last executing test programs:

1m12.425360227s ago: executing program 1 (id=38):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000280))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x804, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000040)=0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0)
mkdir(&(0x7f0000000600)='./file1\x00', 0x0)
mount(&(0x7f0000000040)=@sr0, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000440)='minix\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000340)={0xe, 0x5, 0x40})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = io_uring_setup(0x534f, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

1m11.567104595s ago: executing program 1 (id=42):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x2138, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x400, 0x4) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r2, 0x100101) (async)
r3 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async)
io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) (async)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000200)={'gre0\x00', <r7=>0x0, 0xff11, 0x707, 0xffff, 0x401, {{0x9, 0x4, 0x0, 0x1, 0x24, 0x66, 0x0, 0x8, 0x4, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0xf, 0xa9, [@rand_addr=0x64010102, @multicast2, @empty]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x23d, 0x0, 0x0, 0x0, 0x21, '\x00', r7, 0x0, r0, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
ioctl$TUNSETOFFLOAD(r6, 0x4010744d, 0x20000000)
close(r6)

1m11.47485484s ago: executing program 1 (id=44):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) (async)
r2 = socket$alg(0x26, 0x5, 0x0) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) (async)
r4 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001080)={0x980912, 0x0, '\x00', @string=0x0}}) (async)
bind$alg(r2, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) (async)
r5 = accept4(r2, 0x0, 0x0, 0x0) (async)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0xf)
ioctl$TCFLSH(r6, 0x400455c8, 0x0) (async)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x1b)
recvmsg$can_raw(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x43) (async)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0xbc914b49a8246e7, 0x1, 0x0, {0x8}}, 0x14}}, 0x0)

1m11.474180723s ago: executing program 1 (id=46):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000600)={[{@mode={'mode', 0x3d, 0x1}}]})
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c000104002300000000000002000000", @ANYRES32=r3, @ANYBLOB="800000000a000100543dc80677c2000008000f0001"], 0x30}}, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x60, 0x140b, 0x800, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4006000}, 0x24008010)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000280)='attr/prev\x00')
read$char_usb(r7, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0xa)

1m11.401144649s ago: executing program 1 (id=48):
mount$overlay(0x0, 0x0, 0x0, 0x804000, &(0x7f0000000100)={[{@userxattr}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x0, &(0x7f0000000240))
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x40}, 0x1c)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)={[{@verity_require}, {@redirect_dir_on}, {@nfs_export_on}]})
chdir(&(0x7f0000000140)='./bus\x00')
ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000440)={0x1, 0x2, @status={[0x0, 0x1, 0x0, 0xfffffffffffffffb, 0x1000]}, [0xff, 0x5, 0x38000, 0x0, 0x7, 0xd, 0x8, 0x1562, 0x80000001, 0x1, 0x2, 0xf9, 0x4, 0x80000000, 0xfffffffffffffffd, 0x1, 0x10001, 0x5, 0x4, 0x9, 0x7, 0x1, 0x3, 0x9, 0x100000001, 0x176, 0x7, 0x6, 0x3ff, 0x4000, 0x4c, 0x6, 0xffffffffffffffff, 0x6, 0x7fff, 0xfd, 0x1ff, 0x2, 0x4, 0x800, 0x4800000, 0x8, 0x7, 0xf5, 0x5, 0x6e20, 0x8, 0x6, 0x8, 0x8, 0x5, 0x8, 0x3800000000000000, 0x2, 0x2, 0xfe, 0x8, 0x6741, 0x4, 0x7fffffff, 0x7, 0x9, 0x0, 0x7ff]})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
setgroups(0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r4)
setuid(0xee01)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
r5 = mq_open(&(0x7f0000000040)='ufs\x00', 0x800, 0x44, &(0x7f0000000080)={0xff, 0x0, 0xfff})
dup2(0xffffffffffffffff, r5)

1m11.141069227s ago: executing program 1 (id=50):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/dev\x00')
preadv(r0, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x59b400)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000002c0), 0xb, 0x412360065ef63860)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12], 0xc)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x200000, 0x100}, 0x0, 0x18})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340))
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil)
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)
mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff)
unshare(0x20000400)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000180)=0x4)
r7 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r7, 0x116, 0x80, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000100)={{0x6, 0x3}, 0x0, 0x2, 0xd0, {0x7, 0x8}, 0x2, 0x5})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

