last executing test programs:

4.730583977s ago: executing program 3 (id=88):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf2512000000080007002bffffff080009000800000018000180140002006261746164765f736c6176655f30"], 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4010)
socket(0x15, 0x5, 0x5)
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f00000000c0)=[{0x12, '\x00', @buffer={"b2e84620c6452a612e86244c8c9b7067dabd5f05ae84058f1989c52762bc77a1", 0x20}, 0x1}]})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x70bd26, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0)

4.541535031s ago: executing program 3 (id=90):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x273, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x816}}, {{{0x9, 0x5, 0x81, 0x3, 0x440, 0x5a, 0xef, 0x81}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x8, 0x6, 0x58, 0x20, 0xfe}, 0x160, &(0x7f00000000c0)={0x5, 0xf, 0x160, 0x5, [@generic={0xa8, 0x10, 0x4, "37439d3f702310d2047ee35a908e0aae38c062401076be0cf2d38c510499a0741a1948e80040ad4270f5f1317ce404c6f9b15c04adf880c31469d4e641085a3c9d755a7d92c66413105a0d46f546e5ce71d5b78d9e008ba2453d0eda7a03e2d3a56c62922a28612c497b635ef3b45f732130d4ce1e5180f4176856e528dfe036f5486c0c27ccdebf9ddd40bc1da83799f95f56ce173bf6d54d2367a9aee66d93a529de4673"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "3b12c2eba2014d74c3f50bff27da0304"}, @ptm_cap={0x3}, @generic={0x92, 0x10, 0x1, "55e62aab2a60116d96f5b24c144de42c87a38abb5bd6eed745b5b1c408963d42cfdb5fdb8f1b09d8002952b2f38bfbc3cb73a03f1d8ed2b959b37618ad2251e7f5f1d37bc4f172eeebb13b962ee40c2e03c854a173ba7d7c3d82c7c8f0f5b605cf0d0a5dd27e77797356314e89467d847e17ccfd81c9698b1cb24b0b578d35f6fa4ee515ee7a8922df528cee883d1e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x80, 0x4, 0x2}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x402}}, {0x44, &(0x7f00000002c0)=@string={0x44, 0x3, "0ac013256b96e6668b08b1951491534e47dd7aebdbf83ebb2f9c705f2a71c927ff2f12b47d2a2d5ca6c6c574e93114b94c7256957ab0d54e319b8b8806cf7472b206"}}, {0x78, &(0x7f0000000340)=@string={0x78, 0x3, "c08dabfd2c141e18e3f6b5f685c52c45e748daff72f26466e7c56e92f46137e88f333b8a5bd453e0895d1da0de5584a20d04203c4028ed71a26ce9a60dbfab3d9ac26db14ec87b169b222ffc28eb2484f2503aa57a5d9aea58f7278bf3ba8ee43ba8410435dc8d4d5619cd1b93d7991ea3927a52129f"}}, {0x88, &(0x7f00000003c0)=@string={0x88, 0x3, "9052cbc3de591c7b15d4567d37fbfa9f83e529182878f61ad42f1696292ef8612e4edf80fffbc7a3d37614d5e4d9d4844a6399d8fbeab29b9b07b6355df2e47549c6628f6d0de59613534fe32bc3fd0341d739d56acda89463ee328aebd0e00d428dfb350585b175813fd1ff2856c5ffbbb5fabb3907d6a9a8991a5594a6e374d382def61333"}}, {0xf7, &(0x7f0000000480)=@string={0xf7, 0x3, "36a4439004869c181e8b69e86c8b34225c8a240bc393b623a36d0105f011996c51ba35ff00646741859e913e19a91d00fe3227fc058e1bcdeba941d73f33ff2bcbefbf162fdeb20de685409f00a82e489fa5f98f7585e253964ee504bdd09b2ca9af373c24ae2e7e75eabb298087b9e6a095e4945c9cf7f3b2293aac6a7b7b6551b5976907f603f20ae16c2cd5d5c94a6e2b594de29574b9a4dd1aebe505866aadc40e3a2764f7a280f3b97943e1553dddc5da90d953576df7aa7a612b0ef23905bea47068f461935f11377670b3c59f5b3ab9f9f4fd90bc4ec4e456ca73b57a211229ef5de843aa9d6c1b4d785196c26ac336e21c"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2401}}]})
r1 = gettid()
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0x2100, 0x20c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3382, 0x8000, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x2000000, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe95, 0x40000, 0x2, 0x250}}], 0x1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="2400000037000702fefffffffbdbdf25017c00000e0003"], 0x24}, 0x1, 0x0, 0x0, 0x60004841}, 0x8000)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
tkill(r1, 0xb)

1.53848471s ago: executing program 3 (id=138):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="94010000100001002cbc700000000000ff020000000000000000000000000001ac14140d0000000000880aa12c023bcefa1c1481c5caeb000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x44050) (async)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES64], 0x0) (async)
syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1.441155214s ago: executing program 3 (id=140):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x5, 0x20000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24008004)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)="30380a00000000000000000000b36b2a120e2a888279df5e8f6ac5bcb42dc87cba69e41157d6da54e4e76f98427ea4e934f5515761e568ced30423cbd5ce34d77b49448416c9f5c2905ce409a34bbbca54d9ea3189a1ddea5b9002fd1354e1994eb3c95e6314cbaeb2031f4f40805c002abc46cc70802d9d046adccc9af802419ad672ae3d25922d9afe0ea102bd05b55cfb789d935574aef2cbdfc649aedadaef9faa25069c4c9ba6dc69243680d4864f4b43e7625684e840e748824cd488d4a4b1b17e5b9d71c191dfc29a", 0xcc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x17, 0x0, 0xa9})
write(r1, &(0x7f0000000500)='0x08\n', 0x5)

1.368052821s ago: executing program 3 (id=143):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40004, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8298, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x79a1, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x9, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0xd, 0x0, 0x2, 0x0, 0x3, 0x5, 0x80000000, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x18c, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0xc9, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xcaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x0)
keyctl$setperm(0x5, 0x0, 0x30925)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b00), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b40)={0x4c, r3, 0x1, 0x70bd2e, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

1.309959437s ago: executing program 3 (id=146):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r0 = gettid()
r1 = syz_socket_connect_nvme_tcp()
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00'})
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
clock_gettime(0x0, &(0x7f0000000380))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0)
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$loop(0x0, 0x3, 0x1a7a40)
unshare(0x66000280)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab70102030109021200010000000009"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, &(0x7f00000003c0)="64eaea366a0170d106709ad0ee06f81d19b923f92944bc1691c4d5536e07ab12e298bcaa856e85aa45c9eef45f569d59d8d9fb129256336ac66e0bbb613bbd983808efe6d49ab73b9e1fcb12a83eb6237ab0200bf1d17257e24db397c91a9b1504b57723935b4ef49ed50e53df64cb0a83936ff5f0f0025a03f25c30130ad4ac7dd4b4f2f4a00af666da679c7f17f8a92c06e2cd5e6f3bbb1d3dca5b35a68c41337afe4f57013da886ff483debfada80096b54844770146e984045faf84bbd095d281fc85878f9574862f5352ac76efc38", 0xd1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

1.128849227s ago: executing program 1 (id=155):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x54, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
r6 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r6, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
r7 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

758.486595ms ago: executing program 0 (id=164):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r1=>0x0}) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) (async, rerun: 64)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x68, 0x30, 0xb, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x200, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0x3}}}]}]}, 0x68}}, 0x0) (rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async, rerun: 64)
umount2(&(0x7f0000000140)='./file0\x00', 0xc) (async, rerun: 64)
read$FUSE(r4, &(0x7f00000063c0)={0x2020, 0x0, <r5=>0x0}, 0xfffffffffffffe5a) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="400100001000010000000000fddbdf25fc0200000000000000000000000000000000000000000000000000000000000040000000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000a000100000000000000000008002300630f0000480001"], 0x140}}, 0x20000000)
write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

757.995589ms ago: executing program 1 (id=165):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000500))
write$vhost_msg_v2(r3, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000080)=""/23, 0x17, 0x0, 0x1, 0x2}}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000780)={0xfff, <r5=>r0, 0x80000})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000980)={0x80000000, &(0x7f00000007c0)=[{<r6=>0x80000000}], &(0x7f0000000900)})
ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f00000009c0)={r6})
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7})
chroot(&(0x7f00000001c0)='./file0\x00')
write$vhost_msg_v2(r3, &(0x7f0000001b80)={0x2, 0x0, {&(0x7f0000000b00)=""/4096, 0x1000, 0x0, 0x1, 0x2}}, 0x48)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}, 0x1c, 0x0}}], 0x1, 0x20002040)
sendto$inet6(r7, 0x0, 0x0, 0x8000, 0x0, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x40080c4, &(0x7f0000000040)={0xa, 0x4e27, 0x80000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x12}, 0x1c)
write$vhost_msg_v2(r3, &(0x7f0000000480)={0x2, 0x0, {&(0x7f00000003c0)=""/94, 0x5e, 0x0, 0x3, 0x2}}, 0x48)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$vhost_msg_v2(r8, &(0x7f0000000500)={0x2, 0x0, {&(0x7f0000000580)=""/147, 0x93, 0x0, 0x1, 0x2}}, 0x48)
r9 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440))
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f00000006c0)=@req3={0x401, 0x5, 0x4, 0x8, 0x1, 0x6}, 0x1c)
write$vhost_msg_v2(r3, &(0x7f0000000800)={0x2, 0x0, {&(0x7f0000000700)=""/74, 0x4a, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg(r3, &(0x7f0000000880)={0x1, {&(0x7f0000000640)=""/108, 0x6c, 0x0, 0x2, 0x2}}, 0x48)

