9969454e66d3b19e6ee2b6e5ae9a36a2e21ce4f5d2e9e23f0eed1a641fdca8c5d0e61456e8b2efcb437d6f139c5bbd2db1859c5a22cbff16837bd90918ae9ca5c8e6dab171a83d591a511da3a467b252f877c4b3eda7a3b9891287736631f21827162536ffc6d8f77d72ed12fc2ee75449a7d63c4a21371b2dcfbd163f93c934ee77aeee68a6dbfffc861b23012d27b257"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x178}}, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000200))
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) (async)
ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000080)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000140)=0xfff, 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x178, 0x30, 0x400, 0x70bd29, 0x0, {}, [{0x164, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x130, 0x1c, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x40}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0xe3, 0x6, "ab3a43a4e6a1be647c3b81cd717d017d29807b6d941780e19716802741c2044f3275f06aed184182a99224e1e64d292d4522f0fb5e3357b41884d4d7d2131229189e2183c30e5170c2b6d58d212e9969454e66d3b19e6ee2b6e5ae9a36a2e21ce4f5d2e9e23f0eed1a641fdca8c5d0e61456e8b2efcb437d6f139c5bbd2db1859c5a22cbff16837bd90918ae9ca5c8e6dab171a83d591a511da3a467b252f877c4b3eda7a3b9891287736631f21827162536ffc6d8f77d72ed12fc2ee75449a7d63c4a21371b2dcfbd163f93c934ee77aeee68a6dbfffc861b23012d27b257"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x178}}, 0x0) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000200)) (async)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

28.862091998s ago: executing program 2 (id=275):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x40082, 0x509cb86664327f4)
r1 = fanotify_init(0x81, 0x40000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4)
syz_emit_ethernet(0x8e, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x58, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d"}}}}}}}, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000))
symlinkat(&(0x7f0000000200)='./file0/file0\x00', r2, &(0x7f0000000240)='./file0\x00')
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x4e, &(0x7f0000000280)={0x5, 0xf, 0x4e, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x4, 0xf000, 0x100, [0x30, 0x3f0f, 0x30, 0xff00f0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc8, 0x0, 0x6, 0x0, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "d988b550e68b2e1c70a9e74a50e296d0"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x1, 0xf}]}})
syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'nr0\x00', 0xb356841f36698ca6})
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)={0x118, 0x1f, 0x4, 0x70bd2b, 0x0, "", [@nested={0x108, 0x132, 0x0, 0x1, [@generic="a1bb1c1ae220122390d6e1658c4e5334fda6c6ea9c67070776caccf51c5ca236f4509ebe1c003beb44ba730e65b9abb265", @typed={0x0, 0x147}, @nested={0x1c, 0x8, 0x0, 0x1, [@nested={0x18, 0x5b, 0x0, 0x1, [@typed={0x8, 0x136, 0x0, 0x0, @uid}, @typed={0x2c, 0xa6, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x147}]}]}, @typed={0xc5, 0x0, 0x0, 0x0, @binary="1d55efc186ad94883add2856b5b67fa80a09140d83f4db0a160f4b77552c2fdd3eb1ee0b2ebaa523b18b783cedd3ec6355f9135ace190b8dce7d1d04f1b751c52f283e0fbf2b62aa00e8c4b21b2bb155e1ac242f849a78fb782de50d18bbfc483288aabf7e088534737bf60da06dbae5a23d07831492fbfa193bbf8e95fade2ec53883c8ebd7c0d497b5f773b9c7eb9f0b9f6cefb2c0e8726a33a608bc3c85511a177395e44e01b31bb3b47d7f9a6827649e702a1d5c1712211111bb99a5d862ab"}, @nested={0x4, 0xea}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x20008891}, 0x0)
fanotify_mark(r1, 0x105, 0x8000030, r0, 0x0)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020)

26.411167427s ago: executing program 2 (id=291):
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)

25.904510995s ago: executing program 2 (id=304):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x50, 0x11, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r7, r6)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r6, 0x0)
r8 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r8, &(0x7f0000000000)={0x18, 0x2, {0x1, @empty}}, 0x1e)
r9 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r9, &(0x7f0000000140)={0x18, 0x2, {0x1, @loopback}}, 0x1e)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

25.823964427s ago: executing program 33 (id=304):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x50, 0x11, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
dup2(r7, r6)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r6, 0x0)
r8 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r8, &(0x7f0000000000)={0x18, 0x2, {0x1, @empty}}, 0x1e)
r9 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r9, &(0x7f0000000140)={0x18, 0x2, {0x1, @loopback}}, 0x1e)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

16.921264846s ago: executing program 1 (id=426):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = io_uring_setup(0x5dc0, &(0x7f0000000380)={0x0, 0xee03, 0x1, 0x2, 0x3a6})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0], 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x400000000010, 0x3, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc4}})
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'gretap0\x00'})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x19c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@TCA_STAB={0x178, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x9, 0x3, 0x6, 0x1, 0x5, 0x7, 0xa}}, {0x18, 0x2, [0x7, 0xae, 0x101, 0xaa, 0x5, 0x9, 0xffff, 0x1000, 0x5, 0x1]}}, {{0x1c, 0x1, {0xbb, 0x7a, 0x9, 0x6, 0x0, 0xe, 0x7, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x18, 0x9, 0x9, 0x80000000, 0x1, 0x9, 0xfffffffd, 0xa}}, {0x18, 0x2, [0x2, 0xc, 0xfffe, 0x9, 0x0, 0x2, 0x9, 0x1, 0x1000, 0x1]}}, {{0x1c, 0x1, {0xf8, 0x5, 0x8, 0xfffff5a4, 0x2, 0x6, 0x8, 0x2}}, {0x8, 0x2, [0x5, 0x8]}}, {{0x1c, 0x1, {0x6, 0x8, 0xfff, 0x8, 0x1, 0x3ff, 0x0, 0x2}}, {0x8, 0x2, [0x2, 0xff15]}}, {{0x1c, 0x1, {0x4c, 0x1, 0x5, 0xddf8, 0x2, 0x101, 0x6, 0x4}}, {0xc, 0x2, [0x2, 0x2, 0x0, 0x9f]}}, {{0x1c, 0x1, {0x8, 0xc9, 0x4, 0x1ff, 0x2, 0xffffffff, 0x76ae, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x3, 0x10, 0x3, 0x1, 0x0, 0x16, 0x3, 0x7}}, {0x12, 0x2, [0x7fff, 0x1, 0x8, 0xffff, 0x0, 0xd, 0x2]}}, {{0x1c, 0x1, {0x8, 0x9, 0x8, 0x1, 0x0, 0x6, 0xfffffffa, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x19c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x6, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010025bd7000fbdadf2596cef0903f3a4803000029"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)

16.782466868s ago: executing program 1 (id=430):
timer_create(0x2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x1e, r0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c643c, &(0x7f0000000300))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000001000/0x2000)=nil)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000100), 0x6)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
timer_create(0x7, 0x0, &(0x7f0000000080))
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000001c0)={0x10003, 0x4, 0xb000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040)

16.682173059s ago: executing program 1 (id=434):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x801, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0x980901, 0x0, @name="d65c413bc9c19f0929bca6063a2efe3600"})

16.631270704s ago: executing program 1 (id=438):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
open(&(0x7f0000000000)='./file0\x00', 0x28001, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16.45041936s ago: executing program 1 (id=444):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "2f01c4fd8eabb5611b655e5f65991c3e1e6f89550928b713582f37d43e4b35a9f7a5b12d01438c9c419900b0e3001000"}, 0x48, r0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x82, &(0x7f00000000c0)='n\x00\x00\x00\x00\x00\x00\x00', 0x8)
getsockopt$inet_int(r2, 0x0, 0xf, 0x0, &(0x7f0000000c00))
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000640)='asymmetric\x00', &(0x7f0000000600))
keyctl$link(0x8, r1, r0)

16.240865817s ago: executing program 1 (id=451):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0xa0, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'wg1\x00'}]}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg1\x00'}, {0x14}, {0x14, 0x35, 'caif0\x00'}]}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "b0054451b9611d7a7da572085b21f8a6cd"}]}, 0xa0}}, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100), 0x4)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x20004030)

16.16916651s ago: executing program 34 (id=451):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0xa0, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'wg1\x00'}]}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg1\x00'}, {0x14}, {0x14, 0x35, 'caif0\x00'}]}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "b0054451b9611d7a7da572085b21f8a6cd"}]}, 0xa0}}, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100), 0x4)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x20004030)

2.362700591s ago: executing program 6 (id=614):
r0 = memfd_create(&(0x7f0000000140)='\vem\xda\x99[R@M\xfc\xfe\x9b#*\xff', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1) (async)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8, 0x3, r4}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f0000000040))

2.251862257s ago: executing program 6 (id=615):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id'])
clock_gettime(0x0, &(0x7f0000002600)={<r2=>0x0, <r3=>0x0})
ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0)
recvmmsg$unix(r0, &(0x7f0000002480)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f0000000280)=""/20, 0x14}, {&(0x7f00000002c0)=""/183, 0xb7}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000440)=""/2, 0x2}], 0x7}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000500)=""/41, 0x29}], 0x1, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f0000000780)=""/82, 0x52}, {&(0x7f0000000800)=""/63, 0x3f}, {&(0x7f0000000840)=""/107, 0x6b}, {&(0x7f00000008c0)=""/66, 0x42}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/54, 0x36}, {&(0x7f00000009c0)=""/79, 0x4f}, {&(0x7f0000000a40)=""/162, 0xa2}], 0x9}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000002100)=[{&(0x7f0000000c40)=""/216, 0xd8}, {&(0x7f0000000d40)=""/69, 0x45}, {&(0x7f0000000dc0)=""/116, 0x74}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/253, 0xfd}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/119, 0x77}, {&(0x7f0000002000)=""/181, 0xb5}, {&(0x7f00000020c0)=""/61, 0x3d}], 0x9}}, {{&(0x7f00000021c0), 0x6e, &(0x7f0000002280)=[{&(0x7f0000002240)=""/8, 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000022c0)=""/209, 0xd1}], 0x1, &(0x7f0000002400)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}], 0x6, 0x2, &(0x7f0000002640)={r2, r3+10000000})
setuid(0xee01)
setresgid(0x0, 0xee00, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x4, 0x1, 0x0, &(0x7f0000000200), 0x1)
move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2) (async)
move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2)

2.251436177s ago: executing program 6 (id=616):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'})
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8008550e, &(0x7f0000000040)={0x7, 0x0})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@getae={0x40, 0x1f, 0x1, 0x70bd27, 0x25dfdbfe, {{@in=@local, 0x4d6, 0x2, 0x6c}, @in=@loopback, 0x2, 0x3500}}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x40040)

2.172249704s ago: executing program 6 (id=617):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x240)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x5, 0x1, {0x0, 0x1, 0x6, 0x1, 0x9}, 0x7fffffff})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)={0x3, 0x2, {0x0, 0x3, 0x401, 0x2, 0x6}, 0x5})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x9, 0x8, 0x6467, 0x7, 0x0, 0x4, 0x6, 0x8, 0xfffffffeffffffff, 0xffff, 0x6, 0x10, 0x2, 0x7, 0xff, 0x100000001], 0x0, 0x80010}) (async)
ioctl$KVM_RUN(r1, 0xae80, 0x0) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x2, 0x2, 0x10000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000280)=0x1) (async)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0xdddd0000, 0x70000, 0x9, 0x5, 0x8, 0xb, 0x3, 0xfc, 0x8, 0x7, 0x1, 0x3}, {0xdddd1000, 0x40000, 0x8, 0x40, 0x10, 0xff, 0x7, 0x2, 0x4, 0x6, 0x3, 0x6}, {0x7000, 0x25000, 0x1a, 0xd, 0x0, 0x9, 0x6b, 0xb2, 0x77, 0x1, 0x4}, {0xffffffff, 0x8000000, 0x8, 0x1, 0x4e, 0x6, 0x2, 0xb1, 0xf9, 0xd, 0x7, 0x8}, {0x4, 0x26000, 0x0, 0x3, 0x9, 0x0, 0x6, 0x0, 0x4c, 0xff, 0x5, 0x4}, {0x5004, 0x41000, 0x4, 0x7, 0x0, 0xff, 0x5, 0x8, 0x0, 0x81, 0x72, 0x1}, {0x26000, 0xdddd0000, 0xc, 0x2, 0x7, 0x7f, 0x7, 0x2, 0x80, 0x4, 0xd8, 0x10}, {0x8080000, 0x4000, 0x8, 0xff, 0x88, 0x33, 0x3, 0x0, 0x0, 0x9, 0x0, 0xa}, {0xdddd0000}, {0x50000, 0x4}, 0x20010032, 0x0, 0xa0000, 0x0, 0xc, 0x8100, 0x6000, [0xd3f, 0xaa7, 0x0, 0x8001]}) (async)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000400)={0x8, 'veth0_vlan\x00', {'wg0\x00'}, 0x1}) (async)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000440)={0x7fff, 0x7fffffff, 0x5}) (async)
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000480)="f30fae2461b92b080000b83600c0feba000000000f30440f23ba66410f71d0d90f01cf468131c006000066b8b1000f00d866440f38824b39b9740b00000f32470fb64862", 0x44}], 0x1, 0x0, &(0x7f0000000540)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @efer={0x2, 0xd000}], 0x2) (async)
syz_emit_ethernet(0x133, &(0x7f0000000580)={@multicast, @broadcast, @void, {@mpls_mc={0x8848, {[{0xffffc, 0x0, 0x1}], @ipv4=@igmp={{0x1f, 0x4, 0x1, 0x25, 0x121, 0x68, 0x0, 0xb, 0x2, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0xdc, 0x1, 0x5, [{@multicast2, 0x8}, {@multicast2, 0x7}, {@local, 0xf67c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@broadcast, 0x132092d8}, {@loopback, 0x4}, {@remote, 0x7}]}, @cipso={0x86, 0x2c, 0x2, [{0x1, 0x4, "4bce"}, {0x1, 0xa, "0c704964571772b0"}, {0x1, 0xd, "c27d86f50f33200a48104b"}, {0x2, 0xb, "44b46c4f6e7cb1edee"}]}]}}, {0x6, 0x5, 0x0, @local, "f1e9f28a2a79341d00228730d4d6eca162570fe36fcad084a318e10c6e80263f5949c256b6e4e2926ae872cc89834076da4669a907a00a56579d334e16c338a4428f24fad963c9d76797e9a82992d7ab2b3c82409268041aff86a53266b3fef4f3db5e3b3118c16708f9348eee5846125c23b0656b23e234bfac253583ff9efcfedc68aecd55b50e6391fc11733515de28e82f6d32c6fdadeeec201021"}}}}}}, &(0x7f00000006c0)={0x0, 0x2, [0x80c, 0x8aa, 0x389, 0xb48]}) (async)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000700)) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000780)={0x3, 0x2, {0x0, 0x2, 0x9, 0x2, 0x5}, 0x7}) (async)
ioctl$LOOP_SET_FD(r2, 0x4c00, r3)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
mmap(&(0x7f0000fe6000/0x3000)=nil, 0x3000, 0x8, 0x80010, r3, 0x11730000) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r2) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vxcan1\x00', <r5=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000009c0)={'gretap0\x00', &(0x7f00000008c0)={'syztnl1\x00', <r6=>0x0, 0x8000, 0x7800, 0x8, 0x7, {{0x2a, 0x4, 0x0, 0x4, 0xa8, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xd4, 0x1, 0xe, [{@multicast1, 0x101}, {@empty, 0x400}]}, @generic={0x86, 0xe, "010ea81bb0c9761f57b465e9"}, @ssrr={0x89, 0xf, 0xee, [@remote, @private=0xa010100, @loopback]}, @ssrr={0x89, 0x23, 0xe2, [@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x27}]}, @noop, @timestamp={0x44, 0x24, 0x35, 0x0, 0xb, [0x1, 0x18, 0x6, 0x8, 0x0, 0x5, 0x8, 0xa]}, @end, @ssrr={0x89, 0x17, 0x3d, [@empty, @loopback, @multicast1, @empty, @local]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00', <r7=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000a40)={'vcan0\x00', <r8=>0x0}) (async)
getsockname$packet(r2, &(0x7f0000000a80)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000ac0)=0x14)
getpeername$packet(r2, &(0x7f0000000b00)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b40)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000b80)={'wg2\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000001280)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1d0, r4, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x10}, 0x41)

2.171826556s ago: executing program 6 (id=618):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0)
write$FUSE_INIT(r0, &(0x7f0000000500)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x8, {0x5, 0x0, 0x7, 0x4099, 0x7, 0x0, {0x8001, 0x0, 0x10, 0x1, 0xfffffffffffffff6, 0x6b, 0x0, 0x420000, 0x100000, 0xc000, 0xfffffffd, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x8000, {0x7, 0x29, 0x201, 0x8000, 0x72, 0x5, 0x5, 0x400008, 0x0, 0x0, 0x4, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)

1.457984895s ago: executing program 4 (id=627):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000600)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}})
io_uring_enter(r1, 0x3516, 0x3e000000, 0x0, 0x0, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x1, 0x8, 0x4, 0x10000, 0xfffffff8]})

1.33660222s ago: executing program 4 (id=632):
r0 = userfaultfd(0x801) (async, rerun: 32)
setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) (rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) (async)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20083, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000000)=0x4) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
madvise(&(0x7f00008c8000/0x3000)=nil, 0x3000, 0x11)