1m11.135593405s ago: executing program 32 (id=50):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/dev\x00')
preadv(r0, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x59b400)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000002c0), 0xb, 0x412360065ef63860)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12], 0xc)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x200000, 0x100}, 0x0, 0x18})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340))
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil)
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)
mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff)
unshare(0x20000400)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000180)=0x4)
r7 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r7, 0x116, 0x80, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000100)={{0x6, 0x3}, 0x0, 0x2, 0xd0, {0x7, 0x8}, 0x2, 0x5})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

49.270863705s ago: executing program 4 (id=422):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup(r2)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="580000000206050000000000fffff00000000000050005000200000009f9ffffff797a320000000005000400000000000c000780080006400000000014000300686173683a69702c706f72742c697000050001000700000094811cb4e5b492273d6fa0ecff2973f4e3683308d63ff875aefe1d297f15a3791f88c682c6a065dfe6c61ff1def9465c1cd1f4152098"], 0x58}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x58}}, 0x0)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000600)=""/179, 0xb3, <r8=>0x0, &(0x7f00000006c0)=""/20, 0x14}}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0x18, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf090000000000005509010000000000e81fa099427b291aa748f17e83950000000000000085100000f8ffffff8520000003000000186100000b0000000000000007000000184000000000000000000000000000002dbe00001000000095000000000000008d05060004000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x80000000, 0x39, &(0x7f00000001c0)=""/57, 0x41100, 0x10, '\x00', r6, @fallback=0x2, r7, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x1}, 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b00)=@bpf_ext={0x1c, 0xd, &(0x7f00000019c0)=ANY=[@ANYBLOB="1868000008000000000000000500000058110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018160000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000001a40)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a80)={0x5, 0x3, 0x4f, 0xe}, 0x10, 0x788a, r0, 0x2, 0x0, &(0x7f0000001ac0)=[{0x4, 0x1, 0x10, 0x4}, {0x2, 0x4, 0x5, 0xa}], 0x10, 0x1000, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x1b, 0x19, &(0x7f0000000ac0)=ANY=[@ANYRES64, @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000086000000ac80e0fffcffffff18120000", @ANYRES32, @ANYBLOB="00000000000000009d38f8ff0100000018450000070000000000000000000000b7080000000000007b8af8ff00000000b67f251471ac3e23733c82080000050000007b8af0ff00000000bfa10000000000000701ed00f8ffffffbfa400000000000007040000f0ffbe86d5e5ffffb70200000800000018230000f34aeb07952b289a512149b222c42a9ccdde2659ed430d", @ANYRES16=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0xf7, &(0x7f0000001840)=""/247, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000001940)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001980)={0x4, 0x6, 0x2000009, 0xffff}, 0x10, r8, r10, 0x3, &(0x7f0000001bc0)=[0x1], &(0x7f0000001c00)=[{0x5, 0x1, 0x1, 0x4}, {0x5, 0x3, 0x10, 0x6}, {0x2, 0x1, 0x5, 0xa}], 0x10, 0x1, @void, @value}, 0x94)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', <r12=>0x0, 0x78ba2eba29206761, 0xd3, 0x5, 0x9, 0x2, @local, @loopback, 0x8, 0x1, 0x2a02, 0x9}})
r13 = socket$packet(0x11, 0x3, 0x300)
r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'lo\x00', <r15=>0x0})
sendto$packet(r13, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @link_local}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x2, 0xee, 0xc, 0x4a, @local, @remote, 0x8, 0x8, 0x21, 0x80000001}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r11, @ANYBLOB="000828bd7000ffdbdf2508000000140001800800030002000000080003000100000028000180140002007465616d5f736c6176655f310000000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00018008000300060000004c00018014000200766c616e30000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="080003000100000008000100", @ANYRES32=r15, @ANYBLOB="140002006272690008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32=r15, @ANYBLOB="0c00028008000200ffffffff"], 0xc0}}, 0x8c0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