659.300753ms ago: executing program 1 (id=167):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', <r1=>0x0, 0x2f, 0xc3, 0xe4, 0x10, 0x11, @private1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x700, 0x8000, 0x2, 0x6}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0xef, 0xc, 0x8001, 0x41, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x4}, 0x80, 0x8000, 0x3, 0x942}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', <r4=>0x0, 0x2f, 0xef, 0xc, 0x8001, 0x41, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x4}, 0x80, 0x8000, 0x3, 0x942}})
sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@RTM_NEWMDB={0x98, 0x54, 0x100, 0x70bd2a, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x2, {@ip4=@private=0xa010102}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x3, {@in6_addr=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0x3, {@ip4=@dev={0xac, 0x14, 0x14, 0x2e}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x6, 0x2, {@ip4=@private=0xa010102, 0x86dd}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x10)
pipe2$9p(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4800)
write$P9_RWALK(r6, &(0x7f0000000400)={0x23, 0x6f, 0x2, {0x2, [{0x4, 0x2, 0x3}, {0x0, 0x2, 0x8}]}}, 0x23)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x30, "90cc1783159577c0be189691b226e5b6fe357acfdcc0d837a627d8a9eff20049aec099a7c153eb76c9893e454f330a70"}, &(0x7f0000000480)=0x38) (async)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000440)={<r7=>0x0, 0x30, "90cc1783159577c0be189691b226e5b6fe357acfdcc0d837a627d8a9eff20049aec099a7c153eb76c9893e454f330a70"}, &(0x7f0000000480)=0x38)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)={r7, 0x6, 0x7, [0x63a, 0x3, 0x7, 0x5, 0x8, 0x46a6, 0x2]}, 0x16) (async)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)={r7, 0x6, 0x7, [0x63a, 0x3, 0x7, 0x5, 0x8, 0x46a6, 0x2]}, 0x16)
ioctl$OCFS2_IOC_GROUP_ADD64(r5, 0x40186f03, &(0x7f0000000500)={0x2, 0x1, 0x3, 0xff})
ioctl$NILFS_IOCTL_SYNC(r5, 0x80086e8a, &(0x7f0000000540))
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000600)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000640)={0x48, 0xa, r8, 0x0, r9})
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
r10 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f00000006c0)={0x3, {{0xa, 0x4e23, 0x2, @mcast1, 0x2}}}, 0x88)
r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000780), 0x204500, 0x0)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r11, 0xc0c85666, &(0x7f00000007c0)={{0x4, @addr=0x4}, "8116225082bc07fcd1623fa9dc24467650a0fe0a10d25fc3f70020d40de51e50", 0x1})
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg(r12, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000008c0)="bc48f0fc400c4dc3e568c80dbd8d", 0xe}, {&(0x7f0000000900)="37b5645d79b1915fd4d48292c57211a66dc8e9dec707d30ca25deb43ecfde1bb342a419554c454a84e5f52b8de9fadc2b6eae3198eb6013cea3231ea7acedfe137f5cdff78c71c7b0d78bb37e9a332ad698a0373f14542b3fb7f0ac375715a3f7672041daaef08eb37efe596a4677b5300b40abb11f97727992f38e941dcfef00bfef543332922e1a1a726b793ac6ef5fe42a526c3b48795a8810aa38984d592c6b9bb79027e595833ed63f2066bcf4acd7bfa31939a479f209cbbe7", 0xbc}, {&(0x7f00000009c0)="cd2511b9022ea497bd9f01bf4b019cba277b228bbc9fd1f5ecc19bba1d45d36cbf29b89e4294c1c241ffff62227d2879a22ab19de4023eab61354845bffcf030e7f4ee18d4e9fb40c42e1788a7654f342232013fa3a2c8e59bd0c640737074412db776719fe0049e51145ec122d45b452e70edd236f44a72892ea2d321c4b75339de3759fc52dcd7904832476a76da647b69f508368a27dd6d8a0fd2662241cbcf993b56fa65bd7a144a4a43f7e8c94abd4d482c1480ff72deda32812bade92248b3856e65994971aa8d83c47d5b01558a0dd415f5040d87e0e6f88c", 0xdc}, {&(0x7f0000000ac0)="eb76a4b0e75c0c4c450789b40109e1efe26ca5340cf656a9d9f875233e4be6435f2e1d3e1f59db18113dc7d6568886a603d7871922dbe276dae9a7ee4b9b6805256f1202d6f8d9fe36", 0x49}, {&(0x7f0000000b40)="3e9b5b7f5bfcabbae171635cef3bee34843f0747e4d314ae0dee4cf2282b94b65f67107ead37e3", 0x27}, {&(0x7f0000000b80)="7ec61f863a7fb787b1752194e62a026077afae03eb2a7e85c748cae48c5bd60cb0d2d20de71f59d40500c438b3be5e5ebb70c9bc9a74cfe891d3749c2adb78664916c13f5855f0d44bad969b31ce5282e81b87b1410da1", 0x57}, {&(0x7f0000000c00)="e83897821a1e0238ca1d71368e30f4c9857ee78ede80d9d5a8c03e2cea5fca5bacd933969ffd1c9a855cdcbf6e3e4b3be28c7f", 0x33}, {&(0x7f0000000c40)="bd21899559a12f768aebf65401a723d9a24e0041879378767a3c2e59dea952b7e65e9510e85bbae3b2619660e328fa3053533fab6d00bf976585970ed67d5d560504587b90cda5de47d7fb24b2b82899ac6194de4774cbc81f301122b66733e3f0bcb4232852268aabd792b14e0edfa188939248c74f9e267eed4cd2499cc77ffc1583bf87facab9246c9c9db6", 0x8d}, {&(0x7f0000000d00)="326c9c6f9fa548c3593407f49d2b9e6bce7314d10c4942d7fc7ea2efe950a3609c66d2ff04df33cbd8c1ba688a42af616189daf056e0fc552380d0c89d7171f54acdb757788180120c1b619fae0922fa22a08adf7b3359638b3af8f66bbac5d3cb4b5fd663124eae171e948b118d93f1d9f32acd8e2329e418afb64c8288115eb49a8e13a42b0852b755ba8f9058a289971c624b8ccb8b6040c4f97ba20bbed2b659", 0xa2}, {&(0x7f0000000dc0)="698768ccd5aa49e6528e937ac4fdcd2e317d1b99bb0fa5e3eb7362638de53e741db45e27334ea0d59a1535e6f2691e93487dacb8029db756c25e8a8dc9b52a46679d", 0x42}], 0xa}, 0x80)
write$P9_RWALK(r6, &(0x7f0000000f40)={0x30, 0x6f, 0x1, {0x3, [{0x2, 0x1, 0x7}, {0x4, 0x0, 0x6}, {0x40, 0x4, 0x4}]}}, 0x30)
ioctl$FE_GET_PROPERTY(r11, 0x80106f53, &(0x7f0000001080)={0x19, &(0x7f0000000f80)=[{0x41, '\x00', @data=0x9, 0xfffffffa}, {0x27, '\x00', @data=0x7, 0x9}, {0x1c, '\x00', @buffer={"4be81bd50af97a3b4bd02046c4e286a08d5212ab76a4c26139d4821afb7f2ac6", 0x20}, 0x3}]})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r11) (async)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r11)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001140)={'wlan0\x00', <r15=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001180)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001180)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r13, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, r14, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6a}, @val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18094}, 0x8000)
sendmsg$inet_sctp(r11, &(0x7f0000001480)={&(0x7f0000001280)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001340)=[{&(0x7f00000012c0)="65e28b89631fd41bf46278e8598dca55c63193c452a158d0fde73f3c5b35a598444d41b507db7d87ba23bcae9bd05357e207357d8debdbdf705805bf6a7377299d59cdaffdb58089780dc9ca1891152dca1200c66a", 0x55}], 0x1, &(0x7f0000001380)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x88}}, @init={0x18, 0x84, 0x0, {0x8, 0x8, 0x6, 0x81}}, @init={0x18, 0x84, 0x0, {0x4, 0xecfb, 0x1000, 0xb6}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x4, 0x2, 0x7, 0x10, 0x8, 0x5, 0x1, r7}}, @sndinfo={0x20, 0x84, 0x2, {0x101, 0x8206, 0x1, 0x1, r7}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0xe8, 0x4}, 0x1) (async)
sendmsg$inet_sctp(r11, &(0x7f0000001480)={&(0x7f0000001280)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001340)=[{&(0x7f00000012c0)="65e28b89631fd41bf46278e8598dca55c63193c452a158d0fde73f3c5b35a598444d41b507db7d87ba23bcae9bd05357e207357d8debdbdf705805bf6a7377299d59cdaffdb58089780dc9ca1891152dca1200c66a", 0x55}], 0x1, &(0x7f0000001380)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x88}}, @init={0x18, 0x84, 0x0, {0x8, 0x8, 0x6, 0x81}}, @init={0x18, 0x84, 0x0, {0x4, 0xecfb, 0x1000, 0xb6}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x4, 0x2, 0x7, 0x10, 0x8, 0x5, 0x1, r7}}, @sndinfo={0x20, 0x84, 0x2, {0x101, 0x8206, 0x1, 0x1, r7}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0xe8, 0x4}, 0x1)
ioctl$VIDIOC_QUERYBUF(r11, 0xc0585609, &(0x7f0000001580)=@multiplanar_fd={0x6, 0x4, 0x4, 0x0, 0x458, {}, {0x5, 0x1, 0x6e, 0x2, 0x9, 0x7, "8f6916e2"}, 0xffffffff, 0x4, {&(0x7f0000001500)=[{0x2, 0x5, {r11}, 0xfffffff9}, {0x3, 0x6, {r11}, 0x9}]}, 0xb04, 0x0, r11})

659.048595ms ago: executing program 0 (id=168):
iopl(0x3)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0)
syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58)

591.567872ms ago: executing program 1 (id=169):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x7)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00')
lseek(r2, 0x80006, 0x1)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x4) (async)
listen(r3, 0x4)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r8, 0x7, 0x3, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
personality(0xfe47fef9f5ff7379)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x6, 0x20000) (async)
remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x6, 0x20000)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='( \x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000000000004400000008000300", @ANYRES32=r12, @ANYBLOB="0c00238006000300ef000000"], 0x28}, 0x1, 0x0, 0x0, 0x24048851}, 0x10)

590.240572ms ago: executing program 0 (id=170):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000480))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x20, r4, 0x5, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r5 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$USERFAULTFD_IOC_NEW(r5, 0xaa00)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000240))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000f"], 0x0, 0x96}, 0x28)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0)
read(r9, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x1, 0x1, 0x3, 0x4, 0x5, 0x2, 0x64, 0x6, 0x4, 0xfb, 0x5, 0x5, 0xff, 0xfa, 0x8f, 0x5}})
r10 = timerfd_create(0x9, 0x0)
timerfd_settime(r10, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0)
read(r10, &(0x7f0000000000)=""/248, 0xf8)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x501})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r11, 0x10040)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="76cb7be9f5e09c5ece53cabbaaaaaaaaaaaaaaaaaaaaaabb080045000028fffe000095069078", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0400ca90781000"], 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x4, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x200, 0x6e98, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x3c4210})

461.676686ms ago: executing program 2 (id=172):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)={0x6, 0xb1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)

461.298831ms ago: executing program 0 (id=173):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00')
readv(r3, &(0x7f0000000280)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x13)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000022c0)={[0x38, 0xfff, 0x10001, 0x180, 0x5, 0x0, 0x7, 0x2, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffa, 0x4], 0xdddd1000, 0x1c6017})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