1.112431312s ago: executing program 6 (id=635):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="120100000c9768405e0483020b9931e4020109021b000100000000090400fb0160291d000905090ca8"], 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000280)={@my=0x1})
r3 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
r4 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000, 0x132}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000002300)=<r6=>0x0)
syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x3}})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x4004, @fd_index=0x9, 0x8, 0x0, 0x0, 0x2})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r9, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x64, r10, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x80}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xfa0f}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x80}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1ab}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

1.111786359s ago: executing program 4 (id=637):
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)='8', 0x1}], 0x1)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000804000/0x1000)=nil)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0)
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='./file1\x00')
symlink(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008050}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004005}, 0x24000004)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r8=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x800000d, @mcast1}, r8, 0x4040099d}}, 0x48)
writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil)
r12 = syz_kvm_add_vcpu$x86(r11, &(0x7f00000000c0)={0x0, &(0x7f0000000940)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @code={0xa, 0x58, {"f36fc4435102a10028000067420f01c4640f37b9d30b0000b8ac9d0000ba000000000f3066b862008ed8b9800000c00f3235010000000f300f79170f0936f00fb1843f00000080"}}], 0x70})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x24, r4, 0xb97534d5fe9704cf, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x8008)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r4, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xc8c0}, 0x80)

1.021980319s ago: executing program 4 (id=644):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0)
write$FUSE_INIT(r0, &(0x7f0000000500)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x8, {0x5, 0x0, 0x7, 0x4099, 0x7, 0x0, {0x8001, 0x0, 0x10, 0x1, 0xfffffffffffffff6, 0x6b, 0x0, 0x420000, 0x100000, 0xc000, 0xfffffffd, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x8000, {0x7, 0x29, 0x201, 0x8000, 0x72, 0x5, 0x5, 0x400008, 0x0, 0x0, 0x4, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)

712.455567ms ago: executing program 3 (id=653):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$CDROMPLAYMSF(r3, 0x5326, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

711.361605ms ago: executing program 5 (id=654):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffffff, 0xfffffffc, 0x0, 0x0, 0xffffffff}, 0x20001, 0x0, 0x4000007, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x2000, {0x1, 0xed, 0x0, 0x0, 0x5}}}}]}, 0x78}}, 0x4080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r5)
sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x14, r6, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44084}, 0x81)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc}, 0x50)

611.952085ms ago: executing program 5 (id=655):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) (async)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='btrfs\x00', 0x10003, &(0x7f00000000c0)='norecovery')
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

600.992716ms ago: executing program 3 (id=656):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x10000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r6, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000)
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000b40)={0x4f0, r4, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0xa}}}}, [@NL80211_ATTR_NAN_FUNC={0x11c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x60, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xc}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0x8d, 0xb, "e85e2643846a4e264ee01e415166b2465fc2a234b63ff03f640b1aa8687ac98fa7ef7dbd1cc844eea0ebeb45f192ffc0198b9586113d139e765f2bafc847b8791896d3f646319ef28826b4d89da6ca1bc6d8f516aacc94aef23db2cd90cf9a013daa7345f23d3e52334d552fbdeee633e462fa40ae69e0f4bb8666c32da2a3b160336b8ad6faee3bbb"}]}, @NL80211_ATTR_NAN_FUNC={0x3a8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x384, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x70, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "cb159735954e99563f5f776752b068ff9b22881eae2ac62104bb88cdd4a70f5c15e850314f7579f9bc02738dba594e8b496bf416b5fdbbe08e016cc420601d50513c337db80a9ab3d88d3592c4c3c17f1f61c597d241cfac7baad6215f185cf6dad912ded4c3a04171f106efd005cc418c6c2da808797988c62228382c1bb173d30e3e71357071c7ab4281039950b538c25bac7828acb64505d2a2050c3b58346e70bc3b4a75f2fd7efee01aaf91407bd888427b0ead49cac8314de3e818364e643ad822780f7243516b8a65d0754825a97b85b6242bf146a1ef87ee1e52bff20f3448dbad4abe1dc8ef27a099837d1c8c5d5affc5cc0b1c3139a8e8a0fd2d"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xe2}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xb6}]}, @NL80211_ATTR_NAN_FUNC={0x4}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x400c841}, 0x0)

593.779346ms ago: executing program 5 (id=657):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_DIRENT(r0, &(0x7f0000002540)=ANY=[@ANYRES8=r1, @ANYRESDEC=r1, @ANYBLOB="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"], 0x1e0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000e3ffff840000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r6 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000140)={<r7=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r6, 0xc01064c1, &(0x7f0000000100)={r7}) (async)
r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x7) (async)
ioctl$KDGKBDIACR(r8, 0x4b4a, 0x0)
getsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000440), &(0x7f0000000480)=0x4) (async)
mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f000021c000/0x2000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff}) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="d50352ec", @ANYRES16=r11, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r12, @ANYBLOB="050034009f00000008000c0009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
fstat(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
setreuid(0x0, r13) (async)
r14 = geteuid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
setresuid(r14, r14, 0x0) (async)
setreuid(r14, r14) (async)
sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd70000000000067db000008000334", @ANYRES32=0x0, @ANYBLOB='\f'], 0x34}}, 0x8080) (async)
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x71}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

529.307483ms ago: executing program 3 (id=658):
r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0)

528.88766ms ago: executing program 3 (id=659):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000080)=0xfffffffc, 0x4)
recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0)

441.5863ms ago: executing program 5 (id=660):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat(r0, &(0x7f0000000100)='./file0/../file0\x00', r0, &(0x7f0000000180)='./file1/file0\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000002e00030026bdf000fcdbdf250400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x0)

312.394153ms ago: executing program 5 (id=661):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x13}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x44)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000240)="50bc0455ef43f01b931f9a1463078b5cc96fd8e779a6674ced954a078aa0a8d4b82e8c8da1326daa80f68deb0353415976798477ea8d044d3bbc6c1283045e70c6c1c80c3abfca6cdedf8b38e14d60768a5bf494bb606479e8", 0x59, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f0000000340)={r7})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

181.74258ms ago: executing program 3 (id=662):
r0 = inotify_init() (async)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000280), 0x0) (async, rerun: 64)
sync_file_range(r0, 0x1ff, 0x101, 0x3) (rerun: 64)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async)
r3 = dup(r1)
sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)='R', 0x1}], 0x1}}], 0x2, 0x4) (async)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) (async)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) (async, rerun: 32)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) (async)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

180.995424ms ago: executing program 3 (id=663):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@private, 0x0, 0xecdf, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000}, {0x0, 0x800, 0x0, 0x7}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x158}}, 0x4050)
iopl(0x3)
setgid(0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x4c5, &(0x7f0000000900)={{0x12, 0x1, 0x250, 0x23, 0x3c, 0x53, 0x10, 0x1410, 0x9011, 0x1926, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b3, 0x2, 0x6, 0x3, 0x60, 0x8, [{{0x9, 0x4, 0xa3, 0x4, 0x5, 0xff, 0xff, 0xff, 0xf8, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "904c1ed9"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0xfbe, 0x5}, {0x6, 0x24, 0x1a, 0x100, 0xc}, [@dmm={0x7, 0x24, 0x14, 0x2220, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x3, 0xcb, 0x8, 0x9, 0x9}, @country_functional={0x8, 0x24, 0x7, 0x80, 0x401, [0x6]}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x7, 0x9}]}], [{{0x9, 0x5, 0x3, 0x8, 0x400, 0x1, 0xc5, 0x8, [@generic={0xc2, 0x4, "514cfacc6fe4b3ad017f17fce4b6776d132c21863054f46d756194aaa7e776fa5a99d6e335711323639ed0961e5466b6efda6820d30b989a40f7b3c1866a6846124329f2aa9da41edc7f2324575c8b23ecd70b8936e8a47e674e98991f44f88b46d9dde45093c06107dc401c603d397fca899eeb6411d808fda4ebad952a8e37d6bab557d51c6238fed9475f0736590963298c9051a2a34b469d7454edbd595a88689504f01964613c7a4512a95f710fea661aaa1043e057f6edaf221121827e"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x8, 0xa, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xff, 0x3}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x2, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x3}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0xf, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x26, 0x3bdb}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0xec, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0xd0, 0xf9, 0x8, 0xff, 0x9f, 0xaf, 0xf8, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x9, 0xe3d838bbc9e7bf69}, @as_header={0x7, 0x24, 0x1, 0x1, 0x3, 0x1}]}], [{{0x9, 0x5, 0x9, 0x3, 0x40, 0x3, 0x2, 0x1, [@generic={0xc9, 0xa, "a2a3e6627cdf606163255d1877100556d5180e5378d34afbd542362adbdd598eabcfc630ab490fff5d1c96e590366778e1cc75871c5d6c8a17d97f96b047de081264559dde7a152e832e21650ce61ad2d969430675d43cf35ac8fbcb4eb2094f6fde6db4d383dbf099a9485bf8391759dad04d6cf6d2983bc2b643c9d051449c59e376cbaa83a1d40e9d2bc83aa36aa14b118f61e94fd16c792d9cbcd24594da7f130ae962b3cadd4ea56521e87f13acc25abc7e1ca21fe40d6838c4a5535409d3415e76a1b015"}]}}, {{0x9, 0x5, 0x17f661a93ac012e9, 0x10, 0x40, 0x9, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x7, 0x5, 0x6, [@generic={0x1e, 0xd, "c8b3a8a11cb683a86591a4555daacb2fcbf6beefe7490c4355a8810f"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x240, 0xb0, 0x9, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x0, 0x0, 0x7, [@generic={0x4, 0x22, "bab5"}, @generic={0xab, 0x8, "2fe6a5d31021975351496828c44e7db0588ae160608723537e46480f3b8c5420f3c1cf2270bbecc69049b7d77b5436da6e2060de778af5dcf27de719c744cf44a55f3b1cfef274232b325e72eaa90aae0026e53ddb6f5de097a53ebc416f21b0a851fc30e20a685289f279a6546948edad99f4f32fb5e7285dd39c84fb2c79f3e2c4cf42438239c3cedf3d58d41b68d9206ab6ddb7765f7f0dfdd87f94f6e353dc5b64e07974d718f6"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0xd, 0x7, 0x7, [@generic={0xfb, 0x10, "dc3a2d7ccd508dd54f7ace04fcc2ac9c3271e584923fbaf82367bf3232ebc0b30bcb4c7c60a5a4de3cf54157ed0899b7532e7c935be839e877508ff55119abd94c6621849d22416ecedc70495ca0b847967821018b49248aa9bb7f5d6ad821195ca78227b82f8386663a8c3e0b2ca39a4d46feb97b422ffe0940c4984794c9f9a8292d1f1611d968b8bac5b9b705b1727dd30bbe79de758ba2fd58ddf444679979c08cc4d08c5f6568a6b0bba793c5ba05cb0af903ae4311b585bac5ff6650f3e825ddcd148f2776a228c75a8497742f55a0b53a7491fb21f1f67465c7ab91c11d7a21ddd7afe2e9c9818d909036ba8de1695693cd06fcee9a"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0xd, 0xe, 0x47, [@generic={0x48, 0x23, "757afa4fae8e2109f8d7d857c94e96dc660f069701d7a230446187e1e6928df5e9763c313b9161f57fa34b290cf981d1fb615e68d5a6baa587f23c506e64487b9b9eb4bcece2"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x90, 0xba, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x7}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x5, 0xf8, 0x8, 0x20}, 0xbf, &(0x7f00000001c0)={0x5, 0xf, 0xbf, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x4, 0x2ee0}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x5, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x6, 0x6, 0x8}, @generic={0x98, 0x10, 0x7, "edef88b23de2d8c91406744536f01904dc3a2afc646f65f345fd03dcf8778ed4fa3d89ef8ac3cdbb71b6c6c9068a0b2ff97c65f8c63f6b66568ea11860f90e79d7baddfc047a3095f7fb43599b28d758ce36955e147e63b6fbe8a1a81d106a100ec9241590e990c6dd287f4729b4c6fa9969b7bb68c3eee2fc10ad6ce4e8919223baae4556af4ba8f499ae0925150aad92776da8f9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x36, 0x62, 0x4}]}, 0x1, [{0xbb, &(0x7f0000000440)=@string={0xbb, 0x3, "729ee193bc03fb568e39476aa5ed7aaa48c4e2da01235ab270d3afb15e4757477a834e68ced0dc4accc436cce545a8c64ee94f3f5502ae95f9e54153d6456162289458c1ada66940797bbd4903e37e2543401e4b2e5ce20d7034d1209d5ad01b72c0ed443ed4c34f6478a9d8eecf77df5473e924af4e80286cb487a5b5c9f437178cac7e20a184a1f01adcce06d98435989471aba50ff24af2e7bc32d030a68e5fadab5bc9c50180a380c041ae7195ab0ba81ede793c1959ba"}}]})
syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, &(0x7f0000000fc0)={0x20, 0x24, 0xda, {0xda, 0x23, "139e8d1984600b1daa9e2be646a9569beb3c8c533957d598dd321f14c665565463e3af736cad60de368580cdc2dc3b79f042b4ed44d32425b51683b7496622d2acf73724bf4f08a315c4af743c899b065e5a9cd6e6f2d91588d31e807a3dbf3f2b6f59140c8b3ec792ba06d150fd2cf6f22d4c17d7d28cd0adc2af8e0a4547c26898f1ca66af63d6d33e7cd1fc091823dd9a983bf47b8b1d586c573cbcf5a8a4384ff9ee55ce6e5713ddf4c880eecd3bd0a5d545af1c34f816707f93a88d3149935418a290d38eda7074228e1f0b64fe183b35c02ab123e8"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2472}}, &(0x7f0000000340)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x1, "01523648"}, @global=@item_012={0x2, 0x1, 0x4, "7e84"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x5af}}}}, &(0x7f0000000f00)={0x2c, &(0x7f0000000f80)=ANY=[@ANYBLOB="400d1e0000006236727a6c3bc0ac843881e200c00e0a5ba2f2ce129fa0c6c956101a0e95"], &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000e40)={0x20, 0x1, 0x43, "a3c103dd59032150ec78e573d97c211865d3625d0f98da3422e18a02f1c3c2945a8acfb6ea1640e81afd680e7465cef3bd3c90c3f1c7c64b5df54123652db63d4e57fb"}, &(0x7f0000000ec0)={0x20, 0x3, 0x1, 0x4c}})
stat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
stat(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x1000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0, {<r5=>0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, <r6=>0x0}}, './file0\x00'})
stat(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
statx(0xffffffffffffffff, &(0x7f0000001480)='./file0\x00', 0x6000, 0x21, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = getgid()
fstat(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
fsetxattr$system_posix_acl(r0, &(0x7f0000000f40)='system.posix_acl_access\x00', &(0x7f0000001640)={{}, {}, [{0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x2, r2}, {0x2, 0x7, r3}, {0x2, 0x0, 0xee00}, {0x2, 0x1, r4}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x4, r6}, {0x8, 0x1, 0xee01}, {0x8, 0x5, r7}, {0x8, 0x5, r8}, {0x8, 0x3, r9}, {0x8, 0x2, r10}], {}, {0x20, 0x7}}, 0x9c, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r12, &(0x7f0000000280), 0x10)
sendmsg$can_bcm(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x5, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "884e068a5e4e2085"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0xa, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "25f87df99dc48af4"}}, 0x48}}, 0x0)
getsockopt$IPT_SO_GET_INFO(r11, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x7003, [0x7, 0x8004000a, 0x129, 0x1007, 0x3]}, &(0x7f0000000000)=0x54)

81.833402ms ago: executing program 4 (id=664):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x6, 0x0, 0x40, 0x0, 0x8})
sendmmsg(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000000000002900000043"], 0x10}}], 0x1, 0x20040000)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
r1 = epoll_create1(0x0)
r2 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001180)={0x80000000})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2000)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15)
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
mmap(&(0x7f000097b000/0x2000)=nil, 0x2000, 0xb, 0x8031, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neon\x00'}, 0x40)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200400, 0x2)
getdents64(r6, &(0x7f0000000240)=""/70, 0x46)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014})
listen(r5, 0x1000)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)