49.270166535s ago: executing program 4 (id=423):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@hyper, 0x2020001}, {@local, 0x4}, 0x400, "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"}, 0x418, 0x1000005})
r3 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000e40)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r4, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x50, 0xffffffffffffffff, 0x8000000)
r6 = syz_io_uring_setup(0x239, &(0x7f0000002280)={0x0, 0x0, 0x800, 0x2}, &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000f00)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r9 = signalfd(r0, &(0x7f0000000100)={[0x1d72bf11]}, 0x8)
r10 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x4000, 0x0, 0x0, r6}, &(0x7f0000000140), &(0x7f0000000100))
io_uring_enter(r10, 0x184c, 0x0, 0x0, 0x0, 0x0)
r11 = io_uring_setup(0x7058, &(0x7f0000000040)={0x0, 0x0, 0x1})
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x18, 0x20000000, r12)
syz_io_uring_submit(r5, r8, &(0x7f0000001380)=@IORING_OP_STATX={0x15, 0x40, 0x0, r9, &(0x7f0000001280), &(0x7f0000000180)='./file0\x00', 0x80, 0x0, 0x1, {0x0, r12}})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000035040000500000001d400200000000006504020000ffffffb4030000000000001d440000000000007a0a00fe000000000f03000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b5264f00000000cd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af2542ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64364f56e24e6d2128c7e0ec82770c8204a1ddeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d3490dd97adab638cca595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8c83c3d8cbfedc038395342846e1b207974e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfcd7ad0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f9212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0000cf70a91c76e8b14de02b884114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6a582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad8508f7550cad7ec93af7fb1b50c75ba1ee7baa19faf67256b56a355b6a686ba99d0a8950f0937f778af083e055f5138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003ebfbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1e1979e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a508460f2d0455cf79a43746979f99f60037e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adde305ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1ecbf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792747588d49df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d943622000000000000000000000000000000000000000000000000000000000000000000000000000000000000f112fc8a4942d7453cf29cbbef3a567ea0a2a8a0561dfb6cfe7f1812405e1a092b382adc0698c377b0a1f49afb6ba26f8e28cf68b0065857b36276931c318cb84f748a26c4d81a0322ce21e7d9c002006cf8ac6402e036cf9344a1cb1b8603276000144268a0aa584a92188f55318dde1d1b09319c00d0de3471ab4243ac0f49516a690c514ba6449f0a804fcac3f30bf4a933d32c889283aa092cca9aa349b624c5ed2b66fa0439f54f83c9ff8be083221609c8696433da46c91ac52e5b1d159daed1af0cda0ee05ae770a7ea467d5602b441e748b7f22496f8453fb6b7cc2dd3a8ce15fd76387fc02d4e2b7b4502a80000000000000000000000000000000000000000e046c0756c0955a81165e4212a1a58334fe51269f228ad32fba2bdae0172278d3bb48c370f6b59c0c7ba9b0aaae317d3f8104fd696bc76268923c396b017003ddcd205c05311dcae277e5b00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000d00)={0x3c, r1, 0x1, 0x1000, 0x0, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = socket$netlink(0x10, 0x3, 0x0)
r15 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000140)={'bridge0\x00', <r16=>0x0})
readv(r14, &(0x7f0000000200)=[{&(0x7f0000003280)=""/4096, 0x1000}], 0x1)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2874c6001201000000000000000000000000004a", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r16, @ANYBLOB], 0x28}}, 0x0)
r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), r14)
sendmsg$NL80211_CMD_RELOAD_REGDB(r15, &(0x7f0000003240)={&(0x7f0000001400), 0xc, &(0x7f00000013c0)={&(0x7f00000031c0)={0x14, r17, 0xa, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x4000)
sendmsg$NL80211_CMD_DISCONNECT(r13, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r17, 0xbd97ab35e355c07f, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc050)

48.358585869s ago: executing program 4 (id=438):
r0 = userfaultfd(0x801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00002b3000/0x2000)=nil, 0x800000})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

48.356884598s ago: executing program 4 (id=439):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x1b8, 0x2e0, 0xd0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x1b8, 0x2e0, 0xd0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) (async)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async)