348.6199ms ago: executing program 1 (id=174):
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket(0x400000000010, 0x2, 0x0) (async)
r3 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x58, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x101}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)
getpeername$llc(r3, &(0x7f0000000040), &(0x7f0000000080)=0x10)
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000300)="2e9b5b0007e03dd65193dfb6c575b43f86dd60675c076919506fd0f0f5858f923876ba6d3afc82a5cf6559761751103ba123db03700f5d85b1e58ea3c6cd8e43f8ccacb77d897ebdd3451c69c24980461cab8db43ec013384b5c8e0c661e79bf625d9690a912153c16c7328884d3e1981a374b363e63218b39d1c45dd724dd9f8b68e909646f2a383038df8de3a87e903b28e7fb51775d99929cef40e3722baac611b153ccb08633", 0x14}, {&(0x7f00000001c0)="b7000018110058beef4ba0d598", 0xd}, {&(0x7f0000000200)="37a0a6c482b23cba92ffff03c86c3e05f1708ec47fbe2389dbb3ffff3f7b42590e180c6fb600"/51, 0x33}], 0x10000000000003a0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x5, r1, 0x0, &(0x7f000034c000/0x4000)=nil, 0x4000, 0xbc})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000140)={0x28, 0x5, r1, r1, 0xffff, 0x20000000000539, 0x3ffd})

326.296338ms ago: executing program 0 (id=175):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070002000000000000000000060005000d101000", 0x24)
r1 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c0000330001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e3367"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x4000850)

325.86367ms ago: executing program 0 (id=176):
r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x402c1})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
write$tun(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaaaa86dd6a008993000829ff"], 0x42)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000000d1401002cbd7000fcdbdf25080001000000000008003e00020000d44700030004000000"], 0x28}, 0x1, 0x0, 0x0, 0x2400005c}, 0x4000080)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058a"], 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x1f0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x300, 0x20a, 0x278, 0x300, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000], 'ipvlan0\x00', 'caif0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x6}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0xff, 0xff], 0x4e21, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x4, 0x4, 0x6, 0x9}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x9, 0x8, 0x6, 'snmp_trap\x00', 'syz1\x00', {0x87bf}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430)
syz_usb_control_io$cdc_ecm(r5, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$CDROMEJECT(r7, 0x80081272)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x402c1}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async)
write$tun(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaaaa86dd6a008993000829ff"], 0x42) (async)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000000d1401002cbd7000fcdbdf25080001000000000008003e00020000d44700030004000000"], 0x28}, 0x1, 0x0, 0x0, 0x2400005c}, 0x4000080) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058a"], 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x1f0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x300, 0x20a, 0x278, 0x300, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000], 'ipvlan0\x00', 'caif0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x6}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0xff, 0xff], 0x4e21, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x4, 0x4, 0x6, 0x9}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x9, 0x8, 0x6, 'snmp_trap\x00', 'syz1\x00', {0x87bf}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) (async)
syz_usb_control_io$cdc_ecm(r5, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async)
ioctl$CDROMEJECT(r7, 0x80081272) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

217.998756ms ago: executing program 2 (id=177):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)=""/178, &(0x7f0000000100)=0xb2)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x80800, 0x0, <r1=>0xffffffffffffffff})
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000001c0)={0x1, 0x80000, <r2=>r0})
ppoll(&(0x7f0000000200)=[{r1, 0x501}, {r2, 0x1}, {r0, 0x20}, {r0, 0x200}, {r0, 0x6000}, {r0, 0x2}], 0x6, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000280)={[0xa5b]}, 0x8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
accept4$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @fixed}, &(0x7f0000000300)=0xe, 0x80800)
syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@none, 0x80}}}, 0xa)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000380)=[0x0, <r4=>0x0]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000400)=[0x0], &(0x7f0000000440)=[<r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x1, 0x9, 0x8, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[r4, r5], 0x2, 0x80000, 0x0, <r6=>0xffffffffffffffff})
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0)
syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}}}, 0x4)
ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r2, 0xc0106440, &(0x7f0000000640)={0x1, 0xeaf, &(0x7f0000000600)})
syz_emit_ethernet(0x46, &(0x7f0000000680)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @broadcast, @private2, @empty, @remote}}}}, &(0x7f0000000700)={0x0, 0x2, [0x22c, 0x4a9, 0x1e6, 0x204]})
sendmsg(r1, &(0x7f0000002c80)={&(0x7f0000000740)=@ax25={{0x3, @default, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x80, &(0x7f0000000880)=[{&(0x7f00000007c0)="606d7fc2c6bf6b98992b5e5aa69458b46ab31181855b8ef400ea711b84af56572d12dbae6c5b14bb7926c4636979c9784b1e05bf77c06431b596f6febfa239e83442430275332e1528415e9517cca9f144d0bb959d79965a26aa1ecda354b4594ca3a208a373abd46c4370611123faad987a91349f861cb5c1d89cdd539f19a9fa69e925efc46a69d2ffa7ac0c42a768", 0x90}], 0x1, &(0x7f00000008c0)=[{0x1010, 0x112, 0x9, "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"}, {0x60, 0x103, 0x100, "875f1412a3842366c86ff21e3cc8b240f1d64590c6c59974ee234c131e0ef53baf17f93bdebfb14c820db795bab39a2e196478e6e4ea1b1130eef4a613b0da5125593915c4316499fe1718"}, {0xf0, 0x104, 0x7, "57f5c2b1ba48242ef4da219cd05af84e23c59990e0c6fa6efa1f7a450c485aa6cadda5ac1ad9b726e671e9479aafc834339ec26fd29bf64d9143511dbe7382696c524104ada2b57e609343ce0590f1dc6e73406ad439bae829301a741425c1707a8045496c1893a4a55c657d388491dc0987b5f414459a13c82bbcc527d0138fe38893c48a901afe1008aecd3b3d6597b2935a47ed9e912ec6e5c06059789997d498fb07e69580e4b43a3826465039d94a7852e88fc983ff9eb092189ba4832a10e1dfe79aaee82cd6cf0150d68caaf40c45024b21c354aaa9897afe80dca6"}, {0xd0, 0x104, 0x90, "fdd186c0bce994d1fb446fe807a1f2bafa56e9c756a365510a8106193cd81d47d788842982746c9c6d9cd050ab77c96753fbb6fb3b6bdcf58c5c73e4639f7deca3d2a60d521a5a86dd1007792dbdc6557734dc26721ce3d9f0e903f3ffae173cfa16c8b220a210de0d267761c1128322839e8da0d3bc7a90ba1172b88c73779e5aa0749346bce2a7b96137ee08690874de3a2db6e03d9142e1355ddbd7f72ef54ff4a5374c24b0915d8d1d3cc77606986a3b87336ea4de353d77c928f3b5"}, {0xe0, 0x10b, 0xffff5043, "04cecb42fe62ef044463e8de04fbf75e2a9067f8dc4539ff5f463bd096c8ea9d4cc39d104ed8b201dffaa1ea7f646f639ecda4850af80b8d2ab5d956fcaa3f43616226e923d6b84985ea299acb00f9b2ebed7a1a0e698d4b79092ec0fc9f43e1ef190f1d1d194aef1be95bbfbaafee5fa1b3787f4d3694baedb75e0243f22d98fece97501cb88af86e2c8b74d2b61a2a080eebafb04aa157d7b6e2f109030441cf2ebee6f347a7091665c198564aa5569b3320f2dd96dcc498560a70810be1b3abedbdaba3fb1b5e24618fc292"}, {0x90, 0x28, 0x8, "2caa6c1a494cb4c3770ea49e66b53f00429b9d5bb9d59dfa2c64a2e2e5490a7632b25224cf1a148850513d811b61966f00cde2296a4b04c78f3ff98cfa58fd249e0ebf89e6568ec9f0d51d87f30bc661b1c6fba5fa91d84db47065943a418f88109335485e2efdfda48fdf2625bdc0ec7c8ef47e9a886c395db003c1"}, {0x1010, 0x88, 0x0, "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"}], 0x23b0}, 0x0)
syz_emit_vhci(&(0x7f0000002cc0)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x1, 0xc9, 0x1, 0x3}}}, 0x8)
ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000002d00)={0xeb, 0x1, 0x1})
write(r1, &(0x7f0000002d40)="9149fc52a5d10628aebd100e35383f5f85a6263e8d5410d05872e62d94d99597d44fbf35665154c55e666799f5f026e05a6ff3f3a10aa6a27cc1f95b1df7cdce1f60f7ea0e497953d1ec5a3a21f82e8dbf2bbe2a5826af8a7c88950d893d384e972802104754dae08312c211090c15337c8c1bf42af98da1b38cb4ff2249f76fed34f1237324cd9ff1034af64a269e05c7d3ca04519e5d44bfa0a30964dbb506a30d02d01624f76e37984e785f37eec27b49c2bb7f78a23f", 0xb8)
lsetxattr$security_capability(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40), &(0x7f0000002e80)=@v2={0x2000000, [{0x7, 0x28e}, {0xfffffff3, 0x1}]}, 0x14, 0x2)
write(r2, &(0x7f0000002ec0)="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", 0x1000)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, &(0x7f0000003ec0)=[0xffffffffffffffff, 0xfffffffffffffb45])
ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000003f00))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000003f40)={{0x1, 0x1, 0x18, r0, {0x5c5}}, './file0\x00'})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000003fc0), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000004080)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x14, r9, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x2004c800)
r10 = fcntl$dupfd(r7, 0x406, r1)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r10)

216.81184ms ago: executing program 1 (id=178):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2e41d16cd5f466b822000f00d0460f06f245dd48f526263ef2a585f6b92e030000b800000000ba008000000f3041ab0fc73a0fc71f", 0x35}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000140)={0xc0000, 0x0, {[0x9, 0x4, 0x6, 0xd0, 0xfffffffffffffffe, 0x25c7d058, 0x5, 0x3]}})
bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x68, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x9, 0x1, 0x41, 0x5}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x68}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x19)
close(0x3)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES8=r5, @ANYRES32=r5, @ANYRES8=0x0, @ANYRES16=r5, @ANYBLOB="c05029f06366713d5d3abe8200a9df68c9d6c17e8eda09ce186e75a6ceaa459399fe3b18c824c3d7c37cb14db125dd1886765374e200031b12fc5a4463cf114d47b5e44040618e6ede6a6f16c6df42a85f5b53814cca3bde965fd64f6c102404553f98798a59fcd88aedca63a02b4090ac47600117bd16fe7b60990cf457b3f3925fd5"], 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x8008054)
write$nci(r3, &(0x7f0000000040)=ANY=[], 0x14)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

131.477655ms ago: executing program 2 (id=179):
userfaultfd(0x80801) (async)
fsopen(&(0x7f0000000200)='cifs\x00', 0x0) (async)
socket$inet6(0xa, 0x80802, 0x80000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
socket$rds(0x15, 0x5, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
listen(r4, 0x8) (async)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x9, 0x7, 0xfffff001}, 0x10) (async)
ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000000)={0x1d1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/drivers/ushc/new_id\x00', 0x2, 0x0)
read(r6, &(0x7f000000ef00)=""/267, 0x10b)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15)

61.036367ms ago: executing program 2 (id=180):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x2001, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94)