351.427µs ago: executing program 5 (id=665):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffa, 0x22}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'sit0\x00', <r3=>0x0, 0x80, 0x10, 0x7f, 0xcf67, {{0x18, 0x4, 0x0, 0x8, 0x60, 0x67, 0x0, 0xd, 0x4, 0x0, @remote, @multicast2, {[@rr={0x7, 0x27, 0x96, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast1, @multicast2, @remote, @loopback, @loopback, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0x24, 0x37, 0x1, 0x1, [{@private=0xa010101, 0x800}, {@loopback, 0x401}, {@loopback, 0x1ff}, {@empty, 0x80000001}]}]}}}}})
sendto(0xffffffffffffffff, &(0x7f0000000180)="b31c", 0x2, 0x84, &(0x7f0000000280)=@xdp={0x2c, 0xc, r3, 0x35}, 0x80)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10b000, 0x8a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x3c}}, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x4, 0x1, {0x3, @usage=0xb, 0x0, 0xffffffff, 0x100000000, 0x4, 0x8, 0x1, 0x79, @struct={0x8, 0x1}, 0xffffffff, 0x2, [0x6, 0x9, 0xe, 0x60000, 0x7, 0xbaca]}, {0x6, @usage=0xb, <r6=>0x0, 0xefa, 0x6e, 0x4, 0x4, 0x0, 0x0, @usage=0xf, 0x6, 0x6, [0x0, 0x6, 0x0, 0x2, 0x5, 0xdd]}, {0xe, @struct={0x7ff, 0x8}, 0x0, 0x0, 0x5, 0x2, 0x10000, 0x40, 0x0, @usage=0xcd77df2, 0xbc3, 0x1, [0x3, 0x6, 0x80000000, 0x3, 0x5, 0x7]}})
ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000840)={r6, "360e989d2e7c1029683bbd4af3f7dc53"})
r7 = dup3(r4, r0, 0x80000)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x3ff, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000001)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x60, 0x1412, 0x400, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004095)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000001ac0)={'syztnl2\x00', &(0x7f0000001a80)={'syztnl0\x00', r3, 0x20, 0x20, 0x6178, 0x7, {{0x6, 0x4, 0x1, 0x37, 0x18, 0x64, 0x0, 0x3, 0x2f, 0x0, @multicast1, @broadcast, {[@end, @noop]}}}}})
r9 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000001b00), 0x240000, 0x0)
sendmsg$IPSET_CMD_HEADER(r9, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x64, 0xc, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000095}, 0x810)
ioctl$CDROMREADRAW(r9, 0x5314, &(0x7f0000001c80)={0x9, 0x7, 0x0, 0x0, 0x3, 0x8})
recvfrom(r5, &(0x7f0000002700)=""/16, 0x10, 0x20, &(0x7f0000002740)=@generic={0x26, "8ce4558e1f8953bb76644c0447f670b7a2352b578ab5bb189fea8d25a08e23335bc65830ee19aa666566616ce79693da97b974f75dd5c2b8d57f87d34be4a9ae65dd19e1ef71c714b85479b4fed565791984cf8cbea47be883300965659ea527819e2527ccd46b790d2bd1fff19374a634679fd9b16757f60359d6de8c7d"}, 0x80)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGSKNS(r10, 0x894c, &(0x7f00000027c0)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000002800)={0x2, [0x0, 0x0]}, &(0x7f0000002840)=0xc)
r11 = accept$ax25(r9, &(0x7f0000002880)={{0x3, @bcast}, [@default, @null, @default, @netrom, @remote, @netrom, @remote, @bcast]}, &(0x7f0000002900)=0x48)
r12 = dup(r11)
ioctl$PPPIOCCONNECT(r12, 0x4004743a, &(0x7f0000002940)=0x2)
recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f0000002980)=@alg, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002a00)=""/178, 0xb2}], 0x1, &(0x7f0000002b00)=""/164, 0xa4}}, {{&(0x7f0000002bc0)=@nfc_llcp, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c40)=""/238, 0xee}], 0x1, &(0x7f0000002d80)=""/150, 0x96}, 0xf44}, {{&(0x7f0000002e40)=@nfc, 0x80, &(0x7f0000003040)=[{&(0x7f0000002ec0)=""/204, 0xcc}, {&(0x7f0000002fc0)=""/32, 0x20}, {&(0x7f0000003000)=""/57, 0x39}], 0x3, &(0x7f0000003080)=""/177, 0xb1}, 0x6}, {{&(0x7f0000003140)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003240)=[{&(0x7f00000031c0)=""/7, 0x7}, {&(0x7f0000003200)=""/40, 0x28}], 0x2, &(0x7f0000003280)=""/42, 0x2a}, 0x6}, {{&(0x7f00000032c0)=@can, 0x80, &(0x7f0000004380)=[{&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/35, 0x23}], 0x2, &(0x7f00000043c0)=""/3, 0x3}, 0x4}], 0x5, 0x40, 0x0)
r13 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r13, 0x8982, &(0x7f0000004540))

0s ago: executing program 4 (id=666):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24)
write(r3, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000000002000008000f40fe00000e", 0x24)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