48.280792398s ago: executing program 4 (id=440):
unshare(0x4000400)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r0 = socket(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000580)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r2}, @exit], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
syz_open_dev$amidi(&(0x7f00000001c0), 0x200, 0x400)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="4b385aa3949100dc6626c892b3bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x0, 0x3, 'lblcr\x00', 0x11, 0x8}, 0x2c)
ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r6, 0x8949, &(0x7f0000000000))
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x40046207, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0})
dup3(r8, r7, 0x0)
ppoll(&(0x7f0000000140)=[{r8, 0x48}], 0x1, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000400)=[@request_death, @increfs={0x40046304, 0x2}], 0xfc, 0x0, 0x0})
sendmsg$alg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)

47.428527485s ago: executing program 4 (id=448):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0) (async)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) (async)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async)
syz_clone3(&(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_APDU={0x5, 0x19, "bd"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40c0)

41.174334s ago: executing program 0 (id=512):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
r3 = dup3(r1, r2, 0x0)
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000080))
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)={<r4=>0x0, 0xc6, "1c5585ee308c6b0b0d12dc2caee6f8c55b0cbf3b005bd57197fee5434b849d456b3b49b4b476222194202ebedc6e649c259a87efbd51038dcea7daf2d1e568e8051ae21b7c7ca591ff123fbd31d498c9e923adbb0e2ab9a034c697158639ba38aa68d8d1e9f7ed1cd4c0e04eddc7bc38b5a90ef0c379b7478d84827b77426b50c4aaf78edf27c9c110b07518d99b4e8970db4a1a4ae95b9bd75573f5ce530b485ffb92873e57793a5681941ea74d5139eb63298314467837cf611b6b2b5f2801c718056f8643"}, 0x0)
r5 = geteuid()
getresgid(&(0x7f0000000e00)=<r6=>0x0, &(0x7f0000000e40), &(0x7f0000000e80))
read$FUSE(r2, &(0x7f0000005480)={0x2020, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020)
lstat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
read$FUSE(r2, &(0x7f00000074c0)={0x2020, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {<r10=>r8, r9}}, './file0\x00'})
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000fc0)={0x0, 0x0, <r11=>0x0}, &(0x7f0000001000)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000001040)={{0x1, 0x1, 0x18, <r12=>r0, {<r13=>0xee01, 0xffffffffffffffff}}, './file0\x00'})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0, <r14=>0x0}, &(0x7f0000000680)=0xc)
read$FUSE(r12, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, <r15=>0x0}, 0x2020)
newfstatat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, <r16=>0x0}, 0x100)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={<r17=>0x0, 0x0, <r18=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r18)
setgroups(0x1, &(0x7f0000000040)=[r18])
syz_fuse_handle_req(r3, &(0x7f0000001440)="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", 0x2000, &(0x7f00000012c0)={&(0x7f0000000540)={0x50, 0x0, 0x9, {0x7, 0x28, 0x0, 0x100001, 0x8, 0xff, 0xdb5, 0x30000000}}, &(0x7f0000000440)={0x18, 0xfffffffffffffff5, 0x7fffffffffffffff, {0x9181}}, &(0x7f00000005c0)={0x18, 0x0, 0x401}, &(0x7f0000000600)={0x18, 0xffffffffffffffda, 0x0, {0x2}}, &(0x7f0000000640)={0x18, 0x0, 0x6, {0xfffffff8}}, &(0x7f00000006c0)={0x28, 0x0, 0xc, {{0x10000, 0x3, 0x2}}}, &(0x7f0000000700)={0x60, 0x0, 0x1, {{0x9, 0x2b62bee2, 0x4, 0xf0, 0x1, 0x9, 0x200, 0x7}}}, &(0x7f0000000780)={0x18, 0x0, 0x81, {0x4}}, &(0x7f0000000840)={0x16, 0x0, 0xb, {'wlan0\x00'}}, &(0x7f0000000880)={0x20, 0xfffffffffffffff5, 0xc9, {0x0, 0x8}}, &(0x7f0000000980)={0x78, 0x0, 0x4, {0x1, 0x2, 0x0, {0x1, 0xdb5a, 0x80000001, 0x7, 0x3, 0x7, 0xf24, 0x1ff, 0xc3fe, 0x6000, 0xffff, r5, 0x0, 0x7fff, 0x2}}}, &(0x7f0000000b40)={0x90, 0xffffffffffffffda, 0x5b55, {0x0, 0x2, 0x3, 0x2, 0x8, 0x2, {0x1, 0x100000000, 0x7, 0xdaed, 0x7, 0x4, 0xff, 0xe, 0x1a, 0xc000, 0x4, 0x0, 0x0, 0x6, 0x7f}}}, &(0x7f0000000c00)={0x30, 0xffffffffffffffda, 0x3ff, [{0x4, 0x0, 0x6, 0x6, 