60.854125ms ago: executing program 2 (id=181):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$media(&(0x7f0000000140), 0x3, 0x100)
ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000a00)={{0x80000000, 0x0, 0x6, [0x6, 0x6]}, {0x80000000, 0x0, 0x69edb310c7b022fe, [0x9, 0x2]}, 0x10000000, [0x22, 0x1]})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0, 0x0, r1}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

0s ago: executing program 2 (id=182):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
r2 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000040)={0x3a, &(0x7f0000000180)=[{0x16, '\x00', @st={0x4, [{0x1, @uvalue=0x401}, {0x2, @svalue=0x6}, {0x3, @svalue=0xffffffffffffffff}, {0x3, @uvalue=0x3}]}, 0x6}]})
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000005c0)=[{0x8, 0x0, [0x40d, 0x0, 0x9, 0x8001, 0x3, 0x100005, 0x47, 0x5, 0xfffffffe, 0x7, 0x1, 0x4, 0x8, 0x0, 0x6]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0xdc, 0x0, &(0x7f0000000c80)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000640)={@flat=@handle={0x73682a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x101, 0x3}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}, @dead_binder_done, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b00)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f0000000a40)=""/133, 0x85, 0x1, 0x1a}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/152, 0x98, 0x2, 0x21}}, &(0x7f0000000840)={0x0, 0x18, 0x40}}, 0x1000}, @release={0x40046306, 0x1}, @free_buffer, @exit_looper, @increfs_done={0x40106308, 0x3}], 0xca, 0x0, &(0x7f0000000b80)="6a4265d18466f3bd355c32006c992eb32e5d1a9102de1cc88092e23b14a77d8737cfff27365829b0c64f96ecbcad738b8855f5535ba6b980125a2f0316739151cb2d146e607db66a5361607e5a24eed38d8f568638b91dfafb35e63fdf27103c705516575e1b379abf36ed8e903ced380d60850e5a2fe7bb98ecc62a502c148708f05d8a0c99b0d41a582a0dbef3296e64ae72597303dbd372ea65447209c450a879c95536e06b82540655dbdb2d3e935802ae89e4744a183379f6bce3066b746fa75adad621ff6f4ebc"})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
write(r4, 0x0, 0x0)
syz_io_uring_setup(0x6606, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000580))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
mkdir(&(0x7f00000002c0)='./sys\x00', 0x20)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0)
write(r7, &(0x7f0000000400)='dummy_udc.0', 0xb)
poll(&(0x7f0000000140)=[{r1, 0x4100}], 0x1, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4000010, 0xffffffffffffffff, 0xa73ac000)
r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180)
ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f00000000c0)={"0300", 0x9, 0x6, 0x3, 0x0, 0x8, "f700194000", '\x00\x00G\x00', "050000ff", '\x00', ["69000000000400030800", "800400"]})
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x31, &(0x7f0000000380)=""/49}, &(0x7f0000000140)="8536be0bfad6", 0x0, 0x8009, 0x10000, 0x1, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:7800' (ED25519) to the list of known hosts.
[   48.307229][   T42] kauditd_printk_skb: 20 callbacks suppressed
[   48.307246][   T42] audit: type=1400 audit(1787459635.643:141): avc:  denied  { mounton } for  pid=5708 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   48.319100][   T42] audit: type=1400 audit(1787459635.653:142): avc:  denied  { mount } for  pid=5708 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   48.321429][ T5708] cgroup: Unknown subsys name 'net'
[   48.332450][   T42] audit: type=1400 audit(1787459635.673:143): avc:  denied  { unmount } for  pid=5708 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   48.494631][ T5708] cgroup: Unknown subsys name 'cpuset'
[   48.498372][ T5708] cgroup: Unknown subsys name 'rlimit'
[   48.622217][   T42] audit: type=1400 audit(1787459635.953:144): avc:  denied  { setattr } for  pid=5708 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   48.629068][   T42] audit: type=1400 audit(1787459635.963:145): avc:  denied  { create } for  pid=5708 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   48.635043][   T42] audit: type=1400 audit(1787459635.963:146): avc:  denied  { write } for  pid=5708 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   48.640520][   T42] audit: type=1400 audit(1787459635.963:147): avc:  denied  { read } for  pid=5708 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   48.647017][   T42] audit: type=1400 audit(1787459635.983:148): avc:  denied  { read } for  pid=5435 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   48.654057][   T42] audit: type=1400 audit(1787459635.983:149): avc:  denied  { read } for  pid=5435 comm="dhcpcd" name="n31" dev="tmpfs" ino=1891 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   48.662280][   T42] audit: type=1400 audit(1787459635.983:150): avc:  denied  { open } for  pid=5435 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1891 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   48.682326][ T5711] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   49.343014][ T5708] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.172194][ T5730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.175504][ T5732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.175644][ T5730] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.179589][ T5732] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   53.183375][ T5736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.185044][ T5732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.187083][ T5736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   53.188857][ T5732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.190190][ T5730] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.190462][ T5736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.191061][ T5736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.191305][ T5736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.192959][ T5732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   53.196434][ T5736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.200253][ T5732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.200444][ T5730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   53.200858][ T5730] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   53.201408][ T5736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.201644][ T5736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.207413][ T5732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.837534][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.841191][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.844064][ T5721] bridge_slave_0: entered allmulticast mode
[   53.847536][ T5721] bridge_slave_0: entered promiscuous mode
[   53.853401][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.856195][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.858967][ T5721] bridge_slave_1: entered allmulticast mode
[   53.862972][ T5721] bridge_slave_1: entered promiscuous mode
[   53.874282][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.876868][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.879416][ T5726] bridge_slave_0: entered allmulticast mode
[   53.882139][ T5726] bridge_slave_0: entered promiscuous mode
[   53.885266][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.887521][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.889736][ T5726] bridge_slave_1: entered allmulticast mode
[   53.892401][ T5726] bridge_slave_1: entered promiscuous mode
[   53.957288][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.963857][ T5721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.967626][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.971309][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.974844][ T5720] bridge_slave_0: entered allmulticast mode
[   53.978778][ T5720] bridge_slave_0: entered promiscuous mode
[   53.993096][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.002427][ T5721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.005320][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.007482][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.009598][ T5720] bridge_slave_1: entered allmulticast mode
[   54.012489][ T5720] bridge_slave_1: entered promiscuous mode
[   54.065718][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.067984][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.070687][ T5731] bridge_slave_0: entered allmulticast mode
[   54.073674][ T5731] bridge_slave_0: entered promiscuous mode
[   54.078062][ T5726] team0: Port device team_slave_0 added
[   54.081167][ T5726] team0: Port device team_slave_1 added
[   54.099810][ T5720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.104135][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.106740][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.109376][ T5731] bridge_slave_1: entered allmulticast mode
[   54.112614][ T5731] bridge_slave_1: entered promiscuous mode
[   54.124044][ T5721] team0: Port device team_slave_0 added
[   54.128002][ T5721] team0: Port device team_slave_1 added
[   54.137935][ T5720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.163991][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.166314][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.176058][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.182302][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.186485][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.195925][ T5720] team0: Port device team_slave_0 added
[   54.207345][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.210108][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.220065][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.234998][ T5720] team0: Port device team_slave_1 added
[   54.237507][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.240274][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.250790][ T5721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.263318][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.266026][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.274746][ T5721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.285365][ T5731] team0: Port device team_slave_0 added
[   54.300874][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.303622][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.311032][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.320920][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.323143][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.330515][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.334867][ T5731] team0: Port device team_slave_1 added
[   54.392560][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.395313][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.405237][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.420699][ T5726] hsr_slave_0: entered promiscuous mode
[   54.423058][ T5726] hsr_slave_1: entered promiscuous mode
[   54.427922][ T5720] hsr_slave_0: entered promiscuous mode
[   54.429995][ T5720] hsr_slave_1: entered promiscuous mode
[   54.432032][ T5720] debugfs: 'hsr0' already exists in 'hsr'
[   54.433760][ T5720] Cannot create hsr debugfs directory
[   54.435767][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.437613][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.444744][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.460887][ T5721] hsr_slave_0: entered promiscuous mode
[   54.463033][ T5721] hsr_slave_1: entered promiscuous mode
[   54.465012][ T5721] debugfs: 'hsr0' already exists in 'hsr'
[   54.467051][ T5721] Cannot create hsr debugfs directory
[   54.509857][ T5731] hsr_slave_0: entered promiscuous mode
[   54.511952][ T5731] hsr_slave_1: entered promiscuous mode
[   54.513802][ T5731] debugfs: 'hsr0' already exists in 'hsr'
[   54.515363][ T5731] Cannot create hsr debugfs directory