.464923][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.470683][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.475422][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.480383][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.499665][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.522631][ T5937] team0: Port device team_slave_0 added
[   62.535580][ T5937] team0: Port device team_slave_1 added
[   62.554703][ T5945] team0: Port device team_slave_0 added
[   62.562635][ T5936] team0: Port device team_slave_0 added
[   62.570666][ T5936] team0: Port device team_slave_1 added
[   62.574160][ T5945] team0: Port device team_slave_1 added
[   62.578073][ T5947] team0: Port device team_slave_0 added
[   62.580425][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.582797][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.590739][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.600622][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.602855][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.610802][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.626447][ T5947] team0: Port device team_slave_1 added
[   62.641278][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.643717][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.651825][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.656460][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.658664][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.666652][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.678402][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.681474][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.692540][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.715305][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.718073][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.729021][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.734911][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.737323][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.747065][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.757096][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.759988][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.769913][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.797920][ T5937] hsr_slave_0: entered promiscuous mode
[   62.800448][ T5937] hsr_slave_1: entered promiscuous mode
[   62.812355][ T5945] hsr_slave_0: entered promiscuous mode
[   62.814915][ T5945] hsr_slave_1: entered promiscuous mode
[   62.817469][ T5945] debugfs: 'hsr0' already exists in 'hsr'
[   62.819386][ T5945] Cannot create hsr debugfs directory
[   62.869472][ T5936] hsr_slave_0: entered promiscuous mode
[   62.872699][ T5936] hsr_slave_1: entered promiscuous mode
[   62.875635][ T5936] debugfs: 'hsr0' already exists in 'hsr'
[   62.878010][ T5936] Cannot create hsr debugfs directory
[   62.913847][ T5947] hsr_slave_0: entered promiscuous mode
[   62.916557][ T5947] hsr_slave_1: entered promiscuous mode
[   62.918863][ T5947] debugfs: 'hsr0' already exists in 'hsr'
[   62.920693][ T5947] Cannot create hsr debugfs directory
[   63.224311][ T5945] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.233534][ T5945] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.240314][ T5945] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.255269][ T5945] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.292522][ T5936] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.301312][ T5936] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.306000][ T5936] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.315232][ T5936] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.381956][ T5937] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.401317][ T5937] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.414044][ T5937] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.418261][ T5937] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.470795][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.476573][ T5947] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.487149][ T5947] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.496102][ T5947] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.502915][ T5947] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.534456][ T5945] 8021q: adding VLAN 0 to HW filter on device team0
[   63.559899][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.562338][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.571333][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.573753][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.582808][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.608357][ T5936] 8021q: adding VLAN 0 to HW filter on device team0
[   63.630676][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.633021][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.648304][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.650725][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.657935][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.673367][ T5943] Bluetooth: hci0: command tx timeout
[   63.681281][ T5937] 8021q: adding VLAN 0 to HW filter on device team0
[   63.695345][   T40] audit: type=1400 audit(1769279491.825:91): avc:  denied  { sys_module } for  pid=5945 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   63.696653][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.705885][ T4691] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.717299][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.719542][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.745409][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.752296][ T5943] Bluetooth: hci2: command tx timeout
[   63.760981][ T5937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.762842][ T5942] Bluetooth: hci3: command tx timeout
[   63.765847][ T5937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.767008][ T5943] Bluetooth: hci1: command tx timeout
[   63.798553][ T5947] 8021q: adding VLAN 0 to HW filter on device team0
[   63.812375][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.814697][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.829787][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.832165][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.845472][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.908706][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.916834][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.931417][ T5945] veth0_vlan: entered promiscuous mode
[   63.948256][ T5945] veth1_vlan: entered promiscuous mode
[   63.967807][ T5937] veth0_vlan: entered promiscuous mode
[   63.977992][ T5936] veth0_vlan: entered promiscuous mode
[   63.984601][ T5937] veth1_vlan: entered promiscuous mode
[   64.003969][ T5936] veth1_vlan: entered promiscuous mode
[   64.007836][ T5945] veth0_macvtap: entered promiscuous mode
[   64.014223][ T5945] veth1_macvtap: entered promiscuous mode
[   64.031796][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.042918][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.049388][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.055627][ T5937] veth0_macvtap: entered promiscuous mode
[   64.069587][ T5937] veth1_macvtap: entered promiscuous mode
[   64.073352][ T4691] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.076755][ T4691] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.080599][ T5936] veth0_macvtap: entered promiscuous mode
[   64.083986][ T4691] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.086789][ T4691] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.096039][ T5936] veth1_macvtap: entered promiscuous mode
[   64.124277][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.135833][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.144876][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.159871][ T4691] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.164791][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.167950][ T4691] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.176764][ T5947] veth0_vlan: entered promiscuous mode
[   64.179684][ T4691] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.183696][ T4691] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.203238][   T63] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.206164][   T63] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.224981][   T63] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.229715][   T63] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.238302][ T5947] veth1_vlan: entered promiscuous mode
[   64.245393][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.248881][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.288969][ T1213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.291467][ T1213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.302471][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.309130][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.348085][ T5947] veth0_macvtap: entered promiscuous mode
[   64.354348][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.356776][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.365684][ T1213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.366231][ T5947] veth1_macvtap: entered promiscuous mode
[   64.370066][ T1213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.372521][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.388782][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.392536][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.425337][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.436309][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.451232][ T1148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.455589][ T1148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.455625][ T1148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.455643][ T1148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.547440][ T4691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.550595][ T4691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.603278][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.606957][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.697666][ T6046] SELinux: failed to load policy
[   64.723602][ T6041] trusted_key: syz.0.1 sent an empty control message without MSG_MORE.
[   64.749292][ T6049] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   64.845343][ T6054] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=6054 comm=syz.2.8
[   64.882302][ T6055] netlink: 'syz.1.7': attribute type 1 has an invalid length.
[   64.909297][ T6043] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5'.
[   65.002909][ T6062] QAT: Invalid ioctl 1074030121
[   65.010878][ T6064] sit0: entered promiscuous mode
[   65.016700][ T6064] netlink: 'syz.1.11': attribute type 1 has an invalid length.
[   65.019991][ T6064] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11'.
[   65.166682][ T6073] fuse: Unknown parameter 'use00000000000000000000'
[   65.353842][ T6089] ceph: No source
[   65.393816][ T6094] Bluetooth: MGMT ver 1.23
[   65.393856][ T5943] Bluetooth: hci2: unexpected subevent 0x19 length: 24 < 28
[   65.454503][ T6097] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.492051][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'.
[   65.496626][ T6101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24'.
[   65.505820][ T6101] syz_tun: entered promiscuous mode
[   65.583055][ T6109] netlink: 'syz.0.27': attribute type 1 has an invalid length.
[   65.585552][ T6109] netlink: 44 bytes leftover after parsing attributes in process `syz.0.27'.
[   65.715290][ T6121] process 'syz.2.31' launched './file2' with NULL argv: empty string added
[   65.753314][ T5943] Bluetooth: hci0: command tx timeout
[   65.766015][ T6123] xt_l2tp: v2 tid > 0xffff: 2031748
[   65.783902][ T6124] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   65.789122][ T6124] block device autoloading is deprecated and will be removed.
[   65.796535][ T6118] md: md2 stopped.
[   65.843531][ T5943] Bluetooth: hci1: command tx timeout
[   65.843556][ T5948] Bluetooth: hci2: command tx timeout
[   65.848754][ T5942] Bluetooth: hci3: command tx timeout
[   65.902194][ T5998] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   65.928234][ T6130] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET)
[   65.938746][ T6130] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   65.946390][ T6130] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.951960][ T6130] fuse: Unknown parameter '00000000000000000012'
[   65.974649][ T6136] warning: `syz.3.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.986433][ T6136] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   66.044858][ T6138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.38'.
[   66.048872][ T6138] netlink: 'syz.3.38': attribute type 1 has an invalid length.
[   66.051392][ T6138] netlink: 224 bytes leftover after parsing attributes in process `syz.3.38'.
[   66.052915][ T5998] usb 5-1: device descriptor read/64, error -71
[   66.138909][ T6143] fuse: Unknown parameter 'user_i00000000000000000000'
[   66.151861][ T6144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=6144 comm=syz.3.38
[   66.162253][  T834] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   66.178005][ T6138] sock: sock_set_timeout: `syz.3.38' (pid 6138) tries to set negative timeout
[   66.181107][ T6138] netlink: 168 bytes leftover after parsing attributes in process `syz.3.38'.
[   66.292238][ T5998] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   66.322634][  T834] usb 7-1: Using ep0 maxpacket: 16
[   66.328462][  T834] usb 7-1: unable to read config index 0 descriptor/start: -61
[   66.331722][  T834] usb 7-1: can't read configurations, error -61
[   66.442253][ T5998] usb 5-1: device descriptor read/64, error -71
[   66.462330][  T834] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   66.563293][ T5998] usb usb5-port1: attempt power cycle
[   66.622171][  T834] usb 7-1: Using ep0 maxpacket: 16
[   66.622187][  T855] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   66.625385][  T834] usb 7-1: unable to read config index 0 descriptor/start: -61
[   66.628853][  T834] usb 7-1: can't read configurations, error -61
[   66.630816][  T834] usb usb7-port1: attempt power cycle
[   66.773538][  T855] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[   66.777742][  T855] usb 6-1: config 0 interface 0 has no altsetting 0
[   66.782641][  T855] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   66.786275][  T855] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   66.789648][  T855] usb 6-1: Product: syz
[   66.791381][  T855] usb 6-1: Manufacturer: syz
[   66.793786][  T855] usb 6-1: SerialNumber: syz
[   66.798504][  T855] usb 6-1: config 0 descriptor??
[   66.802900][ T6159] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   66.809641][  T855] usb 6-1: selecting invalid altsetting 0
[   66.889410][   T40] kauditd_printk_skb: 127 callbacks suppressed
[   66.889425][   T40] audit: type=1400 audit(1769279495.015:219): avc:  denied  { unlink } for  pid=5937 comm="syz-executor" name="file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   66.912356][ T5998] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   66.929558][ T6163] syzkaller1: entered promiscuous mode
[   66.932025][ T6163] syzkaller1: entered allmulticast mode
[   66.942749][ T5998] usb 5-1: device descriptor read/8, error -71
[   66.949729][ T6163] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   66.982267][  T834] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   67.002786][  T834] usb 7-1: Using ep0 maxpacket: 16
[   67.006081][  T834] usb 7-1: unable to read config index 0 descriptor/start: -61
[   67.008530][  T834] usb 7-1: can't read configurations, error -61
[   67.012630][   T40] audit: type=1400 audit(1769279495.145:220): avc:  denied  { ioctl } for  pid=6158 comm="syz.1.42" path="socket:[11591]" dev="sockfs" ino=11591 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   67.017228][   T29] usb 6-1: USB disconnect, device number 2
[   67.132194][  T834] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   67.152833][  T834] usb 7-1: Using ep0 maxpacket: 16
[   67.157068][  T834] usb 7-1: unable to read config index 0 descriptor/start: -61
[   67.160224][  T834] usb 7-1: can't read configurations, error -61
[   67.163295][  T834] usb usb7-port1: unable to enumerate USB device
[   67.212284][ T5998] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   67.232624][ T5998] usb 5-1: device descriptor read/8, error -71
[   67.342451][ T5998] usb usb5-port1: unable to enumerate USB device
[   67.345191][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   67.467648][   T40] audit: type=1400 audit(1769279495.595:221): avc:  denied  { mount } for  pid=6169 comm="syz.3.45" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   67.468037][ T6171] netlink: 'syz.3.45': attribute type 21 has an invalid length.
[   67.480039][ T6171] netlink: 'syz.3.45': attribute type 21 has an invalid length.
[   67.482890][ T6171] netlink: 'syz.3.45': attribute type 21 has an invalid length.
[   67.485440][ T6171] netlink: 'syz.3.45': attribute type 21 has an invalid length.
[   67.488021][ T6171] netlink: 'syz.3.45': attribute type 21 has an invalid length.
[   67.490707][ T6171] netlink: 'syz.3.45': attribute type 21 has an invalid length.
[   67.525631][   T40] audit: type=1400 audit(1769279495.655:222): avc:  denied  { mount } for  pid=6173 comm="syz.3.46" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   67.544257][   T40] audit: type=1400 audit(1769279495.675:223): avc:  denied  { mounton } for  pid=6173 comm="syz.3.46" path="/9/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[   67.553200][   T40] audit: type=1400 audit(1769279495.675:224): avc:  denied  { read } for  pid=6173 comm="syz.3.46" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   67.560744][   T40] audit: type=1400 audit(1769279495.675:225): avc:  denied  { open } for  pid=6173 comm="syz.3.46" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   67.599630][ T6175] 9p: Could not find request transport: unFÄix
[   67.631732][   T40] audit: type=1400 audit(1769279495.755:226): avc:  denied  { unmount } for  pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   67.799830][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.50'.
[   67.803308][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.50'.
[   67.833636][   T40] audit: type=1400 audit(1769279495.965:227): avc:  denied  { create } for  pid=6194 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   67.842674][ T5948] Bluetooth: hci0: command tx timeout
[   67.845821][   T40] audit: type=1400 audit(1769279495.975:228): avc:  denied  { ioctl } for  pid=6194 comm="syz.1.51" path="socket:[10477]" dev="sockfs" ino=10477 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   67.912263][ T5998] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   67.912418][ T5948] Bluetooth: hci1: command tx timeout
[   67.922436][ T5948] Bluetooth: hci3: command tx timeout
[   68.083886][ T5998] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.088673][ T5998] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.094826][ T5998] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   68.101066][ T5998] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   68.105309][ T5998] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.111435][ T5998] usb 8-1: config 0 descriptor??
[   68.227746][ T6222] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.247212][ T6222] gretap1: entered promiscuous mode
[   68.251110][ T6222] bond1: (slave gretap1): making interface the new active one
[   68.254614][ T6222] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   68.263300][ T6222] vlan2: entered allmulticast mode
[   68.265353][ T6222] veth0_to_bond: entered allmulticast mode
[   68.472783][ T1148] wlan1: Trigger new scan to find an IBSS to join
[   68.511445][ T6233] Invalid logical block size (6)
[   68.525438][ T5998] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd
[   68.542902][ T5998] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   68.784857][   T53] usb 8-1: USB disconnect, device number 2
[   68.805898][ T6247] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.926628][ T6257] Zero length message leads to an empty skb
[   69.045988][ T5948] Bluetooth: hci2: command tx timeout
[   69.127162][ T6283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=6283 comm=syz.1.70
[   69.363020][ T6300] geneve2: entered promiscuous mode
[   69.365418][ T6300] geneve2: entered allmulticast mode
[   69.805958][ T6328] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.912542][ T5948] Bluetooth: hci0: command tx timeout
[   69.994227][ T5942] Bluetooth: hci1: command tx timeout
[   69.994256][ T5948] Bluetooth: hci3: command tx timeout
[   70.217599][ T6359] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size.
[   70.283581][ T6368] tmpfs: Unknown parameter '«'
[   70.472187][ T6377] TCP: TCP_TX_DELAY enabled
[   70.590378][ T6388] __nla_validate_parse: 12 callbacks suppressed
[   70.590390][ T6388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.99'.
[   70.696208][ T6293] kexec: Could not allocate control_code_buffer
[   70.838845][ T6405] validate_nla: 61 callbacks suppressed
[   70.838856][ T6405] netlink: 'syz.1.102': attribute type 29 has an invalid length.
[   70.926072][ T6415] hpfs: hpfs_map_sector(): read error
[   70.934347][ T6414] hpfs: hpfs_map_sector(): read error
[   70.942471][ T6419] overlay: Unknown parameter 'fowner<00000000000000016832'
[   71.001064][ T6427] tmpfs: Unknown parameter 'nos÷ap'
[   71.109073][ T6438] tmpfs: Unknown parameter 'indo64'
[   71.157278][ T6440] input: syz1 as /devices/virtual/input/input6
[   71.400746][ T6450] bpf: Bad value for 'gid'
[   71.513104][ T1222] wlan1: Trigger new scan to find an IBSS to join
[   71.588673][ T6459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.121'.
[   71.788560][ T6472] x_tables: ip6_tables: udp match: only valid for protocol 17
[   71.792261][ T6473] x_tables: ip6_tables: udp match: only valid for protocol 17
[   71.886475][ T6481] overlayfs: unescaped trailing colons in lowerdir mount option.
[   71.903068][   T40] kauditd_printk_skb: 143 callbacks suppressed
[   71.903077][   T40] audit: type=1400 audit(1769279500.015:372): avc:  denied  { sqpoll } for  pid=6480 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   71.932710][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'.
[   72.039408][   T40] audit: type=1400 audit(1769279500.165:373): avc:  denied  { connect } for  pid=6490 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   72.050571][   T40] audit: type=1400 audit(1769279500.175:374): avc:  denied  { read } for  pid=6490 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   72.081923][ T6492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.129'.
[   72.125663][ T6491] trusted_key: encrypted_key: hex blob is missing
[   72.135882][   T40] audit: type=1400 audit(1769279500.265:375): avc:  denied  { unmount } for  pid=6490 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   72.247593][   T40] audit: type=1400 audit(1769279500.375:376): avc:  denied  { prog_run } for  pid=6494 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   72.305402][   T40] audit: type=1400 audit(1769279500.435:377): avc:  denied  { ioctl } for  pid=6494 comm="syz.3.132" path="socket:[9190]" dev="sockfs" ino=9190 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   72.443531][ T5948] Bluetooth: Unknown BR/EDR signaling command 0x0c
[   72.444794][ T6499] usb usb8: usbfs: process 6499 (syz.3.133) did not claim interface 0 before use
[   72.446242][ T5948] Bluetooth: Wrong link type (-22)
[   72.516022][ T6502] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   72.516049][   T40] audit: type=1400 audit(1769279500.645:378): avc:  denied  { getattr } for  pid=6501 comm="syz.3.134" name="/" dev="9p" ino=72876151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   72.745299][ T6507] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   72.758281][ T6509] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   72.799717][ T6512] =======================================================
[   72.799717][ T6512] WARNING: The mand mount option has been deprecated and