'kfree\x00'}]}, &(0x7f0000009980)=ANY=[@ANYBLOB="a805000000000000070000000000000002000000000000000000000000000000000000000000002005000000000000000600000004000000000000000000000000000100000000000300000000000000b763b26e0000000006000000000000000700000000000000070000000900000022b9000000a0000006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0600000001800000000000000000000000000000090000000000000000000000000000000300000000000000000000000000000007000000000000000100000000000000090000001d0c00000000000000000000000000000100000009000000000000000d9f000000000000f80e000000000000050000000000000004000000090000000500000000a00000050000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0010000007000000000000000100000000000000040000000000000002000000050000002d2500000000000000000000000000000100000000000000d00f0000000000000900000000000000010000000400000005000000000000000500000000000000390c0000000000000008000000000000ffffffffffffffff090000000000000002000000ceffffff0d00000000a0000008000000", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="06000000100000000000000002000000000000000900000000000000060000000000000003030303030300000600000000000000020000000000000000000000000000000500000000000000080000000b00000005000000000000000700000000000000fbffffffffffffff070000000000000074000000000000000900000000000000000400005000000008000000008000000d000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0700000003000000000000000300000000000000020000000000000006000000090000000101010101010000040000000000000003000000000000001000000000000000e0f7000000000000de000000000000000600000000000000000000070000000008000000000000000600000000000000040000000000000002000000000000004cd30000f7000000050000000040000005000000", @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="090000000000000000000000040000000000000035020000000000000300000005000000eb232400000000000000000000000000020000000000000037e39170000000002600000000000000020000004ef10000050000000000000051000000000000000500000000000000960d00000000000006000000000000008000000000000000030000000300000001000000008000008000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="3e090000010000000000000004000000000000000500000000000000000000000080000002000000000000000000000000000000ff000000000600000600000000000000ffffff7f59000000030000000002000000000000006683ffffffffffff490600000000000005000000000000000200000007000000090000000010000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="05000000ec0000000000000001000000000000000300000000000000060000000700000003030303030300000500"/57, @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=0xee01, @ANYRES32=r15, @ANYRESOCT=r17], &(0x7f00000011c0)={0xa0, 0xfffffffffffffff5, 0x8000000000000001, {{0x6, 0x2, 0xd069, 0x80000001, 0x9, 0x7, {0x4, 0xfff, 0x8000000000000001, 0xd, 0x7ff, 0xcc3, 0xffff, 0xa0ee, 0xc, 0xc000, 0xfffffffa, r16, r18, 0x9c, 0x7}}, {0x0, 0x2}}}, &(0x7f0000001280)={0x20, 0xfffffffffffffffe, 0x2, {0xffff, 0x4, 0xfff, 0xe38}}})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={r4, 0x8, 0x5, 0x108, 0x2, 0x921}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r19 = socket$nl_generic(0x10, 0x3, 0x10)
r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r19, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r21=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r19, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r20, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r21}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r20, @ANYRES8=r4, @ANYRES32=r10, @ANYRES32=r1], 0xb8}}, 0x0)

40.329141934s ago: executing program 0 (id=527):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x8200, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x60002, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x283fe, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9c}, {0x6}]}, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)}], 0x1}, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0})
r5 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0)
mprotect(&(0x7f000003c000/0x1000)=nil, 0x1000, 0x4)

40.209477902s ago: executing program 0 (id=531):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000200)={0x2, 0x83a, 0x0, &(0x7f0000000100)="2272630245b24acc271e1419a81758c4b705d66f1dcb1c3f6aa0acc31f4efc7f6a408dd156da63296b85f054f016a504e1e68e0e8d7cae81cc0fb0b0dfe664eb84e4956c6cc7ce976517ea9460c97df62e211f3b487232703fd29e0c8b4d4e95e2f07f74", 0x0, 0x64})