[   54.853245][ T5720] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.863369][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   54.866936][ T5720] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.876385][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   54.879812][ T5720] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.886260][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   54.898896][ T5720] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.904681][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   54.937551][ T5721] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.943049][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   54.946198][ T5721] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.951758][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   54.955330][ T5721] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.962264][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   54.965223][ T5721] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.970178][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.031490][ T5726] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   55.037512][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.041124][ T5726] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   55.047444][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.051113][ T5726] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   55.056344][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.074051][ T5726] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   55.079350][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.143724][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.149597][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   55.158141][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.162378][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   55.165171][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.169408][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   55.173889][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.179389][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   55.231735][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.241118][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.262899][ T5735] Bluetooth: hci0: command tx timeout
[   55.262906][ T5083] Bluetooth: hci3: command tx timeout
[   55.264485][ T5720] 8021q: adding VLAN 0 to HW filter on device team0
[   55.272786][ T5083] Bluetooth: hci2: command tx timeout
[   55.272825][ T5735] Bluetooth: hci1: command tx timeout
[   55.277397][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.280472][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.284450][ T5721] 8021q: adding VLAN 0 to HW filter on device team0
[   55.293957][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.296164][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.307880][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.310844][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.330950][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.333211][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.373008][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.384675][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.422942][ T5726] 8021q: adding VLAN 0 to HW filter on device team0
[   55.428270][ T5731] 8021q: adding VLAN 0 to HW filter on device team0
[   55.435274][  T246] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.438362][  T246] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.445684][  T246] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.448627][  T246] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.459708][  T246] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.462774][  T246] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.468781][  T246] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.471014][  T246] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.658904][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.668503][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.707498][ T5721] veth0_vlan: entered promiscuous mode
[   55.718888][ T5721] veth1_vlan: entered promiscuous mode
[   55.723733][ T5720] veth0_vlan: entered promiscuous mode
[   55.738397][ T5720] veth1_vlan: entered promiscuous mode
[   55.748839][ T5721] veth0_macvtap: entered promiscuous mode
[   55.760729][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.764800][ T5721] veth1_macvtap: entered promiscuous mode
[   55.774675][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.784397][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.794279][ T5720] veth0_macvtap: entered promiscuous mode
[   55.803890][ T5720] veth1_macvtap: entered promiscuous mode
[   55.828449][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.841277][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.867099][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.870900][ T5726] veth0_vlan: entered promiscuous mode
[   55.894285][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.897398][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.899866][ T5726] veth1_vlan: entered promiscuous mode
[   55.916118][ T5731] veth0_vlan: entered promiscuous mode
[   55.941048][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.944031][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.952693][ T5731] veth1_vlan: entered promiscuous mode
[   55.960070][   T42] kauditd_printk_skb: 15 callbacks suppressed
[   55.960079][   T42] audit: type=1400 audit(1787459643.293:166): avc:  denied  { mount } for  pid=5721 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   55.968999][   T42] audit: type=1400 audit(1787459643.303:167): avc:  denied  { mounton } for  pid=5721 comm="syz-executor" path="/syzkaller.RcLY1i/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   55.970882][ T5726] veth0_macvtap: entered promiscuous mode
[   55.976505][   T42] audit: type=1400 audit(1787459643.303:168): avc:  denied  { mount } for  pid=5721 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   55.985332][   T42] audit: type=1400 audit(1787459643.303:169): avc:  denied  { mounton } for  pid=5721 comm="syz-executor" path="/syzkaller.RcLY1i/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   55.991702][ T5726] veth1_macvtap: entered promiscuous mode
[   55.995842][   T42] audit: type=1400 audit(1787459643.303:170): avc:  denied  { mounton } for  pid=5721 comm="syz-executor" path="/syzkaller.RcLY1i/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   56.001709][  T246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.002273][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.002419][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.002449][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.002485][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.002514][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.002543][ T5821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.002573][ T5821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.002602][ T5821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.007372][   T42] audit: type=1400 audit(1787459643.313:171): avc:  denied  { unmount } for  pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   56.009930][  T246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.011279][   T42] audit: type=1400 audit(1787459643.313:172): avc:  denied  { mounton } for  pid=5721 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   56.021036][ T5721] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.023884][   T42] audit: type=1400 audit(1787459643.313:173): avc:  denied  { mount } for  pid=5721 comm="syz-executor" name="/" dev="gadgetfs" ino=8040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   56.023924][   T42] audit: type=1400 audit(1787459643.323:174): avc:  denied  { mount } for  pid=5721 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   56.039531][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.041671][   T42] audit: type=1400 audit(1787459643.323:175): avc:  denied  { mounton } for  pid=5721 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   56.050938][  T246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.079758][  T246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.080204][ T5731] veth0_macvtap: entered promiscuous mode
[   56.087950][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.099035][ T5731] veth1_macvtap: entered promiscuous mode
[   56.130231][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.140653][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.174023][  T246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.177291][  T246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.231381][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.234709][ T5572] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.234744][ T5572] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.234771][ T5572] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.234789][ T5572] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.234806][ T5572] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.234823][ T5572] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.234841][ T5572] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.234858][ T5572] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.238401][ T5876] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   56.242018][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.279756][ T5876] CIFS: Attempting to mount //127.0.0.1/s�:e[�1�2haref�D�r=root
[   56.286370][ T5876] CIFS: VFS: Error connecting to socket. Aborting operation.
[   56.289284][ T5876] CIFS: VFS: cifs_mount failed w/return code = -111
[   56.305001][ T5876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   56.313349][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.316568][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.342218][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.344742][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.692017][   T57] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   56.768167][ T5896] binder: 5894:5896 ioctl c0306201 2000000001c0 returned -22
[   56.851967][   T57] usb 7-1: Using ep0 maxpacket: 32
[   56.858105][   T57] usb 7-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.40
[   56.882638][   T57] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.885618][   T57] usb 7-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   56.889450][   T57] usb 7-1: config 1 interface 0 has no altsetting 0
[   56.897543][   T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.900140][   T57] usb 7-1: Product: 思ᆝ眦⟇㖯ᰐ좮嚢妇亰摓솃ᔡ琂펲멇恰㴋靈䜮咓唨㹾독⚿姡溷ச䗞仄៴ϔ䥋捦融ਢ䇦魛모썵嫔헭ﰾ暳ⴘ㓇ﻥ唄ꔼꐎ͹ⶢ圹ꬍ烏鵈鍮䳩᜺
[   56.911031][   T57] usb 7-1: Manufacturer: ь
[   56.912567][   T57] usb 7-1: SerialNumber: syz
[   56.947492][   T41] usb 8-1: new low-speed USB device number 2 using dummy_hcd
[   57.116978][ T5902] Need at least one configuration in g1.
[   57.120682][ T5902] udc dummy_udc.0: failed to start g1: -22
[   57.124496][ T5902] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[   57.131570][ T5902] UDC core: g1: couldn't find an available UDC or it's busy
[   57.133962][   T41] usb 8-1: device descriptor read/64, error -71
[   57.143546][   T57] usbhid 7-1:1.0: can't add hid device: -71
[   57.145771][   T57] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[   57.154187][   T57] usb 7-1: USB disconnect, device number 2
[   57.256715][ T5912] bonding: no command found in bonding_masters - use +ifname or -ifname
[   57.342016][ T5735] Bluetooth: hci1: command tx timeout
[   57.342042][ T5083] Bluetooth: hci0: command tx timeout
[   57.352930][ T5083] Bluetooth: hci2: command tx timeout
[   57.354306][ T5735] Bluetooth: hci3: command tx timeout
[   57.392458][   T41] usb 8-1: new low-speed USB device number 3 using dummy_hcd
[   57.471888][   T57] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   57.532755][   T41] usb 8-1: device descriptor read/64, error -71
[   57.623563][   T57] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   57.631452][   T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.635040][   T57] usb 7-1: Product: syz
[   57.636776][   T57] usb 7-1: Manufacturer: syz
[   57.638705][   T57] usb 7-1: SerialNumber: syz
[   57.652245][   T41] usb usb8-port1: attempt power cycle
[   57.847954][ T5906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.855166][ T5906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.973945][ T5926] syz_tun: entered allmulticast mode
[   57.977270][ T5926] lo: entered allmulticast mode
[   57.979872][   T57] rtl8150 7-1:1.0: couldn't reset the device
[   57.984404][   T57] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5
[   57.993312][   T57] usb 7-1: USB disconnect, device number 3
[   57.994296][ T5925] syz_tun: left allmulticast mode
[   58.003930][   T41] usb 8-1: new low-speed USB device number 4 using dummy_hcd
[   58.033427][   T41] usb 8-1: device descriptor read/8, error -71
[   58.149844][ T5895] Set syz1 is full, maxelem 65536 reached
[   58.292421][   T41] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[   58.314016][   T41] usb 8-1: device descriptor read/8, error -71
[   58.432084][   T41] usb usb8-port1: unable to enumerate USB device
[   58.517820][ T5946] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   58.526685][ T5946] block device autoloading is deprecated and will be removed.