[   72.799717][ T6512]          and is ignored by this kernel. Remove the mand
[   72.799717][ T6512]          option from the mount to silence this warning.
[   72.799717][ T6512] =======================================================
[   72.815004][ T6512] overlay: Bad value for 'uuid'
[   72.817179][   T40] audit: type=1400 audit(1769279500.945:379): avc:  denied  { mounton } for  pid=6510 comm="syz.1.137" path="/41/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   72.833615][ T6512] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   72.842688][   T40] audit: type=1400 audit(1769279500.965:380): avc:  denied  { read } for  pid=6510 comm="syz.1.137" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   72.861550][   T40] audit: type=1400 audit(1769279500.965:381): avc:  denied  { read } for  pid=6510 comm="syz.1.137" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   72.969964][ T6531] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   72.975933][ T6531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.036530][ T5948] Bluetooth: hci2: Malformed HCI Event
[   73.052908][ T6535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6535 comm=syz.3.144
[   73.107358][ T6543] capability: warning: `syz.2.148' uses deprecated v2 capabilities in a way that may be insecure
[   73.164601][ T6550] ISOFS: Unable to identify CD-ROM format.
[   73.868879][ T6540] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   73.871116][ T6540] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   73.879071][ T6540] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   73.884699][ T6540] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   73.888155][ T6540] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   73.892363][ T6540] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   73.896159][ T6540] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   73.898151][ T6540] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   73.903439][ T6540] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   73.909071][ T6540] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   73.911833][ T6540] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   73.916458][ T6540] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   74.132967][ T6571] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[   74.228716][ T6579] 8021q: VLANs not supported on ip6gre0
[   74.233269][ T6580] 8021q: VLANs not supported on ip6gre0
[   74.233298][ T6573] SELinux:  Context system_u:object_r:dhcpd_initrc_exec_t:s0 is not valid (left unmapped).
[   74.307938][ T6586] netlink: 'syz.1.160': attribute type 10 has an invalid length.
[   74.311226][ T6586] netlink: 228 bytes leftover after parsing attributes in process `syz.1.160'.
[   74.483033][ T1148] wlan1: Creating new IBSS network, BSSID 92:44:20:36:44:66
[   74.570979][ T6605] ubi5: attaching mtd0
[   74.575767][ T6605] ubi5: scanning is finished
[   74.577853][ T6605] ubi5: empty MTD device detected
[   74.662753][ T6025] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   74.667157][ T6605] ubi5: attached mtd0 (name "mtdram test device", size 0 MiB)
[   74.670288][ T6605] ubi5: PEB size: 4096 bytes (4 KiB), LEB size: 1689 bytes
[   74.673452][ T6605] ubi5: min./max. I/O unit sizes: 1/64, sub-page size 1
[   74.677602][ T6605] ubi5: VID header offset: 2343 (aligned 2343), data offset: 2407
[   74.680984][ T6605] ubi5: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   74.684819][ T6605] ubi5: user volume: 0, internal volumes: 1, max. volumes count: 9
[   74.688616][ T6605] ubi5: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3910001627
[   74.692903][ T6605] ubi5: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   74.698132][ T6611] ubi5: background thread "ubi_bgt5d" started, PID 6611
[   74.815457][ T6025] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[   74.819630][ T6025] usb 7-1: config 0 interface 0 has no altsetting 0
[   74.834733][ T6025] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   74.838507][ T6025] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   74.841922][ T6025] usb 7-1: Product: syz
[   74.853318][ T6025] usb 7-1: Manufacturer: syz
[   74.855344][ T6025] usb 7-1: SerialNumber: syz
[   74.867004][ T6025] usb 7-1: config 0 descriptor??
[   74.871088][ T6596] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   74.885858][ T6025] usb 7-1: selecting invalid altsetting 0
[   74.899967][   T63] failed while handling packet from 1:-2
[   75.017327][ T6633] No source specified
[   75.093143][ T6596] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[   75.098813][ T6596] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[   75.112540][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout
[   75.121318][ T6594] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled
[   75.128049][ T6025] usb 7-1: USB disconnect, device number 6
[   75.713596][ T6650] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   75.720045][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'.
[   75.724620][ T6650] netlink: 'syz.2.171': attribute type 15 has an invalid length.
[   75.727043][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'.
[   75.737446][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'.
[   75.737498][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2048 - 0
[   75.740310][ T6650] netlink: 'syz.2.171': attribute type 15 has an invalid length.
[   75.746018][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'.
[   75.749521][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2048 - 0
[   75.755792][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2048 - 0
[   75.758841][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2048 - 0
[   75.912208][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout
[   75.912260][ T5943] Bluetooth: hci3: command 0x0c1a tx timeout
[   75.916519][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout
[   75.981591][ T6659] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   75.983963][ T6659] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   75.986427][ T6659] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   75.989860][ T6659] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   76.157136][ T6670] mmap: syz.1.176 (6670) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   76.179906][ T6670] geneve2: entered promiscuous mode
[   76.182271][ T6670] geneve2: entered allmulticast mode
[   76.237815][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[   76.591653][ T6700] program syz.1.182 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   76.596320][ T6700] ata1.00: invalid service action 31
[   76.782212][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   76.914240][   T40] kauditd_printk_skb: 41 callbacks suppressed
[   76.914256][   T40] audit: type=1400 audit(1769279505.045:423): avc:  denied  { watch } for  pid=6704 comm="syz.1.187" path="/59/file0" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   76.927362][   T40] audit: type=1400 audit(1769279505.045:424): avc:  denied  { watch_sb watch_reads } for  pid=6704 comm="syz.1.187" path="/59/file0" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   76.934154][    T9] usb 7-1: config index 0 descriptor too short (expected 39, got 27)
[   76.952223][    T9] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   76.956358][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[   76.963312][    T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   76.967149][    T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   76.970634][    T9] usb 7-1: Product: syz
[   76.982207][    T9] usb 7-1: Manufacturer: syz
[   76.984360][    T9] usb 7-1: SerialNumber: syz
[   76.989261][    T9] usb 7-1: config 0 descriptor??
[   76.990247][   T40] audit: type=1400 audit(1769279505.115:425): avc:  denied  { ioctl } for  pid=6708 comm="syz.1.188" path="socket:[15449]" dev="sockfs" ino=15449 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   76.994875][    T9] hub 7-1:0.0: bad descriptor, ignoring hub
[   77.005044][    T9] hub 7-1:0.0: probe with driver hub failed with error -5
[   77.011352][    T9] usb 7-1: selecting invalid altsetting 0
[   77.204810][ T5942] Bluetooth: hci0: unexpected event for opcode 0x0401
[   77.208693][ T6715] erofs: Unknown parameter 'acl'
[   77.211510][   T40] audit: type=1400 audit(1769279505.335:426): avc:  denied  { ioctl } for  pid=6712 comm="syz.3.189" path="socket:[15454]" dev="sockfs" ino=15454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   77.252334][ T5991] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   77.411342][ T5998] usb 7-1: USB disconnect, device number 7
[   77.424017][ T5991] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   77.428841][ T5991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.440264][ T5991] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   77.452204][ T5991] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   77.455112][ T5991] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   77.457695][ T5991] usb 6-1: Manufacturer: syz
[   77.486930][   T40] audit: type=1400 audit(1769279505.615:427): avc:  denied  { getopt } for  pid=6732 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   77.636220][ T6739] SELinux:  policydb version 1508930561 does not match my version range 15-35
[   77.639090][ T6739] SELinux: failed to load policy
[   77.640934][ T6740] SELinux:  policydb version 1508930561 does not match my version range 15-35
[   77.644101][ T6740] SELinux: failed to load policy
[   77.652264][   T40] audit: type=1400 audit(1769279505.765:428): avc:  denied  { ioctl } for  pid=6738 comm="syz.2.195" path="socket:[12819]" dev="sockfs" ino=12819 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   77.660887][   T40] audit: type=1400 audit(1769279505.765:429): avc:  denied  { load_policy } for  pid=6738 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   77.692247][ T6025] IPVS: starting estimator thread 0...
[   77.713078][ T5991] usb 6-1: config 0 descriptor??
[   77.755656][ T6750] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[   77.757848][ T6750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   77.761448][ T6750] vhci_hcd vhci_hcd.0: Device attached
[   77.764714][ T6753] vhci_hcd: unknown pdu 1
[   77.767011][ T6751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.769793][   T13] vhci_hcd vhci_hcd.2: stop threads
[   77.769992][ T6751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.771518][   T13] vhci_hcd vhci_hcd.2: release socket
[   77.776906][   T13] vhci_hcd vhci_hcd.2: disconnect device
[   77.793713][ T6744] IPVS: using max 43 ests per chain, 103200 per kthread
[   77.992190][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout
[   77.992227][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout
[   78.002185][ T5943] Bluetooth: hci3: command 0x0c1a tx timeout
[   78.022310][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   78.118884][ T5991] appleir 0003:05AC:8243.0003: unknown main item tag 0x0
[   78.125685][ T5991] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[   78.164155][    T9] usb 7-1: device descriptor read/64, error -71
[   78.422960][    T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[   78.482062][ T6778] IPv6: sit1: Disabled Multicast RS
[   78.484680][ T6778] sit1: entered allmulticast mode
[   78.542714][ T6778] bridge: RTM_NEWNEIGH with invalid state 0x4
[   78.562283][    T9] usb 7-1: device descriptor read/64, error -71
[   78.603163][   T40] audit: type=1400 audit(1769279506.735:430): avc:  denied  { open } for  pid=6782 comm="syz.3.204" path="/dev/ptyqb" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[   78.611773][   T40] audit: type=1400 audit(1769279506.735:431): avc:  denied  { ioctl } for  pid=6782 comm="syz.3.204" path="/dev/ptyqb" dev="devtmpfs" ino=138 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[   78.660684][   T40] audit: type=1400 audit(1769279506.785:432): avc:  denied  { read write } for  pid=6788 comm="syz.3.205" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   78.672629][    T9] usb usb7-port1: attempt power cycle
[   79.012197][    T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[   79.032916][    T9] usb 7-1: device descriptor read/8, error -71
[   79.292425][    T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[   79.316368][    T9] usb 7-1: device descriptor read/8, error -71
[   79.422529][    T9] usb usb7-port1: unable to enumerate USB device
[   79.714506][ T6804] loop9: detected capacity change from 0 to 7
[   79.720083][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   79.724144][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[   79.728419][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   79.732411][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[   79.736698][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   79.739800][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[   79.743017][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   79.746991][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[   79.751066][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   79.755147][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[   79.760145][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   79.763295][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[   79.766027][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   79.769710][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[   79.773145][ T6804] ldm_validate_partition_table(): Disk read failed.
[   79.862305][ T6805] support for the xor transformation has been removed.
[   79.866315][    C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   79.869464][    C3] Buffer I/O error on dev loop9, logical block 0, async page read
[   79.873344][    C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   79.876410][    C3] Buffer I/O error on dev loop9, logical block 0, async page read
[   79.879085][    C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   79.882161][    C3] Buffer I/O error on dev loop9, logical block 0, async page read
[   79.884908][ T6804] Dev loop9: unable to read RDB block 0
[   79.887263][ T6804]  loop9: unable to read partition table
[   79.889270][ T6804] loop9: partition table beyond EOD, truncated
[   79.892252][ T6804] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[   79.957916][ T6808] nfs4: Unknown parameter 'rdma#Ý"·8ÜϲÃþ;¦Dã!éõJ~ÇuPòà'+HÙÉò<72뮑¶gwZ»D6°Ø¶Ì|ú09Æ»ýö´wî®d¯Ù"Æ·ªµ'
[   80.072296][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout
[   80.072325][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout
[   80.076219][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout
[   80.081105][ T6821] netlink: 'syz.3.214': attribute type 1 has an invalid length.
[   80.088170][ T6821] netlink: 'syz.3.214': attribute type 39 has an invalid length.
[   80.140187][ T6823] netlink: 'syz.3.214': attribute type 1 has an invalid length.
[   80.474294][ T6831] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.489369][ T6833] 8021q: adding VLAN 0 to HW filter on device bond2
[   80.577761][ T6838] program syz.3.218 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   80.858291][ T6846] tipc: Started in network mode
[   80.860194][ T6846] tipc: Node identity 76cf027b0ac2, cluster identity 4711
[   80.863459][ T6846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.867168][ T6846] syzkaller0: entered promiscuous mode
[   80.869434][ T6846] syzkaller0: entered allmulticast mode
[   80.877397][ T6846] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   80.888448][ T6846] tipc: Resetting bearer <eth:syzkaller0>
[   80.893159][ T6845] tipc: Resetting bearer <eth:syzkaller0>
[   80.901648][ T6845] tipc: Disabling bearer <eth:syzkaller0>
[   81.064934][ T6855] netlink: 36 bytes leftover after parsing attributes in process `syz.2.224'.
[   81.071401][ T6855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.224'.
[   81.129155][ T6857] batman_adv: batadv0: Adding interface: veth0_to_bridge
[   81.131745][ T6857] batman_adv: batadv0: The MTU of interface veth0_to_bridge is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.142337][ T6857] batman_adv: batadv0: Interface activated: veth0_to_bridge
[   81.179858][ T6860] ext4: Unknown parameter 'nfs'
[   81.373858][ T6872] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   81.640065][ T6893] random: crng reseeded on system resumption
[   81.998693][   T40] kauditd_printk_skb: 176 callbacks suppressed
[   81.998706][   T40] audit: type=1400 audit(1769279510.125:609): avc:  denied  { read } for  pid=6916 comm="syz.2.239" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   82.008345][   T40] audit: type=1400 audit(1769279510.125:610): avc:  denied  { open } for  pid=6916 comm="syz.2.239" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   82.018403][   T40] audit: type=1400 audit(1769279510.125:611): avc:  denied  { ioctl } for  pid=6916 comm="syz.2.239" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   82.027012][   T40] audit: type=1400 audit(1769279510.125:612): avc:  denied  { set_context_mgr } for  pid=6916 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   82.055329][   T40] audit: type=1400 audit(1769279510.175:613): avc:  denied  { setopt } for  pid=6918 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   82.061584][   T40] audit: type=1400 audit(1769279510.185:614): avc:  denied  { write } for  pid=6918 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   82.077900][   T40] audit: type=1400 audit(1769279510.205:615): avc:  denied  { mounton } for  pid=6918 comm="syz.2.240" path="/syzcgroup/unified/syz2" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[   82.090924][ T6919] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32
[   82.154483][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout
[   82.233647][   T40] audit: type=1400 audit(1769279510.365:616): avc:  denied  { remount } for  pid=6922 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   82.573296][   T40] audit: type=1400 audit(1769279510.705:617): avc:  denied  { setopt } for  pid=6926 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   82.615095][ T6931] program syz.3.244 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   82.787178][   T40] audit: type=1400 audit(1769279510.915:618): avc:  denied  { append } for  pid=6930 comm="syz.3.244" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   83.119808][ T6937] sctp: [Deprecated]: syz.2.245 (pid 6937) Use of int in max_burst socket option.
[   83.119808][ T6937] Use struct sctp_assoc_value instead
[   83.165261][ T6941] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.246'.
[   83.169143][ T6941] netlink: 196 bytes leftover after parsing attributes in process `syz.2.246'.
[   83.173025][ T6941] netlink: 196 bytes leftover after parsing attributes in process `syz.2.246'.
[   83.175865][ T6941] netlink: 19 bytes leftover after parsing attributes in process `syz.2.246'.
[   83.209601][ T6943] capability: warning: `syz.2.247' uses 32-bit capabilities (legacy support in use)
[   83.459612][ T5991] usb 6-1: USB disconnect, device number 3
[   83.872752][ T6963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.029825][ T6971] netlink: 'syz.3.255': attribute type 5 has an invalid length.
[   84.571294][ T7004] netlink: 96 bytes leftover after parsing attributes in process `syz.3.265'.
[   84.612634][    T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[   84.762589][    T9] usb 7-1: Using ep0 maxpacket: 8
[   84.766510][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[   84.768863][    T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   84.772271][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.777719][    T9] usb 7-1: config 0 descriptor??
[   84.990989][    T9] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[   85.190146][    T9] usb 7-1: USB disconnect, device number 12
[   85.779804][ T7007] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   85.791241][ T7007] CIFS mount error: No usable UNC path provided in device string!
[   85.791241][ T7007] 
[   85.797000][ T7007] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   85.849778][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.267'.
[   85.887953][ T7010] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7010 comm=syz.2.267
[   86.167289][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.170930][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.300901][ T5942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   86.307180][ T5942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   86.312325][ T5942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.315180][ T5942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.317718][ T5942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.319671][ T7025] VFS: Mount too revealing
[   86.482512][   T60] cfg80211: failed to load regulatory.db
[   86.509222][ T7027] chnl_net:caif_netlink_parms(): no params data found
[   86.576577][   T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.627510][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.630533][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.633622][ T7027] bridge_slave_0: entered allmulticast mode
[   86.637253][ T7027] bridge_slave_0: entered promiscuous mode
[   86.641305][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.644274][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.647103][ T7027] bridge_slave_1: entered allmulticast mode
[   86.650741][ T7027] bridge_slave_1: entered promiscuous mode
[   86.664071][    T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[   86.669058][   T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.708141][ T7027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.719245][ T7027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.779313][   T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.794908][ T7027] team0: Port device team_slave_0 added
[   86.799899][ T7027] team0: Port device team_slave_1 added
[   86.822265][    T9] usb 7-1: Using ep0 maxpacket: 16
[   86.822973][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.825830][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[   86.826791][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.829513][    T9] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   86.838014][ T7027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.839015][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.842199][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.846028][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.860668][ T7027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.863138][    T9] usb 7-1: config 0 descriptor??
[   86.883222][   T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.925776][ T7027] hsr_slave_0: entered promiscuous mode
[   86.928351][ T7027] hsr_slave_1: entered promiscuous mode
[   86.930634][ T7027] debugfs: 'hsr0' already exists in 'hsr'
[   86.932710][ T7027] Cannot create hsr debugfs directory
[   86.934061][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'.
[   87.038290][   T63] bridge_slave_1: left allmulticast mode
[   87.041380][   T63] bridge_slave_1: left promiscuous mode
[   87.044621][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.049643][   T63] bridge_slave_0: left allmulticast mode
[   87.051514][   T63] bridge_slave_0: left promiscuous mode
[   87.054725][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.245789][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.252170][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.257439][   T63] bond0 (unregistering): Released all slaves
[   87.278218][    T9] hid (null): global environment stack underflow
[   87.280283][    T9] hid (null): unknown global tag 0xe
[   87.282857][    T9] hid (null): unknown global tag 0xf7
[   87.354860][ T7027] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   87.361727][ T7027] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   87.369253][ T7027] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   87.375942][ T7027] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   87.461553][ T7027] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.477046][ T7027] 8021q: adding VLAN 0 to HW filter on device team0
[   87.477771][   T40] kauditd_printk_skb: 24 callbacks suppressed