40.206354148s ago: executing program 0 (id=532):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00') (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3) (async)
ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000380))
move_pages(r3, 0x2, &(0x7f00000014c0)=[&(0x7f0000507000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f0000001500)=[0x3, 0x5, 0x3, 0xcd5], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) (async, rerun: 32)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) (rerun: 32)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001240)=0x14) (async, rerun: 64)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001280)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000001380)=0xe8) (rerun: 64)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@loopback, @in6=@private1, 0x4e21, 0x1ff, 0x4e20, 0xf7a7, 0x2, 0x20, 0x80, 0x33, r5, r6}, {0x27800000000, 0x4, 0x1, 0x74643cd, 0xc1b, 0xd, 0x7fffffff, 0x9}, {0x6, 0x0, 0xfffffffffffffffc, 0x73a6}, 0x83, 0x6e6bbd, 0x1, 0x1}, {{@in=@broadcast, 0x4d5, 0x6d}, 0xa, @in=@broadcast, 0x3501, 0x4, 0x2, 0x9, 0xf, 0x8, 0x8}}, 0xe8) (async)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r8 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
read(r8, &(0x7f0000000200)=""/4096, 0x1000) (async)
ioctl$VIDIOC_S_FREQUENCY(r8, 0x402c5639, &(0x7f00000001c0)={0x0, 0x4, 0xfffffff8}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000046000000795e182f15514e944bc0f3b9f1436a4307ac40e92d151160293dbf53d9e35cf77f1a0772e7"], 0x14}}, 0x4000844)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x120, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x120}, 0x1, 0x0, 0x0, 0x80c1}, 0x2000c014)

40.120813162s ago: executing program 0 (id=534):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a680, 0x0)
close(0x4)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@dstopts_2292={{0x18}}, @hopopts_2292={{0x18}}], 0x30}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x58, 0x54, 0x93d, 0x0, 0x0, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x2, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x3, 0x0, {@ip4=@local, 0x86dd}}}]}, 0x58}}, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x3000, 0x101000, 0x8})

39.810522292s ago: executing program 0 (id=540):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000200)={0x2, 0x83a, 0x0, &(0x7f0000000100)="2272630245b24acc271e1419a81758c4b705d66f1dcb1c3f6aa0acc31f4efc7f6a408dd156da63296b85f054f016a504e1e68e0e8d7cae81cc0fb0b0dfe664eb84e4956c6cc7ce976517ea9460c97df62e211f3b487232703fd29e0c8b4d4e95e2f07f74", 0x0, 0x64})

39.809874178s ago: executing program 33 (id=540):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000200)={0x2, 0x83a, 0x0, &(0x7f0000000100)="2272630245b24acc271e1419a81758c4b705d66f1dcb1c3f6aa0acc31f4efc7f6a408dd156da63296b85f054f016a504e1e68e0e8d7cae81cc0fb0b0dfe664eb84e4956c6cc7ce976517ea9460c97df62e211f3b487232703fd29e0c8b4d4e95e2f07f74", 0x0, 0x64})

31.638100495s ago: executing program 34 (id=448):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0) (async)
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) (async)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async)
syz_clone3(&(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_APDU={0x5, 0x19, "bd"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40c0)

16.178992979s ago: executing program 5 (id=821):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002740)={&(0x7f0000000000)=[{0x0, 0x0, 0x300, 0x0}], 0x1})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xffffffff, 0x0, 0x4, 0xffffffff, 0x4f77}}}}]}, 0x4c}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x25, &(0x7f00000000c0)=0x101, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040)
futimesat(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
r5 = syz_io_uring_setup(0x543c, &(0x7f00000008c0), &(0x7f0000000080)=<r6=>0x0, &(0x7f0000000200))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r5, 0x3, 0x10a5, 0x3, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, r8, 0x1, 0x0, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x1}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20}, 0x0)
io_uring_enter(r5, 0x81e, 0xfffffff9, 0x1, 0x0, 0x0)
r9 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r9, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r9, 0x0)
recvfrom(r9, 0x0, 0x0, 0x42, 0x0, 0x0)
io_uring_enter(r5, 0xde5, 0x0, 0x0, 0x0, 0x0)