[   58.603986][ T5948] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   58.749122][ T5956] syz.1.26 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   58.801699][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[   58.953077][ T5966] bpf: Bad value for 'gid'
[   58.957290][ T5966] Driver unsupported XDP return value 0 on prog  (id 6) dev N/A, expect packet loss!
[   59.197655][ T5964] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26'.
[   59.200518][ T5964] netlink: 60 bytes leftover after parsing attributes in process `syz.1.26'.
[   59.206561][ T5972] Zero length message leads to an empty skb
[   59.277786][ T5981] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   59.372273][ T5996] netlink: 48 bytes leftover after parsing attributes in process `syz.2.35'.
[   59.423544][ T5735] Bluetooth: hci3: command tx timeout
[   59.423585][ T5083] Bluetooth: hci2: command tx timeout
[   59.423634][ T5732] Bluetooth: hci1: command tx timeout
[   59.423653][ T5732] Bluetooth: hci0: command tx timeout
[   59.622343][ T6001] loop5: detected capacity change from 0 to 7
[   59.629182][ T6001]  loop5: p1 p3 p4
[   59.630679][ T6001] loop5: partition table partially beyond EOD, truncated
[   59.635371][ T6001] loop5: p1 size 128 extends beyond EOD, truncated
[   59.640664][ T6001] loop5: p3 size 3645588866 extends beyond EOD, truncated
[   59.665246][ T5733] udevd[5733]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[   59.668182][ T5728] udevd[5728]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[   59.672912][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[   59.715795][   T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   59.730584][ T6006] netlink: 27 bytes leftover after parsing attributes in process `syz.3.39'.
[   59.781996][ T6010] bridge_slave_0: left allmulticast mode
[   59.783907][ T6010] bridge_slave_0: left promiscuous mode
[   59.786680][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.791723][ T6010] bridge_slave_1: left allmulticast mode
[   59.795627][ T6010] bridge_slave_1: left promiscuous mode
[   59.797471][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.805518][ T6010] bond0: (slave bond_slave_0): Releasing backup interface
[   59.809701][ T6010] bond0: (slave bond_slave_1): Releasing backup interface
[   59.816966][ T6010] team0: Port device team_slave_0 removed
[   59.820784][ T6010] team0: Port device team_slave_1 removed
[   59.824802][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.827094][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.830290][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.833355][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.836392][ T6010] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   59.863195][   T34] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   59.867803][   T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   59.872376][   T34] usb 7-1: config 0 has no interfaces?
[   59.874697][   T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.887402][   T34] usb 7-1: config 0 descriptor??
[   59.896011][ T6016] netdevsim netdevsim1 netdevsim0: refused to change device tx_queue_len
[   60.099580][ T5723] usb 7-1: USB disconnect, device number 4
[   60.126036][ T6027] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45'.
[   60.134151][ T6027] netlink: 32 bytes leftover after parsing attributes in process `syz.0.45'.
[   60.140564][ T6031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45'.
[   60.501927][   T41] usb 8-1: new low-speed USB device number 6 using dummy_hcd
[   60.575510][ T6052] random: crng reseeded on system resumption
[   60.652620][   T41] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   60.657293][   T41] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[   60.660322][   T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   60.664223][   T41] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   60.667775][   T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   60.672191][   T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   60.678172][   T41] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[   60.681278][   T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   60.685617][   T41] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   60.689264][   T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   60.692660][   T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   60.696700][   T41] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[   60.698994][   T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   60.703166][   T41] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   60.706679][   T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   60.710237][   T41] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   60.715887][   T41] usb 8-1: string descriptor 0 read error: -22
[   60.717840][   T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.732781][   T41] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   60.822416][ T6061] lo speed is unknown, defaulting to 1000
[   60.825824][ T6061] lo speed is unknown, defaulting to 1000
[   60.830115][ T6061] lo speed is unknown, defaulting to 1000
[   60.833605][ T6061] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   60.839950][ T6061] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   60.846666][ T6061] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   60.853323][ T6061] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   60.859753][ T6061] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   60.873614][ T6062] netlink: 'syz.2.54': attribute type 10 has an invalid length.
[   60.877996][ T6062] 8021q: adding VLAN 0 to HW filter on device team0
[   60.881720][ T6062] bond0: (slave team0): Enslaving as an active interface with an up link
[   60.885215][ T6061] lo speed is unknown, defaulting to 1000
[   60.888172][ T6061] lo speed is unknown, defaulting to 1000
[   60.890718][ T6061] lo speed is unknown, defaulting to 1000
[   60.893977][ T6061] lo speed is unknown, defaulting to 1000
[   60.958767][ T6066] Bluetooth: MGMT ver 1.23
[   61.051767][ T6029] erspan0: entered promiscuous mode
[   61.055062][ T5873] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[   61.119464][ T6074] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   61.222106][ T5873] usb 6-1: Invalid ep0 maxpacket: 64
[   61.268119][   T42] kauditd_printk_skb: 155 callbacks suppressed
[   61.268130][   T42] audit: type=1400 audit(1787459648.603:331): avc:  denied  { mounton } for  pid=6086 comm="syz.2.61" path="/17/file0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   61.361990][ T5873] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[   61.390074][   T42] audit: type=1400 audit(1787459648.723:332): avc:  denied  { unmount } for  pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   61.426539][ T6099] netlink: 'syz.2.64': attribute type 1 has an invalid length.
[   61.433326][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.64'.
[   61.437295][ T6099] macsec0: entered promiscuous mode
[   61.439862][ T6099] macsec0: entered allmulticast mode
[   61.444950][ T6099] veth1_macvtap: entered allmulticast mode
[   61.502311][ T5083] Bluetooth: hci2: command tx timeout
[   61.503823][ T5735] Bluetooth: hci0: command tx timeout
[   61.504783][ T5083] Bluetooth: hci3: command tx timeout
[   61.506590][ T5730] Bluetooth: hci1: command tx timeout
[   61.521912][ T5873] usb 6-1: Invalid ep0 maxpacket: 64
[   61.524031][ T5873] usb usb6-port1: attempt power cycle
[   61.626636][ T6106] netlink: 60 bytes leftover after parsing attributes in process `syz.2.67'.
[   61.662173][   T42] audit: type=1400 audit(1787459649.003:333): avc:  denied  { create } for  pid=6102 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   61.669245][   T42] audit: type=1400 audit(1787459649.003:334): avc:  denied  { read } for  pid=6102 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   61.682514][ T6108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.67'.
[   61.841929][   T42] audit: type=1400 audit(1787459649.173:335): avc:  denied  { bind } for  pid=6109 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   61.847689][ T6110] binder: 6109:6110 ioctl 400c620e 200000000180 returned -22
[   61.849205][   T42] audit: type=1400 audit(1787459649.183:336): avc:  denied  { connect } for  pid=6109 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   61.862726][ T5873] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[   61.893397][ T5873] usb 6-1: Invalid ep0 maxpacket: 64
[   61.899497][ T6112] overlayfs: conflicting lowerdir path
[   61.902032][   T42] audit: type=1400 audit(1787459649.233:337): avc:  denied  { unlink } for  pid=6111 comm="syz.0.69" name="#1" dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   61.922302][ T6112] pvfs2: Unknown parameter '('
[   61.924897][ T6112] overlay: Unknown parameter 'euid>00000000000000000000'
[   62.011760][   T42] audit: type=1400 audit(1787459649.343:338): avc:  denied  { create } for  pid=6117 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   62.012378][ T6118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'.
[   62.020258][   T42] audit: type=1400 audit(1787459649.353:339): avc:  denied  { write } for  pid=6117 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   62.025046][ T5873] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[   62.062803][ T5873] usb 6-1: Invalid ep0 maxpacket: 64
[   62.066703][ T5873] usb usb6-port1: unable to enumerate USB device
[   62.213172][   T42] audit: type=1400 audit(1787459649.553:340): avc:  denied  { append } for  pid=6123 comm="syz.0.73" name="comedi0" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   62.258425][ T6129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.76'.
[   62.268512][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'.
[   62.274907][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'.
[   62.302272][ T6129] sch_tbf: burst 15 is lower than device syzkaller0 mtu (1514) !
[   62.428250][ T6142] process 'syz.0.77' launched '/dev/fd/3' with NULL argv: empty string added
[   62.437682][ T6142] openvswitch: netlink: Key 26 has unexpected len 20 expected 16
[   62.668234][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.80'.
[   62.740678][ T6158] Option '�'M�O��' to dns_resolver key: bad/missing value
[   62.798426][ T6160] lo speed is unknown, defaulting to 1000
[   62.916443][ T1162] IPVS: starting estimator thread 0...
[   63.031971][ T6171] IPVS: using max 45 ests per chain, 108000 per kthread
[   63.112691][  T849] usb 8-1: USB disconnect, device number 6
[   63.211865][ T6177] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   63.215226][ T6177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.88'.
[   63.217854][ T6177] netlink: 'syz.3.88': attribute type 7 has an invalid length.
[   63.220084][ T6177] netlink: 'syz.3.88': attribute type 8 has an invalid length.
[   63.222826][   T41] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   63.223980][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'.
[   63.381903][   T41] usb 7-1: Using ep0 maxpacket: 8
[   63.383958][   T41] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   63.387924][   T41] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   63.391412][   T41] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   63.394950][   T41] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   63.397947][   T41] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   63.401964][   T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.602008][ T5871] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   63.608922][   T41] usb 7-1: GET_CAPABILITIES returned 0
[   63.610667][   T41] usbtmc 7-1:16.0: can't read capabilities
[   63.643469][ T6185] input: syz0 as /devices/virtual/input/input5
[   63.732207][ T5871] usb 8-1: device descriptor read/64, error -71
[   63.813552][    C2] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   63.827189][   T56] usb 7-1: USB disconnect, device number 5
[   63.972455][ T5871] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   64.103094][ T5871] usb 8-1: device descriptor read/64, error -71
[   64.187935][ T6233] batadv_slave_0: entered promiscuous mode
[   64.192874][ T6232] batadv_slave_0: left promiscuous mode
[   64.223792][ T5871] usb usb8-port1: attempt power cycle
[   64.334732][ T6249] kvm: kvm [6248]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x7eb7
[   64.362950][ T6249] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[   64.388809][ T6249] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[   64.450602][ T6259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=6259 comm=syz.2.104