[   87.477780][   T40] audit: type=1400 audit(1769279515.605:643): avc:  denied  { ioctl } for  pid=7034 comm="syz.2.275" path="socket:[17437]" dev="sockfs" ino=17437 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   87.517187][ T5004] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.519546][ T5004] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.535918][ T5004] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.539040][ T5004] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.563425][   T63] hsr_slave_0: left promiscuous mode
[   87.566274][   T63] hsr_slave_1: left promiscuous mode
[   87.568898][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.571668][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.576160][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.578656][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.581109][   T40] audit: type=1400 audit(1769279515.705:644): avc:  denied  { watch } for  pid=7034 comm="syz.2.275" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   87.589811][   T40] audit: type=1400 audit(1769279515.705:645): avc:  denied  { watch_sb watch_reads } for  pid=7034 comm="syz.2.275" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1
[   87.603835][   T61] usb 7-1: USB disconnect, device number 13
[   87.610142][   T63] veth1_macvtap: left promiscuous mode
[   87.612913][   T63] veth0_macvtap: left promiscuous mode
[   87.614891][   T63] veth1_vlan: left promiscuous mode
[   87.616667][   T63] veth0_vlan: left promiscuous mode
[   87.686829][   T40] audit: type=1400 audit(1769279515.815:646): avc:  denied  { mount } for  pid=7071 comm="syz.1.279" name="/" dev="ramfs" ino=14860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   87.701174][   T40] audit: type=1400 audit(1769279515.825:647): avc:  denied  { mounton } for  pid=7071 comm="syz.1.279" path="/file0" dev="ramfs" ino=15851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   87.717548][ T7074] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   87.719961][ T7074] overlayfs: failed to set xattr on upper
[   87.721788][ T7074] overlayfs: ...falling back to redirect_dir=nofollow.
[   87.729494][ T7074] overlayfs: ...falling back to index=off.
[   87.731429][ T7074] overlayfs: ...falling back to uuid=null.
[   87.739245][ T7072] overlayfs: missing 'lowerdir'
[   87.747060][ T7072] overlayfs: missing 'lowerdir'
[   87.754757][ T7072] overlayfs: missing 'lowerdir'
[   87.757978][ T7072] overlayfs: missing 'lowerdir'
[   87.760277][ T7072] overlayfs: missing 'lowerdir'
[   87.762610][ T7072] overlayfs: missing 'lowerdir'
[   87.765846][ T7072] overlayfs: missing 'lowerdir'
[   87.770261][ T7072] overlayfs: missing 'lowerdir'
[   87.778898][ T7072] overlayfs: missing 'lowerdir'
[   87.786523][ T7072] overlayfs: missing 'lowerdir'
[   87.793019][ T7072] overlayfs: missing 'lowerdir'
[   87.795457][ T7072] overlayfs: missing 'lowerdir'
[   87.800216][ T7072] overlayfs: missing 'lowerdir'
[   87.804381][ T7072] overlayfs: missing 'lowerdir'
[   87.811120][ T7072] overlayfs: missing 'lowerdir'
[   87.814757][ T7072] overlayfs: missing 'lowerdir'
[   87.817684][ T7072] overlayfs: missing 'lowerdir'
[   87.821175][ T7072] overlayfs: missing 'lowerdir'
[   87.824391][ T7072] overlayfs: missing 'lowerdir'
[   87.831949][ T7072] overlayfs: missing 'lowerdir'
[   87.835445][ T7072] overlayfs: missing 'lowerdir'
[   87.840764][ T7072] overlayfs: missing 'lowerdir'
[   87.844468][ T7072] overlayfs: missing 'lowerdir'
[   87.847114][ T7072] overlayfs: missing 'lowerdir'
[   87.850146][ T7072] overlayfs: missing 'lowerdir'
[   87.854759][ T7072] overlayfs: missing 'lowerdir'
[   87.860676][ T7072] overlayfs: missing 'lowerdir'
[   87.864001][ T7072] overlayfs: missing 'lowerdir'
[   87.866415][ T7072] overlayfs: missing 'lowerdir'
[   87.871754][ T7072] overlayfs: missing 'lowerdir'
[   87.875753][ T7072] overlayfs: missing 'lowerdir'
[   87.882184][ T7072] overlayfs: missing 'lowerdir'
[   87.885771][ T7072] overlayfs: missing 'lowerdir'
[   87.888270][ T7072] overlayfs: missing 'lowerdir'
[   87.895049][ T7072] overlayfs: missing 'lowerdir'
[   87.899025][ T7072] overlayfs: missing 'lowerdir'
[   87.904646][ T7072] overlayfs: missing 'lowerdir'
[   87.908401][ T7072] overlayfs: missing 'lowerdir'
[   87.910699][ T7072] overlayfs: missing 'lowerdir'
[   87.915358][ T7072] overlayfs: missing 'lowerdir'
[   87.919135][ T7072] overlayfs: missing 'lowerdir'
[   87.921333][ T7072] overlayfs: missing 'lowerdir'
[   87.926661][ T7072] overlayfs: missing 'lowerdir'
[   87.931277][ T7072] overlayfs: missing 'lowerdir'
[   87.933771][ T7072] overlayfs: missing 'lowerdir'
[   87.939322][ T7072] overlayfs: missing 'lowerdir'
[   87.942668][ T7072] overlayfs: missing 'lowerdir'
[   87.945394][ T7072] overlayfs: missing 'lowerdir'
[   87.948666][ T7072] overlayfs: missing 'lowerdir'
[   87.951666][ T7072] overlayfs: missing 'lowerdir'
[   87.957389][ T7072] overlayfs: missing 'lowerdir'
[   87.960699][ T7072] overlayfs: missing 'lowerdir'
[   87.966107][ T7072] overlayfs: missing 'lowerdir'
[   87.969295][ T7072] overlayfs: missing 'lowerdir'
[   87.972059][ T7072] overlayfs: missing 'lowerdir'
[   87.979506][ T7072] overlayfs: missing 'lowerdir'
[   87.982694][ T7072] overlayfs: missing 'lowerdir'
[   87.985010][   T63] team0 (unregistering): Port device team_slave_1 removed
[   87.985136][ T7072] overlayfs: missing 'lowerdir'
[   87.990511][ T7072] overlayfs: missing 'lowerdir'
[   87.995523][ T7072] overlayfs: missing 'lowerdir'
[   87.999193][ T7072] overlayfs: missing 'lowerdir'
[   88.004522][ T7072] overlayfs: missing 'lowerdir'
[   88.007612][ T7072] overlayfs: missing 'lowerdir'
[   88.009759][   T63] team0 (unregistering): Port device team_slave_0 removed
[   88.009885][ T7072] overlayfs: missing 'lowerdir'
[   88.014671][ T7072] overlayfs: missing 'lowerdir'
[   88.085013][   T40] audit: type=1400 audit(1769279516.215:648): avc:  denied  { connect } for  pid=7079 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   88.095145][   T40] audit: type=1400 audit(1769279516.225:649): avc:  denied  { ioctl } for  pid=7079 comm="syz.1.281" path="socket:[16580]" dev="sockfs" ino=16580 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   88.103791][   T40] audit: type=1400 audit(1769279516.225:650): avc:  denied  { ioctl } for  pid=7079 comm="syz.1.281" path="socket:[16581]" dev="sockfs" ino=16581 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   88.199170][   T40] audit: type=1400 audit(1769279516.325:651): avc:  denied  { read } for  pid=7083 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   88.253992][   T40] audit: type=1400 audit(1769279516.385:652): avc:  denied  { watch_mount } for  pid=7083 comm="syz.1.283" path="/69" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   88.304538][ T7075] tipc: Started in network mode
[   88.306150][ T7075] tipc: Node identity 62452324d7c5, cluster identity 4711
[   88.308550][ T7075] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.321052][ T7075] tipc: Disabling bearer <eth:syzkaller0>
[   88.398327][ T5942] Bluetooth: hci4: command tx timeout
[   88.466994][ T7027] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.488575][ T7100] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in;
[   88.488575][ T7100]    program syz.3.285 not setting count and/or reply_len properly
[   88.644559][ T7027] veth0_vlan: entered promiscuous mode
[   88.651202][ T7027] veth1_vlan: entered promiscuous mode
[   88.683805][ T7027] veth0_macvtap: entered promiscuous mode
[   88.688048][ T7027] veth1_macvtap: entered promiscuous mode
[   88.697884][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.705990][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.716698][ T1213] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.720179][ T5004] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.729404][ T5004] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.733788][ T5004] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.736263][ T7127] fuse: Unknown parameter 'user_id00000000000000000000'
[   88.772680][ T5004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.777983][ T5004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.791067][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.799025][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.954780][ T7140] syz.4.293 (7140) used greatest stack depth: 18168 bytes left
[   89.011802][ T7143] netlink: 152 bytes leftover after parsing attributes in process `syz.3.294'.
[   89.081581][ T7151] fuse: Unknown parameter 'user_id00000000000000000000'
[   89.130133][ T1213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2048 - 0
[   89.142679][ T1213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.195369][ T7163] tmpfs: Bad value for 'mpol'
[   89.266824][ T1213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2048 - 0
[   89.270506][ T1213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.331584][ T7166] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[   89.389170][ T1213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2048 - 0
[   89.392593][ T1213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.479974][ T1213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2048 - 0
[   89.484056][ T1213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.515917][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.521664][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.525672][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.530133][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.533913][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.673956][ T1213] bridge_slave_1: left allmulticast mode
[   89.676284][ T1213] bridge_slave_1: left promiscuous mode
[   89.678663][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.683501][ T1213] bridge_slave_0: left allmulticast mode
[   89.685780][ T1213] bridge_slave_0: left promiscuous mode
[   89.688252][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.802224][  T834] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   89.916748][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.923424][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   89.928844][ T1213] bond0 (unregistering): Released all slaves
[   89.973882][  T834] usb 6-1: unable to get BOS descriptor or descriptor too short
[   89.985370][  T834] usb 6-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config
[   89.988822][  T834] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   90.004801][  T834] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   90.008537][  T834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.011309][  T834] usb 6-1: Product: syz
[   90.012647][ T1213] bond1 (unregistering): Released all slaves
[   90.018790][  T834] usb 6-1: Manufacturer: syz
[   90.022250][  T834] usb 6-1: SerialNumber: syz
[   90.059540][ T7178] chnl_net:caif_netlink_parms(): no params data found
[   90.178045][ T1213] tipc: Left network mode
[   90.204996][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.208215][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.208706][ T7196] fuse: Unknown parameter 'user_id00000000000000000000'
[   90.211340][ T7178] bridge_slave_0: entered allmulticast mode
[   90.223132][ T7178] bridge_slave_0: entered promiscuous mode
[   90.233920][ T7181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.237996][ T7181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.258441][  T834] usb 6-1: 0:2 : does not exist
[   90.260954][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.264548][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.266823][ T7178] bridge_slave_1: entered allmulticast mode
[   90.269079][  T834] usb 6-1: USB disconnect, device number 4
[   90.273251][ T7178] bridge_slave_1: entered promiscuous mode
[   90.290679][ T6631] udevd[6631]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   90.341364][ T7178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.346083][ T7178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.388592][ T7178] team0: Port device team_slave_0 added
[   90.392898][ T7178] team0: Port device team_slave_1 added
[   90.399655][ T7205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.310'.
[   90.421812][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'.
[   90.435115][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.437620][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.446044][ T7178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.453074][ T7178] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.455825][ T7178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.464497][ T7178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.472212][ T5948] Bluetooth: hci4: command tx timeout
[   90.502064][ T7205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7205 comm=syz.4.310
[   90.529833][ T1213] hsr_slave_0: left promiscuous mode
[   90.532535][ T1213] hsr_slave_1: left promiscuous mode
[   90.535236][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.537622][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.543436][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.546658][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.550421][ T1213] batman_adv: batadv0: Interface deactivated: veth0_to_bridge
[   90.557523][ T1213] batman_adv: batadv0: Removing interface: veth0_to_bridge
[   90.575496][ T1213] veth1_macvtap: left promiscuous mode
[   90.578138][ T1213] veth0_macvtap: left promiscuous mode
[   90.580672][ T1213] veth1_vlan: left promiscuous mode
[   90.583858][ T1213] veth0_vlan: left promiscuous mode
[   90.616071][ T7216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=7216 comm=syz.4.310
[   90.793640][ T7226] fuse: Bad value for 'fd'
[   90.969101][ T1213] team0 (unregistering): Port device team_slave_1 removed
[   90.977111][ T7233] can: request_module (can-proto-0) failed.
[   90.995166][ T1213] team0 (unregistering): Port device team_slave_0 removed
[   91.101568][ T7235] random: crng reseeded on system resumption
[   91.237339][ T7178] hsr_slave_0: entered promiscuous mode
[   91.239577][ T7178] hsr_slave_1: entered promiscuous mode
[   91.241598][ T7178] debugfs: 'hsr0' already exists in 'hsr'
[   91.244158][ T7178] Cannot create hsr debugfs directory
[   91.250259][ T7227] pimreg: tun_chr_ioctl cmd 1074025675
[   91.252130][ T7227] pimreg: persist enabled
[   91.454801][ T7178] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   91.464544][ T7178] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   91.470683][ T7178] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   91.476973][ T7178] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   91.534028][ T7178] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.545635][ T7274] fuse: Bad value for 'fd'
[   91.560181][ T7178] 8021q: adding VLAN 0 to HW filter on device team0
[   91.573640][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.576726][ T4691] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.596045][ T5948] Bluetooth: hci1: command tx timeout
[   91.600316][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.602735][ T4691] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.619550][ T5948] Bluetooth: hci4: SCO packet for unknown connection handle 0
[   91.678518][ T7287] Failed to get privilege flags for destination (handle=0x2:0x0)
[   91.704679][ T1213] IPVS: stop unused estimator thread 0...
[   91.715705][ T7291] overlayfs: failed to resolve './file1': -2
[   91.725523][ T7178] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.869567][ T7178] veth0_vlan: entered promiscuous mode
[   91.879775][ T7178] veth1_vlan: entered promiscuous mode
[   91.901344][ T7178] veth0_macvtap: entered promiscuous mode
[   91.909276][ T7178] veth1_macvtap: entered promiscuous mode
[   91.918763][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.926111][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.934031][   T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.937099][   T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.969774][   T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.975261][   T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.071561][ T5004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.075952][ T5004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.099443][ T1222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.103608][ T1222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.119178][ T7321] netlink: 'syz.1.334': attribute type 1 has an invalid length.
[   92.141299][ T7321] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.184532][ T7321] vlan2: entered allmulticast mode
[   92.188425][ T7321] bond2: (slave vlan2): making interface the new active one
[   92.196987][ T7321] bond2: (slave vlan2): Enslaving as an active interface with an up link
[   92.247627][ T7339] fuse: Bad value for 'fd'
[   92.417880][ T7341] overlay: ./file1 is not a directory
[   92.519970][   T40] kauditd_printk_skb: 27 callbacks suppressed
[   92.519986][   T40] audit: type=1400 audit(1769279520.645:680): avc:  denied  { ioctl } for  pid=7349 comm="syz.4.341" path="socket:[15349]" dev="sockfs" ino=15349 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   92.533296][ T7351] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   92.552494][ T5948] Bluetooth: hci4: command tx timeout
[   92.618134][   T40] audit: type=1400 audit(1769279520.745:681): avc:  denied  { execute } for  pid=7358 comm="syz.4.343" name="file2" dev="ramfs" ino=18018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   92.632772][   T40] audit: type=1400 audit(1769279520.745:682): avc:  denied  { execute_no_trans } for  pid=7358 comm="syz.4.343" path="/file2" dev="ramfs" ino=18018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   92.703307][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.712210][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.717790][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.340'.
[   92.718281][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.727456][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.732550][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.736416][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.740309][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.744453][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.748146][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.752042][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.755779][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.758763][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.761680][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.764997][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.768265][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.772069][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.776742][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.780548][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.784746][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.788652][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.792684][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.796430][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.800306][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.804023][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.807024][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.810934][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.815066][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.818849][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.822786][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.826499][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.830122][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.834704][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   92.838290][ T7363] usb usb2: usbfs: interface 0 claimed by hub while 'syz.4.344' sets config #1
[   93.099064][ T7372] fuse: Unknown parameter '0x0000000000000003'
[   93.202832][   T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   93.342655][   T34] usb 9-1: device descriptor read/64, error -71
[   93.381523][   T40] audit: type=1400 audit(1769279521.505:683): avc:  denied  { bind } for  pid=7384 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   93.417928][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'.
[   93.565182][   T40] audit: type=1400 audit(1769279521.695:684): avc:  denied  { read } for  pid=7399 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   93.582403][   T34] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   93.615753][ T7400] netlink: 45 bytes leftover after parsing attributes in process `syz.3.355'.
[   93.672558][ T5948] Bluetooth: hci1: command tx timeout
[   93.712307][   T34] usb 9-1: device descriptor read/64, error -71
[   93.833056][   T34] usb usb9-port1: attempt power cycle
[   93.883950][ T7406] ALSA: mixer_oss: invalid OSS volume ''
[   93.901530][ T7411] netlink: 32 bytes leftover after parsing attributes in process `syz.3.358'.
[   94.004481][   T40] audit: type=1400 audit(1769279522.135:685): avc:  denied  { create } for  pid=7417 comm="syz.3.361" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   94.012900][   T40] audit: type=1400 audit(1769279522.135:686): avc:  denied  { write } for  pid=7417 comm="syz.3.361" name="file0" dev="9p" ino=72876161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   94.018342][ T7420] overlay: ./file0 is not a directory
[   94.021769][   T40] audit: type=1400 audit(1769279522.135:687): avc:  denied  { open } for  pid=7417 comm="syz.3.361" path="/115/file0/file0" dev="9p" ino=72876161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   94.031495][   T40] audit: type=1400 audit(1769279522.145:688): avc:  denied  { mounton } for  pid=7417 comm="syz.3.361" path="/115/file0/file0" dev="9p" ino=72876161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   94.202451][   T34] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   94.222852][   T34] usb 9-1: device descriptor read/8, error -71
[   94.227998][ T7431] netlink: 52 bytes leftover after parsing attributes in process `syz.5.364'.
[   94.260153][ T7434] fuse: Unknown parameter '0x0000000000000003'
[   94.292000][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.5.364'.
[   94.292264][    T9] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[   94.445092][    T9] usb 8-1: config 0 has an invalid interface number: 205 but max is 0
[   94.447970][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.454754][    T9] usb 8-1: config 0 has no interface number 0
[   94.457966][    T9] usb 8-1: config 0 interface 205 has no altsetting 0
[   94.463054][    T9] usb 8-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[   94.466858][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.470884][    T9] usb 8-1: Product: syz
[   94.474757][    T9] usb 8-1: Manufacturer: syz
[   94.476387][    T9] usb 8-1: SerialNumber: syz
[   94.479913][    T9] usb 8-1: config 0 descriptor??
[   94.492355][   T34] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[   94.493082][    T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[   94.499213][    T9] dvb-usb: bulk message failed: -22 (3/0)
[   94.512687][   T34] usb 9-1: device descriptor read/8, error -71
[   94.516194][    T9] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   94.519454][    T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[   94.524052][    T9] usb 8-1: media controller created
[   94.527462][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   94.536750][    T9] dvb-usb: bulk message failed: -22 (6/0)
[   94.537315][   T40] audit: type=1400 audit(1769279522.665:689): avc:  denied  { remount } for  pid=7444 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   94.539154][    T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[   94.552029][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input7
[   94.559756][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[   94.562048][    T9] dvb-usb: bulk message failed: -22 (3/0)
[   94.592194][    T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[   94.632215][ T5948] Bluetooth: hci4: command tx timeout
[   94.632498][   T34] usb usb9-port1: unable to enumerate USB device
[   94.714390][    T9] dvb-usb: bulk message failed: -22 (1/0)
[   94.717200][    T9] dvb-usb: error while querying for an remote control event.