15.300044163s ago: executing program 5 (id=830):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x3, 0x0, @void}, 0x62)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18)
sendmmsg$inet6(r0, &(0x7f0000001900)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}}], 0x1, 0xc0c0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r4, 0x0, 0x0) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x3, 0x0, @void}, 0x62) (async)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r2, 0xfff) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) (async)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) (async)
sendmmsg$inet6(r0, &(0x7f0000001900)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}}], 0x1, 0xc0c0) (async)

15.247757606s ago: executing program 5 (id=831):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0xccb, 0x4)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000d800000", 0x45)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2802, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2000f5}, 0x20)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket(0x11, 0x3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r9 = dup(r8)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', <r10=>0x0})
bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmmsg$sock(r3, &(0x7f000000fd40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000008d00)="be97f7b9a3d1b79efe444f7fb0f0", 0xe}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x41}}, @mark={{0x14, 0x1, 0x24, 0x1f}}, @txtime={{0x18, 0x1, 0x3d, 0x1f}}], 0x48}}], 0x2, 0x0)
mq_timedsend(0xffffffffffffffff, &(0x7f00000001c0)="afdb0e0f6afa3cd3f3e526c7c0bf58e9cfe1f72f90759de514ce1c33bb02c7d15d8c45f0e2e0cfba1633140fad4cfc717f378d0e5269fcf4617fbbcbc34b41ae7fdc218b783776bb552743b8b65cbd76d81407b51c058c249fe6bd72b0b6f047a7bbc0df33c85f1feee3346d85d55d78cc1f526cf7d6f2414626f09249382fc2c03050454ae4577993cac92ace99cb7a75171c1fbdddbab4ab6fa428ee208bb3efc715cafed5e536f61b1237faff9aac039725f2b9fa04078f2e387e7f1697a13afe92c4f9c4835a9c5c985e546b3ad42fdb800fc9061bd6ed9ee8b8fe2d562032e7", 0xe2, 0x6, &(0x7f00000002c0))
r11 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}})
r12 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r13 = dup(r12)
ioctl$KVM_SET_MSRS(r13, 0xc008ae88, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000052a19e782000040"])
write$binfmt_aout(r13, &(0x7f0000001580)=ANY=[@ANYBLOB="080194ff270000005e020000050000008e0000000200000000000000000000000a0131349d27ddca5e412c2f503ea00fbbdc51e23e7c255fd42cc2bc70d41ad30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd81c2ef354fef780000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000843bad5e5989b207d80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000008b0ed0ae3f1812ad16e4547cde000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f57a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000568000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002702000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007cf255677b1bc04204797804d83944cc279b63caa52c1ca97f80c123d4bee5105326acc79d22c5402eeb4087e48b152186d5134ea51f89d1bb51a446ad998192da5d0bcd82ce31137333b724bce7d52b7ab643f9a2ac1c8f0333205746923dec9e4761956b713ca70138a65dec2b50"], 0x840)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@metacopy_off}, {@verity_require}]})

14.960647011s ago: executing program 5 (id=832):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$pokeuser(0x6, r0, 0x358, 0xffff88806a60f000)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])
chdir(&(0x7f0000000280)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
write$FUSE_LK(r1, &(0x7f00000002c0)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
setns(r3, 0x40000000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x1e)
sched_setscheduler(r0, 0x6, &(0x7f0000000040)=0xa567)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ptrace(0x10, r0) (async)
ptrace$pokeuser(0x6, r0, 0x358, 0xffff88806a60f000) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) (async)
chdir(&(0x7f0000000280)='./file0\x00') (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async)
write$FUSE_LK(r1, &(0x7f00000002c0)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) (async)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) (async)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) (async)
setns(r3, 0x40000000) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x1e) (async)
sched_setscheduler(r0, 0x6, &(0x7f0000000040)=0xa567) (async)