[   64.562003][ T5871] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[   64.588807][ T5871] usb 8-1: device descriptor read/8, error -71
[   64.788068][ T6275] vivid-000: =================  START STATUS  =================
[   64.791530][ T6275] vivid-000: RDS Tx I/O Mode: Controls
[   64.793934][ T6275] vivid-000: RDS Program ID: 32904
[   64.795643][ T6275] vivid-000: RDS Program Type: 3
[   64.798300][ T6275] vivid-000: RDS PS Name: VIVID-TX
[   64.799938][ T6275] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will
[   64.803310][ T6275] vivid-000: RDS Stereo: true
[   64.805174][ T6275] vivid-000: RDS Artificial Head: false
[   64.806837][ T6275] vivid-000: RDS Compressed: false
[   64.808371][ T6275] vivid-000: RDS Dynamic PTY: false
[   64.810073][ T6275] vivid-000: RDS Traffic Announcement: false
[   64.812348][ T6275] vivid-000: RDS Traffic Program: true
[   64.814093][ T6275] vivid-000: RDS Music: true
[   64.815662][ T6275] vivid-000: ==================  END STATUS  ==================
[   64.831944][ T5871] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[   64.852640][ T5871] usb 8-1: device descriptor read/8, error -71
[   64.928254][ T6278] loop3: detected capacity change from 0 to 7
[   64.934657][ T6278] Dev loop3: unable to read RDB block 7
[   64.936694][ T6278]  loop3: unable to read partition table
[   64.939401][ T6278] loop3: partition table beyond EOD, truncated
[   64.941644][ T6278] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[   64.963002][ T5871] usb usb8-port1: unable to enumerate USB device
[   65.504732][ T6288] XFS (mtdblock0): Invalid superblock magic number
[   65.632076][ T5730] Bluetooth: hci0: unexpected event for opcode 0x0c0d
[   65.683120][ T6303] syzkaller0: entered promiscuous mode
[   65.685278][ T6303] syzkaller0: entered allmulticast mode
[   65.746744][ T6303] zswap: compressor z not available
[   65.752115][    T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   65.756552][    T9] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[   65.815231][ T6315] null_blk: nullb1: using native zone append
[   65.838828][ T6315] null_blk: disk nullb1 created
[   65.860825][ T6315] null_blk: disk nullb2 created
[   65.963148][ T6331] nvmet: adding nsid 1 to subsystem testsubsys
[   65.970260][ T6331] nvmet: failed to open block device (null): (-22)
[   66.159862][ T5730] Bluetooth: hci1: unexpected event for opcode 0x100c
[   66.210885][ T6353] netlink: 'syz.0.132': attribute type 1 has an invalid length.
[   66.228761][ T6353] bond1: entered promiscuous mode
[   66.231443][ T6353] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.242120][ T6353] bond1: (slave bridge1): making interface the new active one
[   66.244630][ T6353] bridge1: entered promiscuous mode
[   66.247377][ T6353] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   66.284811][   T42] kauditd_printk_skb: 116 callbacks suppressed
[   66.284828][   T42] audit: type=1400 audit(1787459653.623:457): avc:  denied  { bind } for  pid=6358 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   66.295666][   T42] audit: type=1400 audit(1787459653.623:458): avc:  denied  { read } for  pid=6360 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   66.305669][   T42] audit: type=1400 audit(1787459653.623:459): avc:  denied  { ioctl } for  pid=6360 comm="syz.0.134" path="socket:[12251]" dev="sockfs" ino=12251 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   66.319819][   T42] audit: type=1400 audit(1787459653.633:460): avc:  denied  { ioctl } for  pid=6360 comm="syz.0.134" path="socket:[12247]" dev="sockfs" ino=12247 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   66.344053][   T42] audit: type=1400 audit(1787459653.683:461): avc:  denied  { append } for  pid=6367 comm="syz.0.136" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   66.354209][   T42] audit: type=1400 audit(1787459653.683:462): avc:  denied  { ioctl } for  pid=6367 comm="syz.0.136" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   66.405182][ T6368] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   66.471124][   T42] audit: type=1400 audit(1787459653.803:463): avc:  denied  { read } for  pid=6380 comm="syz.1.139" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   66.475633][ T6383] i2c i2c-0: delete_device: Can't find device in list
[   66.483833][   T42] audit: type=1400 audit(1787459653.803:464): avc:  denied  { read } for  pid=6382 comm="syz.3.140" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   66.501643][   T42] audit: type=1400 audit(1787459653.803:465): avc:  denied  { open } for  pid=6382 comm="syz.3.140" path="/dev/rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   66.514316][   T42] audit: type=1400 audit(1787459653.803:466): avc:  denied  { ioctl } for  pid=6382 comm="syz.3.140" path="/dev/rtc0" dev="devtmpfs" ino=943 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   66.692646][ T6401] lo speed is unknown, defaulting to 1000
[   66.710503][ T6412] __nla_validate_parse: 4 callbacks suppressed
[   66.710514][ T6412] netlink: 32 bytes leftover after parsing attributes in process `syz.1.151'.
[   66.872669][ T6433] xt_hashlimit: size too large, truncated to 1048576
[   66.901928][ T6437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.156'.
[   66.961940][ T5871] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[   66.974815][ T6446] jffs2: notice: (6446) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   66.975467][ T6448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.160'.
[   67.112350][ T5871] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   67.122076][ T5871] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   67.130128][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.137267][ T5871] usb 8-1: Product: syz
[   67.138860][ T5871] usb 8-1: Manufacturer: syz
[   67.145674][ T5871] usb 8-1: SerialNumber: syz
[   67.148495][ T5871] usb 8-1: config 0 descriptor??
[   67.175246][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'.
[   67.178896][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'.
[   67.183879][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'.
[   67.187412][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'.
[   67.190761][ T6466] binder: 6465:6466 ioctl c00c620f 200000000500 returned -22
[   67.191497][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'.
[   67.198116][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'.
[   67.201110][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'.
[   67.391160][ T6478] mmap: syz.1.169 (6478) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   67.625267][ T6498] syz.0.176 uses obsolete (PF_INET,SOCK_PACKET)
[   67.711699][ T6415] trusted_key: syz.3.146 sent an empty control message without MSG_MORE.
[   67.833552][    T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[   67.836338][    T9] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[   67.901942][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   68.065238][   T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[   68.069086][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   68.072785][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   68.076290][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   68.081880][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.084487][   T10] usb 5-1: Product: syz
[   68.085807][   T10] usb 5-1: Manufacturer: syz
[   68.087324][   T10] usb 5-1: SerialNumber: syz
[   68.091661][   T10] usb 5-1: config 0 descriptor??
[   68.160786][   T10] adutux 5-1:0.0: ADU208  now attached to /dev/usb/adutux0
[   68.168956][   T10] usb 5-1: USB disconnect, device number 2
[   68.297786][ T6498] xt_HMARK: spi-set and port-set can't be combined
[   68.300697][ T6498] ==================================================================
[   68.303687][ T6498] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0
[   68.306390][ T6498] Read of size 1 at addr ffff88802cbf07e0 by task syz.0.176/6498
[   68.310938][ T6498] 
[   68.311945][ T6498] CPU: 1 UID: 0 PID: 6498 Comm: syz.0.176 Not tainted syzkaller #0 PREEMPT(full) 
[   68.311965][ T6498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   68.311975][ T6498] Call Trace:
[   68.311981][ T6498]  <TASK>
[   68.311988][ T6498]  dump_stack_lvl+0x100/0x190
[   68.312016][ T6498]  print_report+0x13d/0x4b0
[   68.312041][ T6498]  ? __virt_addr_valid+0x239/0x430
[   68.312068][ T6498]  ? string+0x471/0x4d0
[   68.312092][ T6498]  kasan_report+0xdf/0x1c0
[   68.312125][ T6498]  ? string+0x471/0x4d0
[   68.312151][ T6498]  string+0x471/0x4d0
[   68.312176][ T6498]  ? __pfx_string+0x10/0x10
[   68.312202][ T6498]  vsnprintf+0x422/0x1300
[   68.312220][ T6498]  ? __pfx_vsnprintf+0x10/0x10
[   68.312236][ T6498]  ? is_bpf_text_address+0x94/0x1a0
[   68.312276][ T6498]  ? kernel_text_address+0x8d/0x100
[   68.312299][ T6498]  ? __kernel_text_address+0xd/0x30
[   68.312321][ T6498]  snprintf+0xc7/0x100
[   68.312336][ T6498]  ? __pfx_snprintf+0x10/0x10
[   68.312355][ T6498]  ? stack_trace_save+0x8e/0xc0
[   68.312378][ T6498]  dev_vprintk_emit+0x375/0x3e0
[   68.312405][ T6498]  ? __pfx_dev_vprintk_emit+0x10/0x10
[   68.312426][ T6498]  ? kasan_save_stack+0x3f/0x50
[   68.312450][ T6498]  ? do_syscall_64+0x123/0x790
[   68.312466][ T6498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.312485][ T6498]  dev_printk_emit+0xd2/0x10d
[   68.312506][ T6498]  ? __pfx_dev_printk_emit+0x10/0x10
[   68.312533][ T6498]  __dev_printk+0xcb/0x100
[   68.312554][ T6498]  _dev_err+0xef/0x127
[   68.312575][ T6498]  ? __pfx__dev_err+0x10/0x10
[   68.312597][ T6498]  ? dummy_queue+0x3ca/0xb00
[   68.312626][ T6498]  ? find_held_lock+0x2b/0x80
[   68.312645][ T6498]  ? raw_process_ep0_io+0x314/0x9c0
[   68.312673][ T6498]  raw_process_ep0_io.cold+0x65/0x7f
[   68.312700][ T6498]  raw_ioctl+0x1369/0x2b80
[   68.312727][ T6498]  ? __pfx_raw_ioctl+0x10/0x10
[   68.312751][ T6498]  ? selinux_file_ioctl+0x13b/0x290
[   68.312775][ T6498]  ? selinux_file_ioctl+0xb6/0x290
[   68.312800][ T6498]  ? __pfx_raw_ioctl+0x10/0x10
[   68.312824][ T6498]  __x64_sys_ioctl+0x18e/0x210
[   68.312845][ T6498]  do_syscall_64+0x123/0x790
[   68.312863][ T6498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.312879][ T6498] RIP: 0033:0x7f928339dd6b
[   68.312893][ T6498] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[   68.312909][ T6498] RSP: 002b:00007f9284335f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   68.312925][ T6498] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f928339dd6b
[   68.312937][ T6498] RDX: 00007f9284335fd0 RSI: 0000000040085503 RDI: 0000000000000008
[   68.312947][ T6498] RBP: 00007f9284335fd0 R08: 000000000000001a R09: 0000000000000409
[   68.312957][ T6498] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f9284335fd8
[   68.312968][ T6498] R13: 00002000000005c0 R14: 00007f9283625fa0 R15: 00007ffe1a8f10e8
[   68.312984][ T6498]  </TASK>
[   68.312990][ T6498] 
[   68.420729][ T6498] Allocated by task 1:
[   68.421984][ T6498]  kasan_save_stack+0x30/0x50
[   68.423436][ T6498]  kasan_save_track+0x14/0x30
[   68.424888][ T6498]  __kasan_kmalloc+0xaa/0xb0
[   68.426305][ T6498]  __kmalloc_node_track_caller_noprof+0x333/0x830
[   68.428286][ T6498]  kvasprintf+0xbc/0x150
[   68.429597][ T6498]  kvasprintf_const+0x66/0x1a0
[   68.431021][ T6498]  kobject_set_name_vargs+0x5a/0x140
[   68.432636][ T6498]  dev_set_name+0xc7/0x100
[   68.433998][ T6498]  usb_add_gadget+0x520/0x920
[   68.435420][ T6498]  usb_add_gadget_udc+0x26/0x70
[   68.436900][ T6498]  dummy_udc_probe+0x69e/0x960
[   68.438352][ T6498]  platform_probe+0x106/0x1d0
[   68.439795][ T6498]  really_probe+0x241/0xa60
[   68.441192][ T6498]  __driver_probe_device+0x210/0x460
[   68.442787][ T6498]  driver_probe_device+0x4a/0x140
[   68.444314][ T6498]  __device_attach_driver+0x1df/0x320
[   68.445925][ T6498]  bus_for_each_drv+0x159/0x1e0
[   68.447346][ T6498]  __device_attach+0x1e4/0x4d0
[   68.448827][ T6498]  device_initial_probe+0xaf/0xd0
[   68.450334][ T6498]  bus_probe_device+0x64/0x160
[   68.451785][ T6498]  device_add+0x121d/0x1970
[   68.453205][ T6498]  platform_device_add+0x35a/0x800
[   68.454779][ T6498]  dummy_hcd_init+0x803/0xc00
[   68.456215][ T6498]  do_one_initcall+0x11c/0x6f0
[   68.457694][ T6498]  kernel_init_freeable+0x6ea/0x7b0
[   68.459293][ T6498]  kernel_init+0x21/0x1e0
[   68.460575][ T6498]  ret_from_fork+0x730/0xd60
[   68.461973][ T6498]  ret_from_fork_asm+0x1a/0x30
[   68.463426][ T6498] 
[   68.464198][ T6498] Freed by task 6528:
[   68.465430][ T6498]  kasan_save_stack+0x30/0x50