[   94.882832][    T9] dvb-usb: bulk message failed: -22 (1/0)
[   94.889306][    T9] dvb-usb: error while querying for an remote control event.
[   95.054841][ T6034] dvb-usb: bulk message failed: -22 (1/0)
[   95.056812][ T6034] dvb-usb: error while querying for an remote control event.
[   95.057325][ T7469] fuse: Unknown parameter '0x0000000000000003'
[   95.175422][ T7471] QAT: Stopping all acceleration devices.
[   95.219111][ T7475] openvswitch: netlink: Flow actions attr not present in new flow.
[   95.222184][ T6034] dvb-usb: bulk message failed: -22 (1/0)
[   95.226891][ T6034] dvb-usb: error while querying for an remote control event.
[   95.289465][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.378'.
[   95.382304][ T6034] dvb-usb: bulk message failed: -22 (1/0)
[   95.384606][ T6034] dvb-usb: error while querying for an remote control event.
[   95.422538][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.461461][ T7493] bridge_slave_0 (unregistering): left allmulticast mode
[   95.464741][ T7493] bridge_slave_0 (unregistering): left promiscuous mode
[   95.467774][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.472713][ T7496] 9pnet_virtio: no channels available for device syz
[   95.557213][ T6034] dvb-usb: bulk message failed: -22 (1/0)
[   95.559974][ T6034] dvb-usb: error while querying for an remote control event.
[   95.657195][ T7499] fuse: Unknown parameter '0x0000000000000003'
[   95.725544][ T6034] dvb-usb: bulk message failed: -22 (1/0)
[   95.727949][ T6034] dvb-usb: error while querying for an remote control event.
[   95.754319][ T5948] Bluetooth: hci1: command tx timeout
[   95.813032][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.384'.
[   95.817081][ T7501] bridge_slave_1: left allmulticast mode
[   95.819652][ T7501] bridge_slave_1: left promiscuous mode
[   95.823224][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.882769][    T9] dvb-usb: bulk message failed: -22 (1/0)
[   95.885062][    T9] dvb-usb: error while querying for an remote control event.
[   96.042239][ T6034] dvb-usb: bulk message failed: -22 (1/0)
[   96.044774][ T6034] dvb-usb: error while querying for an remote control event.
[   96.203019][ T7535] fuse: Unknown parameter '0x0000000000000003'
[   96.203079][ T6034] dvb-usb: bulk message failed: -22 (1/0)
[   96.203404][ T7528] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   96.214679][ T6034] dvb-usb: error while querying for an remote control event.
[   96.372615][ T6034] dvb-usb: bulk message failed: -22 (1/0)
[   96.375336][ T6034] dvb-usb: error while querying for an remote control event.
[   96.494788][ T7553] binder: BINDER_SET_CONTEXT_MGR already set
[   96.497947][ T7553] binder: 7552:7553 ioctl 4018620d 2000000001c0 returned -16
[   96.533356][ T6034] dvb-usb: bulk message failed: -22 (1/0)
[   96.535380][ T6034] dvb-usb: error while querying for an remote control event.
[   96.564997][ T7564] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[   96.567961][ T7564] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   96.571581][ T7564] vhci_hcd vhci_hcd.0: Device attached
[   96.572075][ T7557] binder_alloc: 7552: binder_alloc_buf size 65856 failed, no address space
[   96.577332][ T7557] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280)
[   96.579351][ T7565] vhci_hcd: connection closed
[   96.580704][ T4691] vhci_hcd vhci_hcd.5: stop threads
[   96.582333][ T7557] binder: 7552:7557 ioctl aea2 800 returned -22
[   96.583792][ T4691] vhci_hcd vhci_hcd.5: release socket
[   96.590062][ T4691] vhci_hcd vhci_hcd.5: disconnect device
[   96.651534][ T7569] fuse: Unknown parameter 'fd0x0000000000000003'
[   96.692200][ T6034] dvb-usb: bulk message failed: -22 (1/0)
[   96.694796][ T6034] dvb-usb: error while querying for an remote control event.
[   96.795763][ T7577] sctp: [Deprecated]: syz.4.406 (pid 7577) Use of struct sctp_assoc_value in delayed_ack socket option.
[   96.795763][ T7577] Use struct sctp_sack_info instead
[   96.852194][ T6034] dvb-usb: bulk message failed: -22 (1/0)
[   96.854819][ T6034] dvb-usb: error while querying for an remote control event.
[   96.965489][ T5998] usb 8-1: USB disconnect, device number 3
[   96.998531][ T5998] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[   97.119437][ T7592] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   97.127631][ T7594] fuse: Unknown parameter 'fd0x0000000000000003'
[   97.153634][ T7592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7592 comm=syz.3.412
[   97.262759][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.415'.
[   97.364036][ T7607] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5147 sclass=netlink_xfrm_socket pid=7607 comm=syz.5.416
[   97.489296][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'.
[   97.547010][ T7612] netlink: 'syz.3.418': attribute type 29 has an invalid length.
[   97.550353][ T7612] netlink: 'syz.3.418': attribute type 3 has an invalid length.
[   97.556570][   T40] kauditd_printk_skb: 26 callbacks suppressed
[   97.556592][   T40] audit: type=1400 audit(1769279525.685:716): avc:  denied  { read } for  pid=7610 comm="syz.3.418" dev="sockfs" ino=21623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   97.832876][ T5948] Bluetooth: hci1: command tx timeout
[   98.014954][ T7618] __nla_validate_parse: 1 callbacks suppressed
[   98.014968][ T7618] netlink: 1400 bytes leftover after parsing attributes in process `syz.5.419'.
[   98.020019][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.5.419'.
[   98.103914][   T40] audit: type=1804 audit(1769279526.235:717): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.421" name="bus" dev="ramfs" ino=20761 res=1 errno=0
[   98.111367][   T40] audit: type=1804 audit(1769279526.235:718): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.421" name="bus" dev="ramfs" ino=20761 res=1 errno=0
[   98.247418][ T7629] netlink: 32 bytes leftover after parsing attributes in process `syz.1.422'.
[   98.310225][ T7637] fuse: Unknown parameter 'fd0x0000000000000003'
[   98.365300][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'.
[   98.551354][ T7668] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.434'.
[   98.551357][   T40] audit: type=1400 audit(1769279526.675:719): avc:  denied  { write } for  pid=7665 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   98.557757][ T7668] random: crng reseeded on system resumption
[   98.670209][ T7672] block device autoloading is deprecated and will be removed.
[   98.703869][   T40] audit: type=1400 audit(1769279526.835:720): avc:  denied  { accept } for  pid=7681 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   98.705794][ T7682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.439'.
[   98.750075][ T7685] netlink: 88 bytes leftover after parsing attributes in process `syz.3.440'.
[   98.859460][   T40] audit: type=1400 audit(1769279526.985:721): avc:  denied  { write } for  pid=7694 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   98.896687][   T40] audit: type=1400 audit(1769279527.025:722): avc:  denied  { connect } for  pid=7696 comm="syz.5.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   98.902212][ T7698] netlink: 'syz.3.447': attribute type 1 has an invalid length.
[   98.908083][ T7698] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[   98.986407][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.448'.
[   99.002895][ T7713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7713 comm=syz.5.448
[   99.027001][ T1148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.152036][ T7721] netlink: 100 bytes leftover after parsing attributes in process `syz.3.453'.
[   99.187176][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   99.187377][ T1148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.195332][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   99.198929][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   99.204096][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   99.208129][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   99.271954][ T1148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.348756][ T1148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.363425][ T7723] chnl_net:caif_netlink_parms(): no params data found
[   99.427510][ T7723] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.430398][ T7723] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.433172][ T7723] bridge_slave_0: entered allmulticast mode
[   99.435884][ T7723] bridge_slave_0: entered promiscuous mode
[   99.439299][ T7723] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.441641][ T7723] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.444075][ T7723] bridge_slave_1: entered allmulticast mode
[   99.446670][ T7723] bridge_slave_1: entered promiscuous mode
[   99.469139][ T7723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.473962][ T7723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.503081][ T7723] team0: Port device team_slave_0 added
[   99.510688][ T7723] team0: Port device team_slave_1 added
[   99.562776][ T7723] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.565493][ T7723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.573697][ T7723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.574976][ T7723] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.580579][ T7723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.589360][ T7723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.594997][ T1148] bridge_slave_1: left allmulticast mode
[   99.597383][ T1148] bridge_slave_1: left promiscuous mode
[   99.609709][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.639378][ T1148] bridge_slave_0: left allmulticast mode
[   99.641246][ T1148] bridge_slave_0: left promiscuous mode
[   99.643600][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.685311][ T7750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=7750 comm=syz.4.458
[   99.693036][ T7751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=7751 comm=syz.4.458
[   99.698382][   T40] audit: type=1400 audit(1769279527.825:723): avc:  denied  { append } for  pid=7749 comm="syz.4.458" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   99.821713][ T1148] bond1 (unregistering): (slave gretap1): Releasing active interface
[  100.021704][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.026635][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.030083][ T1148] bond0 (unregistering): Released all slaves
[  100.054109][ T6026] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  100.103171][ T1148] bond1 (unregistering): Released all slaves
[  100.117924][ T7757] overlayfs: failed to resolve './bus': -2
[  100.148866][   T40] audit: type=1400 audit(1769279528.275:724): avc:  denied  { bind } for  pid=7761 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  100.204947][ T6026] usb 10-1: Using ep0 maxpacket: 8
[  100.210658][ T6026] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  100.210747][ T1148] bond2 (unregistering): (slave vlan2): Releasing active interface
[  100.215160][ T6026] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  100.221705][ T6026] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  100.225458][ T6026] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  100.227047][ T1148] bond2 (unregistering): Released all slaves
[  100.228639][ T6026] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  100.235868][ T6026] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  100.239444][ T6026] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.319624][ T7723] hsr_slave_0: entered promiscuous mode
[  100.322520][ T7723] hsr_slave_1: entered promiscuous mode
[  100.326124][ T7723] debugfs: 'hsr0' already exists in 'hsr'
[  100.328081][ T7723] Cannot create hsr debugfs directory
[  100.452903][ T6026] usb 10-1: GET_CAPABILITIES returned 0
[  100.454756][ T6026] usbtmc 10-1:16.0: can't read capabilities
[  100.541911][ T1148] hsr_slave_0: left promiscuous mode
[  100.545189][ T1148] hsr_slave_1: left promiscuous mode
[  100.547657][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.550446][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.555805][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.558862][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.571131][ T1148] veth1_macvtap: left promiscuous mode
[  100.575748][ T1148] veth0_macvtap: left promiscuous mode
[  100.691562][ T5998] usb 10-1: USB disconnect, device number 2
[  100.830673][ T1148] team0 (unregistering): Port device team_slave_1 removed
[  100.853934][ T1148] team0 (unregistering): Port device team_slave_0 removed
[  101.091746][ T7723] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  101.103126][   T40] audit: type=1400 audit(1769279529.225:725): avc:  denied  { relabelfrom } for  pid=7788 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  101.103410][ T7792] pimreg: tun_chr_ioctl cmd 1074025675
[  101.113055][ T7792] pimreg: persist enabled
[  101.114400][ T7791] pimreg: tun_chr_ioctl cmd 1074025673
[  101.116994][ T7723] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  101.128459][ T7723] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  101.137346][ T7723] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  101.238696][ T7723] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.266593][ T7723] 8021q: adding VLAN 0 to HW filter on device team0
[  101.272774][ T5948] Bluetooth: hci2: command tx timeout
[  101.282059][ T1222] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.285104][ T1222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.295682][ T1222] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.298642][ T1222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.379000][ T7812] syzkaller0: entered promiscuous mode
[  101.381019][ T7812] syzkaller0: entered allmulticast mode
[  102.542848][ T7723] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.562240][ T5004] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  102.565956][   T40] kauditd_printk_skb: 3 callbacks suppressed
[  102.565966][   T40] audit: type=1400 audit(1769279530.695:729): avc:  denied  { unmount } for  pid=7027 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  102.694605][ T7723] veth0_vlan: entered promiscuous mode
[  102.706540][ T7723] veth1_vlan: entered promiscuous mode
[  102.749990][ T7723] veth0_macvtap: entered promiscuous mode
[  102.756746][ T7723] veth1_macvtap: entered promiscuous mode
[  102.770102][ T7723] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.781758][ T7723] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.787420][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.481'.
[  102.789960][ T1154] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.795009][ T1154] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.811496][ T1154] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.817784][ T1154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.823723][ T1154] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.827542][ T1154] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.833733][ T1154] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.836651][ T1154] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.908429][ T7882] new mount options do not match the existing superblock, will be ignored
[  102.909485][ T5004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.921392][ T5004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.928877][   T40] audit: type=1400 audit(1769279531.055:730): avc:  denied  { unmount } for  pid=7027 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  102.940253][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.944613][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.969397][ T7885] SQUASHFS error: Failed to read block 0x0: -5
[  102.971895][ T7885] unable to read squashfs_super_block
[  102.991742][ T7885] syz.4.484: attempt to access beyond end of device
[  102.991742][ T7885] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[  103.002928][ T7885] gfs2: error -5 reading superblock
[  103.020381][ T7890] SQUASHFS error: Failed to read block 0x0: -5
[  103.020861][ T7890] unable to read squashfs_super_block
[  103.036630][ T7891] syz.4.484: attempt to access beyond end of device
[  103.036630][ T7891] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128
[  103.046743][ T7891] gfs2: error -5 reading superblock
[  103.137281][ T7901] __nla_validate_parse: 3 callbacks suppressed
[  103.137299][ T7901] netlink: 276 bytes leftover after parsing attributes in process `syz.4.487'.
[  103.144183][   T40] audit: type=1400 audit(1769279531.275:731): avc:  denied  { ioctl } for  pid=7900 comm="syz.4.487" path="socket:[21430]" dev="sockfs" ino=21430 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  103.162360][   T40] audit: type=1400 audit(1769279531.275:732): avc:  denied  { shutdown } for  pid=7899 comm="syz.6.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  103.183806][   T40] audit: type=1400 audit(1769279531.295:733): avc:  denied  { create } for  pid=7906 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  103.191712][   T40] audit: type=1400 audit(1769279531.305:734): avc:  denied  { read } for  pid=7906 comm="syz.3.489" path="socket:[23756]" dev="sockfs" ino=23756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  103.219167][   T40] audit: type=1400 audit(1769279531.345:735): avc:  denied  { read } for  pid=7909 comm="syz.3.493" dev="nsfs" ino=4026532893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  103.242287][   T40] audit: type=1400 audit(1769279531.345:736): avc:  denied  { open } for  pid=7909 comm="syz.3.493" path="net:[4026532893]" dev="nsfs" ino=4026532893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  103.252951][   T40] audit: type=1400 audit(1769279531.365:737): avc:  denied  { listen } for  pid=7909 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  103.261527][   T40] audit: type=1400 audit(1769279531.375:738): avc:  denied  { append } for  pid=7909 comm="syz.3.493" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  103.306326][ T7921] netlink: 'syz.5.494': attribute type 1 has an invalid length.
[  103.353894][ T5948] Bluetooth: hci2: command tx timeout
[  103.363321][ T7931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.490'.
[  103.659546][ T7963] netlink: 'syz.6.502': attribute type 1 has an invalid length.
[  103.662295][ T7964] netlink: 'syz.6.502': attribute type 1 has an invalid length.
[  104.051644][ T7968] netlink: 'syz.6.504': attribute type 10 has an invalid length.
[  104.055366][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.058098][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.070263][ T7968] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.072595][ T7968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.075250][ T7968] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.077500][ T7968] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.082005][ T7968] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  104.093044][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  104.095868][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  104.186392][ T7979] SELinux: security policydb version 17 (MLS) not backwards compatible
[  104.197037][ T7979] SELinux: failed to load policy
[  104.245350][ T7984] openvswitch: netlink: Invalid VLAN frame
[  104.463595][ T5998] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  104.601811][ T8002] tmpfs: Bad value for 'mpol'
[  104.602196][ T5998] usb 9-1: device descriptor read/64, error -71
[  104.852181][ T5998] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  104.984138][ T5998] usb 9-1: device descriptor read/64, error -71
[  105.101812][ T5998] usb usb9-port1: attempt power cycle
[  105.191133][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.516'.
[  105.204263][ T8021] netlink: 'syz.6.516': attribute type 10 has an invalid length.
[  105.243405][ T8024] Cannot find add_set index 1 as target
[  105.289437][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'.
[  105.432353][ T5948] Bluetooth: hci2: command tx timeout
[  105.452371][ T5998] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  105.472917][ T5998] usb 9-1: device descriptor read/8, error -71
[  105.618440][ T8035] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  105.680871][ T8039] vcan0: tx address claim with different name
[  105.682248][ T8037] xt_hashlimit: size too large, truncated to 1048576
[  105.712168][ T5998] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  105.733729][ T5998] usb 9-1: device descriptor read/8, error -71
[  105.843596][ T5998] usb usb9-port1: unable to enumerate USB device
[  106.075248][ T8062] tmpfs: Cannot change global quota limit on remount
[  106.148645][ T8058] 0xfffffffffffffffd-0x000000020000 : ""
[  106.151447][ T8058] mtd: partition "" is out of reach -- disabled
[  106.177317][ T8058] ftl_cs: FTL header not found.
[  106.383682][ T8084] cgroup: none used incorrectly
[  106.422043][ T8087] netlink: 256 bytes leftover after parsing attributes in process `syz.5.532'.
[  106.434622][ T8087] netlink: 56 bytes leftover after parsing attributes in process `syz.5.532'.
[  106.618546][ T8108] netlink: 'syz.6.539': attribute type 10 has an invalid length.
[  106.628193][ T8108] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.632535][ T8108] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  106.668611][ T8111] netlink: 88 bytes leftover after parsing attributes in process `syz.6.540'.
[  106.709751][ T8114] netlink: 36 bytes leftover after parsing attributes in process `syz.6.541'.
[  106.847983][ T8120] input input10: cannot allocate more than FF_MAX_EFFECTS effects
[  106.852042][ T8120] openvswitch: netlink: VXLAN extension message has 8 unknown bytes.
[  107.317318][ T8129] random: crng reseeded on system resumption
[  107.343740][ T8129] usb usb8: usbfs: process 8129 (syz.4.546) did not claim interface 0 before use
[  107.512344][ T5948] Bluetooth: hci2: command tx timeout
[  107.647942][   T40] kauditd_printk_skb: 27 callbacks suppressed
[  107.647959][   T40] audit: type=1400 audit(1769279535.775:766): avc:  denied  { nlmsg_write } for  pid=8157 comm="syz.4.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  107.706132][   T40] audit: type=1400 audit(1769279535.835:767): avc:  denied  { mounton } for  pid=8159 comm="syz.4.558" path="/proc/186/task" dev="proc" ino=24944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  107.972273][   T34] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  107.981970][   T40] audit: type=1400 audit(1769279536.105:768): avc:  denied  { setopt } for  pid=8162 comm="syz.6.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  107.982889][ T8163] netlink: 16 bytes leftover after parsing attributes in process `syz.6.559'.
[  108.047112][   T40] audit: type=1400 audit(1769279536.175:769): avc:  denied  { read } for  pid=8162 comm="syz.6.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  108.090263][   T40] audit: type=1400 audit(1769279536.215:770): avc:  denied  { mounton } for  pid=8165 comm="syz.3.560" path="/159/bus" dev="tmpfs" ino=883 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  108.100661][ T8166] XFS (nullb0): Invalid superblock magic number
[  108.112062][ T8172] SELinux:  policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c
[  108.121747][ T8172] SELinux: failed to load policy
[  108.122279][   T34] usb 9-1: Using ep0 maxpacket: 8
[  108.141728][ T8160] CIFS: Unable to determine destination address
[  108.162720][   T34] usb 9-1: unable to get BOS descriptor or descriptor too short
[  108.166726][   T34] usb 9-1: unable to read config index 0 descriptor/start: -71
[  108.169801][   T34] usb 9-1: can't read configurations, error -71
[  108.510211][ T8184] program syz.5.563 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.654600][ T8187] cgroup: release_agent respecified
[  108.657383][   T40] audit: type=1400 audit(1769279536.785:771): avc:  denied  { bind } for  pid=8186 comm="syz.5.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  108.711290][ T8189] netlink: 52 bytes leftover after parsing attributes in process `syz.5.565'.
[  108.769231][ T8197] netlink: 156 bytes leftover after parsing attributes in process `syz.5.567'.
[  108.807914][ T8199] No source specified
[  108.956671][ T8206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.571'.