[   68.466859][ T6498]  kasan_save_track+0x14/0x30
[   68.468320][ T6498]  kasan_save_free_info+0x3b/0x70
[   68.469874][ T6498]  __kasan_slab_free+0x5f/0x80
[   68.471339][ T6498]  kfree+0x22b/0x6c0
[   68.472491][ T6498]  kfree_const+0x5a/0x70
[   68.473704][ T6498]  kobject_put+0x218/0x640
[   68.475094][ T6498]  put_device+0x1f/0x30
[   68.476373][ T6498]  platform_remove+0x5f/0x80
[   68.477791][ T6498]  device_remove+0xcb/0x180
[   68.479192][ T6498]  device_release_driver_internal+0x44e/0x620
[   68.481049][ T6498]  unbind_store+0xf8/0x110
[   68.482421][ T6498]  drv_attr_store+0x74/0xb0
[   68.483839][ T6498]  sysfs_kf_write+0xf2/0x150
[   68.485278][ T6498]  kernfs_fop_write_iter+0x3e0/0x5f0
[   68.486912][ T6498]  vfs_write+0x6af/0x1050
[   68.488262][ T6498]  ksys_write+0x12a/0x250
[   68.489608][ T6498]  do_syscall_64+0x123/0x790
[   68.491038][ T6498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.492836][ T6498] 
[   68.493580][ T6498] The buggy address belongs to the object at ffff88802cbf07e0
[   68.493580][ T6498]  which belongs to the cache kmalloc-16 of size 16
[   68.497667][ T6498] The buggy address is located 0 bytes inside of
[   68.497667][ T6498]  freed 16-byte region [ffff88802cbf07e0, ffff88802cbf07f0)
[   68.501710][ T6498] 
[   68.502452][ T6498] The buggy address belongs to the physical page:
[   68.504393][ T6498] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cbf0
[   68.507051][ T6498] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   68.509228][ T6498] page_type: f5(slab)
[   68.510474][ T6498] raw: 00fff00000000000 ffff88801c042640 dead000000000100 dead000000000122
[   68.513090][ T6498] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000
[   68.515666][ T6498] page dumped because: kasan: bad access detected
[   68.517619][ T6498] page_owner tracks the page as allocated
[   68.519364][ T6498] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11540459755
[   68.524727][ T6498]  post_alloc_hook+0xfd/0x120
[   68.526175][ T6498]  get_page_from_freelist+0x110d/0x35b0
[   68.527875][ T6498]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[   68.529699][ T6498]  new_slab+0xa5/0x640
[   68.530964][ T6498]  refill_objects+0xe3/0x410
[   68.532396][ T6498]  __pcs_replace_empty_main+0x372/0x680
[   68.534079][ T6498]  __kmalloc_node_track_caller_noprof+0x677/0x830
[   68.535998][ T6498]  kvasprintf+0xbc/0x150
[   68.537237][ T6498]  kvasprintf_const+0x66/0x1a0
[   68.538710][ T6498]  kobject_set_name_vargs+0x5a/0x140
[   68.540336][ T6498]  dev_set_name+0xc7/0x100
[   68.541688][ T6498]  platform_device_add+0x2e8/0x800
[   68.543198][ T6498]  dummy_hcd_init+0x5eb/0xc00
[   68.544650][ T6498]  do_one_initcall+0x11c/0x6f0
[   68.546108][ T6498]  kernel_init_freeable+0x6ea/0x7b0
[   68.547695][ T6498]  kernel_init+0x21/0x1e0
[   68.549035][ T6498] page_owner free stack trace missing
[   68.550685][ T6498] 
[   68.551431][ T6498] Memory state around the buggy address:
[   68.553147][ T6498]  ffff88802cbf0680: 00 01 fc fc 00 04 fc fc 00 00 fc fc 00 04 fc fc
[   68.555560][ T6498]  ffff88802cbf0700: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc
[   68.558179][ T6498] >ffff88802cbf0780: 00 04 fc fc 00 01 fc fc 00 01 fc fc fa fb fc fc
[   68.561009][ T6498]                                                        ^
[   68.563162][ T6498]  ffff88802cbf0800: 00 04 fc fc 00 04 fc fc fa fb fc fc fa fb fc fc
[   68.565552][ T6498]  ffff88802cbf0880: 00 05 fc fc 00 05 fc fc 00 05 fc fc 00 05 fc fc
[   68.568321][ T6498] ==================================================================
[   68.578778][ T6498] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   68.581092][ T6498] CPU: 3 UID: 0 PID: 6498 Comm: syz.0.176 Not tainted syzkaller #0 PREEMPT(full) 
[   68.584009][ T6498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   68.587239][ T6498] Call Trace:
[   68.588306][ T6498]  <TASK>
[   68.589253][ T6498]  dump_stack_lvl+0x100/0x190
[   68.590714][ T6498]  vpanic+0x553/0x970
[   68.591973][ T6498]  ? __pfx_vpanic+0x10/0x10
[   68.593338][ T6498]  ? rcu_is_watching+0x13/0xc0
[   68.594736][ T6498]  ? string+0x471/0x4d0
[   68.596019][ T6498]  panic+0xd1/0xe0
[   68.597168][ T6498]  ? __pfx_panic+0x10/0x10
[   68.598517][ T6498]  ? string+0x471/0x4d0
[   68.599785][ T6498]  ? preempt_schedule_common+0x3c/0xb0
[   68.601454][ T6498]  check_panic_on_warn.cold+0x19/0x34
[   68.603129][ T6498]  end_report.part.0+0x3a/0x90
[   68.604628][ T6498]  kasan_report.cold+0xe/0x18
[   68.606082][ T6498]  ? string+0x471/0x4d0
[   68.607324][ T6498]  string+0x471/0x4d0
[   68.608586][ T6498]  ? __pfx_string+0x10/0x10
[   68.610014][ T6498]  vsnprintf+0x422/0x1300
[   68.611357][ T6498]  ? __pfx_vsnprintf+0x10/0x10
[   68.612860][ T6498]  ? is_bpf_text_address+0x94/0x1a0
[   68.614464][ T6498]  ? kernel_text_address+0x8d/0x100
[   68.616085][ T6498]  ? __kernel_text_address+0xd/0x30
[   68.617713][ T6498]  snprintf+0xc7/0x100
[   68.618982][ T6498]  ? __pfx_snprintf+0x10/0x10
[   68.620460][ T6498]  ? stack_trace_save+0x8e/0xc0
[   68.621982][ T6498]  dev_vprintk_emit+0x375/0x3e0
[   68.623522][ T6498]  ? __pfx_dev_vprintk_emit+0x10/0x10
[   68.625183][ T6498]  ? kasan_save_stack+0x3f/0x50
[   68.626702][ T6498]  ? do_syscall_64+0x123/0x790
[   68.628213][ T6498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.630098][ T6498]  dev_printk_emit+0xd2/0x10d
[   68.631565][ T6498]  ? __pfx_dev_printk_emit+0x10/0x10
[   68.633306][ T6498]  __dev_printk+0xcb/0x100
[   68.634692][ T6498]  _dev_err+0xef/0x127
[   68.635970][ T6498]  ? __pfx__dev_err+0x10/0x10
[   68.637469][ T6498]  ? dummy_queue+0x3ca/0xb00
[   68.638924][ T6498]  ? find_held_lock+0x2b/0x80
[   68.640416][ T6498]  ? raw_process_ep0_io+0x314/0x9c0
[   68.642025][ T6498]  raw_process_ep0_io.cold+0x65/0x7f
[   68.643621][ T6498]  raw_ioctl+0x1369/0x2b80
[   68.645021][ T6498]  ? __pfx_raw_ioctl+0x10/0x10
[   68.646435][ T6498]  ? selinux_file_ioctl+0x13b/0x290
[   68.648037][ T6498]  ? selinux_file_ioctl+0xb6/0x290
[   68.649635][ T6498]  ? __pfx_raw_ioctl+0x10/0x10
[   68.651156][ T6498]  __x64_sys_ioctl+0x18e/0x210
[   68.652727][ T6498]  do_syscall_64+0x123/0x790
[   68.654191][ T6498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.656056][ T6498] RIP: 0033:0x7f928339dd6b
[   68.657455][ T6498] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[   68.663228][ T6498] RSP: 002b:00007f9284335f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   68.665775][ T6498] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f928339dd6b
[   68.668251][ T6498] RDX: 00007f9284335fd0 RSI: 0000000040085503 RDI: 0000000000000008
[   68.670656][ T6498] RBP: 00007f9284335fd0 R08: 000000000000001a R09: 0000000000000409
[   68.673080][ T6498] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f9284335fd8
[   68.675498][ T6498] R13: 00002000000005c0 R14: 00007f9283625fa0 R15: 00007ffe1a8f10e8
[   68.677908][ T6498]  </TASK>
[   68.679561][ T6498] Kernel Offset: disabled
[   68.680906][ T6498] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:34:15  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000cd975 RBX=ffffffff8ea91500 RCX=ffffffff8bc6f115 RDX=0000000000000001
RSI=ffffffff8e3d3fc0 RDI=ffffffff8c615f80 RBP=fffffbfff1d522a0 RSP=ffffffff8ea07cf0
R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000
RIP=ffffffff8bc6d6bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5ba2000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c3747d8 CR3=000000004a17a000 CR4=00352ef0
DR0=ffffffffffffffff DR1=20000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 317a79732f74656e 2f70756f7267637a
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1b361c26
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1b361c26 00007fff1b361c2c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0cde35607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0cde35647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0cde357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff0cde35639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85aa2cb5 RDI=ffffffff9bc21640 RBP=ffffffff9bc21600 RSP=ffffc9000fb971f8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552
R12=0000000000000000 R13=0000000000000064 R14=ffffffff9b91320b R15=ffffffff85aa2c50
RIP=ffffffff85aa2cdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f92843386c0 ffffffff 00c00000
GS =0000 ffff8880d5ca2000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f6db03eb7c0 CR3=000000005b0a1000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1a8f15d6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1a8f15d6 00007ffe1a8f15dc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9283435607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9283435647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92834357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9283435639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000302e63 64755f796d6d7564
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865000a64657275 6769666e6f63203a 7463656e6e6f635f 6273755f7a797300
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40000a41405750 424c434b4a46051f 5146404b4b4a465f 4756505f5f5c5600
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92835f25f8 00007f92835f25c8 00007f92835f2600 00007f92835f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000067675 RBX=ffff88801f694b00 RCX=ffffffff8bc6f115 RDX=0000000000000001
RSI=ffffffff8e3d3fc0 RDI=ffffffff8c615f80 RBP=ffffed1003ed2960 RSP=ffffc90000187e00
R8 =0000000000000001 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000
RIP=ffffffff8bc6d6bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c01300
GS =0000 ffff8880d5da2000 ffffffff 00c01300
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ff5bc1f8e50 CR3=0000000057d86000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6db115d560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc255fba86
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc255fba86 00007ffc255fba8c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6db0435607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6db0435647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6db04357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6db0435639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00646e69626e752f 6364755f796d6d75 642f737265766972 642f6d726f667461
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6db05f25f8 00007f6db05f25c8 00007f6db05f2600 00007f6db05f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc4e6fff21d6da5a a76f746b06e3bcf6 7933184a74e489ae 0258933e2ddbdb55
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0654826be03655c9 79a850c409724465 ea72d3db03735972 ae646e29f3be0d2a
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 581ad4b0990c8a5d f00887142c502ac6 ec98bbe72f5a0e85 600d38ed3c908eed
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36bf9a371b5e5716 55703c1027df3fe6 35fbfa1db9388656 8f8dd3ee245a7e60
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000006dabd RBX=ffff88801f692580 RCX=ffffffff8bc6f115 RDX=0000000000000001
RSI=ffffffff8e3d3fc0 RDI=ffffffff8c615f80 RBP=ffffed1003ed24b0 RSP=ffffc90000197e00
R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000
RIP=ffffffff8bc6d6bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5ea2000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f6db11b0ff8 CR3=000000000eb94000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00c2904c565d91ef bec754ea9232cd6d
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca5722436
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca5722436 00007ffca572243c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96c4435607
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96c4435647
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96c44357ab
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96c4435639
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 98bd3b61bb0b6ec6 6a33569212fbd9d8 599d565ff4eec945 aa856e85aabc98e2
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 acd40a13305cf203 5a02f0f0f56f9383 0acb64df530ed59e f44e5b932377b504
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38fc6ec72a35f562 4857f97858c81f28 5d09bd4bf8fa4540 986e14704784546b
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0980dafaeb3d48ff 86a83d01574ffe7a 33418ca6355bca3d 1dbb3b6f5ecde206
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2ca9f8177f9c67da 66f60aa0f4f2b4d4 7dacd40a13305cf2 035a02f0f0f56f93
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 830acb64df530ed5 9ef44e5b932377b5 04159b1ac997b34d e25772d1f10b20b0
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000