[  109.041878][ T8208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.572'.
[  109.062244][   T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  109.138042][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'.
[  109.188357][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'.
[  109.192459][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.578'.
[  109.225307][   T10] usb 10-1: Using ep0 maxpacket: 8
[  109.229006][   T10] usb 10-1: config 0 interface 0 has no altsetting 0
[  109.231517][   T10] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  109.235043][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.241695][   T10] usb 10-1: config 0 descriptor??
[  109.339376][   T40] audit: type=1400 audit(1769279537.465:772): avc:  denied  { mounton } for  pid=8233 comm="syz.3.579" path="/file0" dev="ramfs" ino=26702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  109.339394][ T8237] fuse: Unknown parameter 'vd'
[  109.386999][ T8240] netlink: 32 bytes leftover after parsing attributes in process `syz.4.581'.
[  109.851469][ T8199] netlink: 40 bytes leftover after parsing attributes in process `syz.5.568'.
[  109.856762][   T10] usbhid 10-1:0.0: can't add hid device: -71
[  109.859748][   T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  109.864779][   T10] usb 10-1: USB disconnect, device number 3
[  110.153311][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'.
[  110.193323][ T8256] netlink: 'syz.3.586': attribute type 1 has an invalid length.
[  110.197732][ T8256] netlink: 'syz.3.586': attribute type 2 has an invalid length.
[  110.202248][ T8256] netlink: 'syz.3.586': attribute type 1 has an invalid length.
[  110.205927][ T8256] netlink: 'syz.3.586': attribute type 1 has an invalid length.
[  110.209185][ T8256] netlink: 'syz.3.586': attribute type 2 has an invalid length.
[  110.212437][ T8256] netlink: 'syz.3.586': attribute type 1 has an invalid length.
[  110.215844][ T8256] netlink: 'syz.3.586': attribute type 1 has an invalid length.
[  110.219134][ T8256] netlink: 'syz.3.586': attribute type 2 has an invalid length.
[  110.222516][ T8256] netlink: 'syz.3.586': attribute type 1 has an invalid length.
[  110.225960][ T8256] netlink: 'syz.3.586': attribute type 1 has an invalid length.
[  110.234820][   T40] audit: type=1400 audit(110.174:773): avc:  denied  { getopt } for  pid=8254 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  110.293029][   T40] audit: type=1400 audit(110.234:774): avc:  denied  { watch watch_with_perm } for  pid=8258 comm="syz.3.587" path="/166/bus" dev="tmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  110.300118][   T40] audit: type=1400 audit(110.234:775): avc:  denied  { watch watch_with_perm } for  pid=8258 comm="syz.3.587" path="/166/bus" dev="tmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  110.377923][ T8263] geneve2: entered promiscuous mode
[  110.382161][ T8263] geneve2: entered allmulticast mode
[  110.745443][ T5998] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  110.875090][ T8299] ubi2: attaching mtd1
[  110.876621][ T8299] ubi2 error: ubi_attach_mtd_dev: bad VID header (10535) or data offsets (10599)
[  110.903745][ T5998] usb 8-1: config 1 has an invalid interface number: 7 but max is 0
[  110.907010][ T5998] usb 8-1: config 1 has no interface number 0
[  110.909289][ T5998] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16
[  110.912874][ T5998] usb 8-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  110.918181][ T5998] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  110.922958][ T5998] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.925459][ T5998] usb 8-1: Product: syz
[  110.926838][ T5998] usb 8-1: Manufacturer: syz
[  110.928334][ T5998] usb 8-1: SerialNumber: syz
[  110.932485][ T8275] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  110.941226][ T5998] usb 8-1: Expected 3 endpoints, found: 2
[  110.970959][ T8305] qnx4: unable to read the superblock
[  111.063358][ T8303] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.068741][ T8303] bond0: (slave rose0): Enslaving as an active interface with an up link
[  111.099282][ T8315] SELinux:  truncated policydb string identifier
[  111.101562][ T8315] SELinux: failed to load policy
[  111.104941][ T8315] SELinux:  truncated policydb string identifier
[  111.107375][ T8315] SELinux: failed to load policy
[  112.733527][   T40] kauditd_printk_skb: 5 callbacks suppressed
[  112.733541][   T40] audit: type=1400 audit(112.674:781): avc:  denied  { read } for  pid=8367 comm="syz.6.613" name="msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  112.736683][ T8368] SELinux:  Context Ü is not valid (left unmapped).
[  112.742431][   T40] audit: type=1400 audit(112.674:782): avc:  denied  { open } for  pid=8367 comm="syz.6.613" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  112.815460][ T8368] tmpfs: Unknown parameter 'grpquotanel/rcu_expedited'
[  112.818565][   T40] audit: type=1400 audit(112.754:783): avc:  denied  { create } for  pid=8367 comm="syz.6.613" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC
[  112.832254][   T40] audit: type=1400 audit(112.754:784): avc:  denied  { associate } for  pid=8367 comm="syz.6.613" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=DC
[  112.844561][   T40] audit: type=1400 audit(112.754:785): avc:  denied  { write open } for  pid=8367 comm="syz.6.613" path="/41/file0/file0" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC
[  112.852480][   T40] audit: type=1400 audit(112.754:786): avc:  denied  { ioctl } for  pid=8367 comm="syz.6.613" path="/dev/cpu/3/msr" dev="devtmpfs" ino=93 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  112.863122][   T40] audit: type=1400 audit(112.794:787): avc:  denied  { unlink } for  pid=7723 comm="syz-executor" name="file0" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC
[  112.934388][   T40] audit: type=1400 audit(112.874:788): avc:  denied  { getopt } for  pid=8370 comm="syz.6.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  112.978440][ T8378] fuse: Bad value for 'group_id'
[  112.980688][ T8378] fuse: Bad value for 'group_id'
[  113.030363][   T40] audit: type=1400 audit(112.964:789): avc:  denied  { nlmsg_read } for  pid=8380 comm="syz.6.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  113.056989][   T40] audit: type=1400 audit(112.994:790): avc:  denied  { ioctl } for  pid=8382 comm="syz.6.617" path="socket:[25138]" dev="sockfs" ino=25138 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  113.263992][ T8391] bond0: entered promiscuous mode
[  113.265728][ T8391] bond_slave_0: entered promiscuous mode
[  113.267829][ T8391] bond_slave_1: entered promiscuous mode
[  113.271040][ T8391] batadv0: entered promiscuous mode
[  113.275277][ T8391] 8021q: adding VLAN 0 to HW filter on device hsr1
[  113.384729][   T29] usb 8-1: USB disconnect, device number 4
[  113.775635][ T8417] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  113.999848][ T8449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8449 comm=syz.5.634
[  113.999889][ T8447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8447 comm=syz.5.634
[  114.092677][ T8463] SELinux: syz.4.637 (8463) set checkreqprot to 1. This is no longer supported.
[  114.144264][ T8470] binder: 8466:8470 ioctl 894c 200000000200 returned -22
[  114.292343][   T61] usb 11-1: new full-speed USB device number 2 using dummy_hcd
[  114.335869][ T8494] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  114.445206][   T61] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 168, setting to 64
[  114.449865][   T61] usb 11-1: config 0 interface 0 has no altsetting 0
[  114.472834][   T61] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  114.476947][   T61] usb 11-1: New USB device strings: Mfr=49, Product=228, SerialNumber=2
[  114.480461][   T61] usb 11-1: Product: syz
[  114.484555][   T61] usb 11-1: Manufacturer: syz
[  114.486600][   T61] usb 11-1: SerialNumber: syz
[  114.501820][   T61] usb 11-1: config 0 descriptor??
[  114.512898][   T61] usb 11-1: selecting invalid altsetting 0
[  114.620466][ T8525] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  114.627630][ T8525] __nla_validate_parse: 6 callbacks suppressed
[  114.627643][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'.
[  114.633185][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.655'.
[  114.677168][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'.
[  114.688989][ T8531] sp0: Synchronizing with TNC
[  114.722593][ T8531] [U] è
[  114.739030][ T8539] misc userio: Invalid payload size
[  114.824922][ T5998] usb 11-1: USB disconnect, device number 2
[  114.926328][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.661'.
[  114.978165][ T8547] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  114.981238][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.661'.
[  115.312205][ T6012] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  115.352193][ T5943] Bluetooth: hci1: command 0x2016 tx timeout
[  115.352460][ T5942] ==================================================================
[  115.357702][ T5942] BUG: KASAN: slab-use-after-free in le_read_features_complete+0x56/0x380
[  115.361291][ T5942] Write of size 4 at addr ffff88802a6c0010 by task kworker/u33:2/5942
[  115.365947][ T5942] 
[  115.367325][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) 
[  115.367347][ T5942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  115.367361][ T5942] Workqueue: hci1 hci_cmd_sync_work
[  115.367391][ T5942] Call Trace:
[  115.367399][ T5942]  <TASK>
[  115.367406][ T5942]  dump_stack_lvl+0x100/0x190
[  115.367437][ T5942]  print_report+0x156/0x4c9
[  115.367461][ T5942]  ? __virt_addr_valid+0x81/0x620
[  115.367479][ T5942]  ? __phys_addr+0xe8/0x180
[  115.367495][ T5942]  ? le_read_features_complete+0x56/0x380
[  115.367517][ T5942]  kasan_report+0xdf/0x1a0
[  115.367541][ T5942]  ? le_read_features_complete+0x56/0x380
[  115.367569][ T5942]  kasan_check_range+0x10f/0x1e0
[  115.367594][ T5942]  le_read_features_complete+0x56/0x380
[  115.367620][ T5942]  hci_cmd_sync_work+0x214/0x470
[  115.367645][ T5942]  ? __pfx_le_read_features_complete+0x10/0x10
[  115.367672][ T5942]  process_one_work+0x9c2/0x1840
[  115.367697][ T5942]  ? __pfx_process_one_work+0x10/0x10
[  115.367721][ T5942]  ? assign_work+0x19c/0x250
[  115.367741][ T5942]  worker_thread+0x5da/0xe40
[  115.367764][ T5942]  ? __pfx_worker_thread+0x10/0x10
[  115.367783][ T5942]  ? kthread+0x17d/0x730
[  115.367799][ T5942]  ? __pfx_worker_thread+0x10/0x10
[  115.367819][ T5942]  kthread+0x3b3/0x730
[  115.367837][ T5942]  ? __pfx_kthread+0x10/0x10
[  115.367855][ T5942]  ? ret_from_fork+0x79/0xaf0
[  115.367875][ T5942]  ? ret_from_fork+0x79/0xaf0
[  115.367895][ T5942]  ? rcu_is_watching+0x12/0xc0
[  115.367917][ T5942]  ? __pfx_kthread+0x10/0x10
SYZFAIL: failed to recv rpc
[  115.367935][ T5942]  ret_from_fork+0x754/0xaf0
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  115.367954][ T5942]  ? __pfx_ret_from_fork+0x10/0x10
[  115.367974][ T5942]  ? rcu_is_watching+0x12/0xc0
[  115.367996][ T5942]  ? __switch_to+0x7b9/0x10c0
[  115.368018][ T5942]  ? __pfx_kthread+0x10/0x10
[  115.368037][ T5942]  ret_from_fork_asm+0x1a/0x30
[  115.368058][ T5942]  </TASK>
[  115.368063][ T5942] 
[  115.446743][ T5942] Allocated by task 5948:
[  115.448621][ T5942]  kasan_save_stack+0x30/0x50
[  115.450675][ T5942]  kasan_save_track+0x14/0x30
[  115.452715][ T5942]  __kasan_kmalloc+0xaa/0xb0
[  115.454724][ T5942]  __hci_conn_add+0x1f4/0x1ca0
[  115.456810][ T5942]  hci_conn_add_unset+0x76/0x120
[  115.458985][ T5942]  le_conn_complete_evt+0x633/0x1f40
[  115.461235][ T5942]  hci_le_conn_complete_evt+0x23c/0x3a0
[  115.463591][ T5942]  hci_le_meta_evt+0x34a/0x5f0
[  115.465632][ T5942]  hci_event_packet+0x682/0x11c0
[  115.467802][ T5942]  hci_rx_work+0x451/0xfc0
[  115.469737][ T5942]  process_one_work+0x9c2/0x1840
[  115.471888][ T5942]  worker_thread+0x5da/0xe40
[  115.473875][ T5942]  kthread+0x3b3/0x730
[  115.475670][ T5942]  ret_from_fork+0x754/0xaf0
[  115.477676][ T5942]  ret_from_fork_asm+0x1a/0x30
[  115.479731][ T5942] 
[  115.480776][ T5942] Freed by task 5948:
[  115.482489][ T5942]  kasan_save_stack+0x30/0x50
[  115.484504][ T5942]  kasan_save_track+0x14/0x30
[  115.486563][ T5942]  kasan_save_free_info+0x3b/0x70
[  115.488748][ T5942]  __kasan_slab_free+0x5f/0x80
[  115.490867][ T5942]  kfree+0x1c7/0x690
[  115.492639][ T5942]  device_release+0xa4/0x240
[  115.494687][ T5942]  kobject_put+0x1f7/0x640
[  115.496642][ T5942]  device_unregister+0x2f/0xe0
[  115.498744][ T5942]  hci_conn_del_sysfs+0xb9/0x1a0
[  115.500866][ T5942]  hci_conn_del+0x506/0x1180
[  115.502893][ T5942]  hci_disconn_complete_evt+0x410/0xa20
[  115.505274][ T5942]  hci_event_packet+0xa86/0x11c0
[  115.507443][ T5942]  hci_rx_work+0x451/0xfc0
[  115.509363][ T5942]  process_one_work+0x9c2/0x1840
[  115.511500][ T5942]  worker_thread+0x5da/0xe40
[  115.513493][ T5942]  kthread+0x3b3/0x730
[  115.515265][ T5942]  ret_from_fork+0x754/0xaf0
[  115.517294][ T5942]  ret_from_fork_asm+0x1a/0x30
[  115.519364][ T5942] 
[  115.520413][ T5942] The buggy address belongs to the object at ffff88802a6c0000
[  115.520413][ T5942]  which belongs to the cache kmalloc-8k of size 8192
[  115.526275][ T5942] The buggy address is located 16 bytes inside of
[  115.526275][ T5942]  freed 8192-byte region [ffff88802a6c0000, ffff88802a6c2000)
[  115.532106][ T5942] 
[  115.533160][ T5942] The buggy address belongs to the physical page:
[  115.535890][ T5942] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a6c0000 pfn:0x2a6c0
[  115.540135][ T5942] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  115.543717][ T5942] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  115.547110][ T5942] page_type: f5(slab)
[  115.548816][ T5942] raw: 00fff00000000040 ffff88801b843180 ffffea0000ffa800 0000000000000005
[  115.552440][ T5942] raw: ffff88802a6c0000 0000000000020001 00000000f5000000 0000000000000000
[  115.556065][ T5942] head: 00fff00000000040 ffff88801b843180 ffffea0000ffa800 0000000000000005
[  115.559736][ T5942] head: ffff88802a6c0000 0000000000020001 00000000f5000000 0000000000000000
[  115.563380][ T5942] head: 00fff00000000003 ffffea0000a9b001 00000000ffffffff 00000000ffffffff
[  115.567082][ T5942] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  115.570734][ T5942] page dumped because: kasan: bad access detected
[  115.573445][ T5942] page_owner tracks the page as allocated
[  115.575865][ T5942] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5945, tgid 5945 (syz-executor), ts 62035463358, free_ts 62005038266
[  115.583861][ T5942]  post_alloc_hook+0x1e1/0x250
[  115.585927][ T5942]  get_page_from_freelist+0xe3d/0x2e10
[  115.588313][ T5942]  __alloc_frozen_pages_noprof+0x26c/0x2410
[  115.590797][ T5942]  alloc_pages_mpol+0x1fb/0x550
[  115.592820][ T5942]  new_slab+0x2c4/0x440
[  115.594556][ T5942]  ___slab_alloc+0xda3/0x1ca0
[  115.596503][ T5942]  __slab_alloc.isra.0+0x63/0x110
[  115.598619][ T5942]  __kmalloc_noprof+0x618/0x9c0
[  115.600622][ T5942]  batadv_hash_new+0x74/0x2e0
[  115.602564][ T5942]  batadv_originator_init+0x57/0x240
[  115.604747][ T5942]  batadv_mesh_init+0x4c3/0x910
[  115.606786][ T5942]  batadv_meshif_init_late+0xbce/0xf30
[  115.608882][ T5942]  register_netdevice+0x685/0x21d0
[  115.611100][ T5942]  batadv_meshif_newlink+0x8f/0xc0
[  115.613318][ T5942]  rtnl_newlink+0x1494/0x2380
[  115.615341][ T5942]  rtnetlink_rcv_msg+0x95e/0xe90
[  115.617519][ T5942] page last free pid 5964 tgid 5964 stack trace:
[  115.620243][ T5942]  __free_frozen_pages+0x822/0x1130
[  115.622503][ T5942]  qlist_free_all+0x47/0xe0
[  115.624470][ T5942]  kasan_quarantine_reduce+0x1a0/0x1f0
[  115.626813][ T5942]  __kasan_slab_alloc+0x69/0x90
[  115.628942][ T5942]  __kmalloc_noprof+0x300/0x9c0
[  115.631046][ T5942]  tomoyo_realpath_from_path+0xb6/0x690
[  115.633386][ T5942]  tomoyo_path_perm+0x276/0x460
[  115.635498][ T5942]  security_inode_getattr+0x116/0x280
[  115.637810][ T5942]  vfs_fstat+0x4b/0xe0
[  115.639588][ T5942]  __do_sys_newfstat+0x8b/0x110
[  115.641684][ T5942]  do_syscall_64+0xc9/0xf80
[  115.643639][ T5942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.646182][ T5942] 
[  115.647248][ T5942] Memory state around the buggy address:
[  115.649655][ T5942]  ffff88802a6bff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  115.652997][ T5942]  ffff88802a6bff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  115.656391][ T5942] >ffff88802a6c0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  115.659379][ T5942]                          ^
[  115.660862][ T5942]  ffff88802a6c0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  115.663807][ T5942]  ffff88802a6c0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  115.667135][ T5942] ==================================================================
[  115.672836][ T5942] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  115.675934][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) 
[  115.679934][ T5942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  115.684206][ T5942] Workqueue: hci1 hci_cmd_sync_work
[  115.686453][ T5942] Call Trace:
[  115.687910][ T5942]  <TASK>
[  115.689189][ T5942]  dump_stack_lvl+0x100/0x190
[  115.691179][ T5942]  vpanic+0x20d/0x630
[  115.692846][ T5942]  panic+0xd1/0xd1
[  115.694409][ T5942]  ? __pfx_panic+0x10/0x10
[  115.696250][ T5942]  ? le_read_features_complete+0x56/0x380
[  115.698648][ T5942]  ? preempt_schedule_common+0x42/0xc0
[  115.700901][ T5942]  ? check_panic_on_warn+0x1f/0x90
[  115.703010][ T5942]  check_panic_on_warn.cold+0x19/0x34
[  115.705250][ T5942]  end_report.part.0+0x3a/0x90
[  115.707315][ T5942]  kasan_report.cold+0xe/0x18
[  115.709468][ T5942]  ? le_read_features_complete+0x56/0x380
[  115.711827][ T5942]  kasan_check_range+0x10f/0x1e0
[  115.713763][ T5942]  le_read_features_complete+0x56/0x380
[  115.715975][ T5942]  hci_cmd_sync_work+0x214/0x470
[  115.718006][ T5942]  ? __pfx_le_read_features_complete+0x10/0x10
[  115.720564][ T5942]  process_one_work+0x9c2/0x1840
[  115.722626][ T5942]  ? __pfx_process_one_work+0x10/0x10
[  115.724511][ T5942]  ? assign_work+0x19c/0x250
[  115.726345][ T5942]  worker_thread+0x5da/0xe40
[  115.728365][ T5942]  ? __pfx_worker_thread+0x10/0x10
[  115.730093][ T5942]  ? kthread+0x17d/0x730
[  115.731481][ T5942]  ? __pfx_worker_thread+0x10/0x10
[  115.733127][ T5942]  kthread+0x3b3/0x730
[  115.734453][ T5942]  ? __pfx_kthread+0x10/0x10
[  115.736018][ T5942]  ? ret_from_fork+0x79/0xaf0
[  115.737543][ T5942]  ? ret_from_fork+0x79/0xaf0
[  115.739062][ T5942]  ? rcu_is_watching+0x12/0xc0
[  115.740874][ T5942]  ? __pfx_kthread+0x10/0x10
[  115.742883][ T5942]  ret_from_fork+0x754/0xaf0
[  115.744662][ T5942]  ? __pfx_ret_from_fork+0x10/0x10
[  115.746527][ T5942]  ? rcu_is_watching+0x12/0xc0
[  115.748589][ T5942]  ? __switch_to+0x7b9/0x10c0
[  115.750659][ T5942]  ? __pfx_kthread+0x10/0x10
[  115.752659][ T5942]  ret_from_fork_asm+0x1a/0x30
[  115.754737][ T5942]  </TASK>
[  115.756636][ T5942] Kernel Offset: disabled
[  115.758551][ T5942] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:32:23  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85699fa5 RDI=ffffffff9b206c00 RBP=ffffffff9b206bc0 RSP=ffffc900036cf540
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3661323038387257
R12=0000000000000000 R13=0000000000000066 R14=0000000000000010 R15=ffffffff85699f40
RIP=ffffffff85699fcf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d65dc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fffe3478f00 CR3=000000002a2e4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f646575657571
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd77e7ce36
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd77e7ce36 00007ffd77e7ce3c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dfb0086dc
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dfb008728
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dfb00869c
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5dfb00871a
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81faa9ba RDX=ffff88801dec0000
RSI=ffffffff81faa994 RDI=ffff88801dec0000 RBP=ffff88806a443080 RSP=ffffc90000107808
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000003 R13=ffffed100d488611 R14=0000000000000001 R15=ffff88806a53bf00
RIP=ffffffff81faa99b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d66dc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f2fc112f068 CR3=000000000e392000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a1538059322a9758 e7a5e7f643d0a268
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 421ead41044ba56e 553b394e4810a5a7
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5eeda124b869976e 23595a923c5a7bdd
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d8b060774f0f346b 74943d4e37469421
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002f40
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4700b2d100000000 9a000000f6000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000004aa470118fd 354b917347025817
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4700fe6f00000000 4a0000007a000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5a0000008a000000 00000e49b4000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00b7b0962275c16c 033fedef6ad2361d
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5e511cbfd981388 574a1068352bc173
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000000ab007 RBX=ffff88801e2d4980 RCX=ffffffff8b76b4b5 RDX=0000000000000000
RSI=ffffffff8dc45440 RDI=ffffffff8bfa35a0 RBP=0000000000000002 RSP=ffffc90000187df0
R8 =0000000000000001 R9 =ffffed100d4c673d R10=ffff88806a6339eb R11=0000000000000000
R12=ffffed1003c5a930 R13=0000000000000002 R14=ffffffff90b737d0 R15=0000000000000000
RIP=ffffffff8b769e1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d67dc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c305821 CR3=00000000318b4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=000000000000e000 Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc3783cdb 00007ffcc3783cdb
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc37841e0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc37841e0 0000003000000018
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 75207466656c2820 64696c617620746f 6e20736920dc2074 7865746e6f432000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7520746665662220 6463666176207465 6420736320d62074 7265746465432000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3661323038383866 6666662072646461 207461203420657a 697320666f206574
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3433362e352e7a79 733d6d6d6f632037 3434383d64697020 74656b636f735f65
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74756f725f6b6e69 6c74656e3d737361 6c637320303d6570 79745f67736d6c6e
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d6c6f636f74 6f7270203a656761 7373656d206b6e69 6c74656e2064657a
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696e676f6365726e 75203a78756e694c 4553205d37343438 54205b5d39383839
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3238393878303d64 6d636c74636f6920 38333135323d6f6e 69202273666b636f
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81faa9ba RDX=0000000000000001
RSI=0000000000000000 RDI=ffff88802e064980 RBP=ffff88806a4430a0 RSP=ffffc90003d3f628
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000003 R13=ffffed100d488615 R14=0000000000000001 R15=ffff88806a73bf00
RIP=ffffffff8206f930 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d68dc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f3acafddff8 CR3=0000000036dc9000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000f802fefe Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7372656c6c6f7274 6e6f632e70756f72
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe3479f86
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe3479f86 00007fffe3479f8c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3aca2086dc
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3aca208728
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3aca20869c
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3aca20871a
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000d0
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000