14.860474249s ago: executing program 5 (id=833):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup(r2)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="580000000206050000000000fffff00000000000050005000200000009f9ffffff797a320000000005000400000000000c000780080006400000000014000300686173683a69702c706f72742c697000050001000700000094811cb4e5b492273d6fa0ecff2973f4e3683308d63ff875aefe1d297f15a3791f88c682c6a065dfe6c61ff1def9465c1cd1f4152098"], 0x58}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x58}}, 0x0)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000600)=""/179, 0xb3, <r8=>0x0, &(0x7f00000006c0)=""/20, 0x14}}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0x18, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf090000000000005509010000000000e81fa099427b291aa748f17e83950000000000000085100000f8ffffff8520000003000000186100000b0000000000000007000000184000000000000000000000000000002dbe00001000000095000000000000008d05060004000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x80000000, 0x39, &(0x7f00000001c0)=""/57, 0x41100, 0x10, '\x00', r6, @fallback=0x2, r7, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x1}, 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b00)=@bpf_ext={0x1c, 0xd, &(0x7f00000019c0)=ANY=[@ANYBLOB="1868000008000000000000000500000058110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000a5730c0010000000"], &(0x7f0000001a40)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a80)={0x5, 0x3, 0x4f, 0xe}, 0x10, 0x788a, r0, 0x2, 0x0, &(0x7f0000001ac0)=[{0x4, 0x1, 0x10, 0x4}, {0x2, 0x4, 0x5, 0xa}], 0x10, 0x1000, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x1b, 0x19, &(0x7f0000000ac0)=ANY=[@ANYRES64, @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000086000000ac80e0fffcffffff18120000", @ANYRES32, @ANYBLOB="00000000000000009d38f8ff0100000018450000070000000000000000000000b7080000000000007b8af8ff00000000b67f251471ac3e23733c82080000050000007b8af0ff00000000bfa10000000000000701ed00f8ffffffbfa400000000000007040000f0ffbe86d5e5ffffb70200000800000018230000f34aeb07952b289a512149b222c42a9ccdde2659ed430d", @ANYRES16=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0xf7, &(0x7f0000001840)=""/247, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000001940)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001980)={0x4, 0x6, 0x2000009, 0xffff}, 0x10, r8, r10, 0x3, &(0x7f0000001bc0)=[0x1], &(0x7f0000001c00)=[{0x5, 0x1, 0x1, 0x4}, {0x5, 0x3, 0x10, 0x6}, {0x2, 0x1, 0x5, 0xa}], 0x10, 0x1, @void, @value}, 0x94)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', <r12=>0x0, 0x78ba2eba29206761, 0xd3, 0x5, 0x9, 0x2, @local, @loopback, 0x8, 0x1, 0x2a02, 0x9}})
r13 = socket$packet(0x11, 0x3, 0x300)
r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'lo\x00', <r15=>0x0})
sendto$packet(r13, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @link_local}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x2, 0xee, 0xc, 0x4a, @local, @remote, 0x8, 0x8, 0x21, 0x80000001}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r11, @ANYBLOB="000828bd7000ffdbdf2508000000140001800800030002000000080003000100000028000180140002007465616d5f736c6176655f310000000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00018008000300060000004c00018014000200766c616e30000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="080003000100000008000100", @ANYRES32=r15, @ANYBLOB="140002006272690008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32=r15, @ANYBLOB="0c00028008000200ffffffff"], 0xc0}}, 0x8c0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

14.639481971s ago: executing program 5 (id=838):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000001400210106000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fec0ffff000000000000000000000001140006"], 0x40}}, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', <r6=>0x0})
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r5, &(0x7f00000000c0)="3f03fe7fdce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5d3bf4aa}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffffff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}]}}]}, 0x50}}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040028bd7000fcdbdf25110000005000018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0800030002000000180003000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030001000000080003000200000014000200697036746e6c30000000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x8011}, 0x1)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x14) (async)
r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x14)
ioctl$AUTOFS_IOC_PROTOVER(r11, 0x80049363, &(0x7f0000000040)) (async)
ioctl$AUTOFS_IOC_PROTOVER(r11, 0x80049363, &(0x7f0000000040))
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00')
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e20, 0x10000, @local, 0x2}, 0x1c)

14.597888143s ago: executing program 35 (id=838):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000001400210106000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fec0ffff000000000000000000000001140006"], 0x40}}, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', <r6=>0x0})
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r5, &(0x7f00000000c0)="3f03fe7fdce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5d3bf4aa}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffffff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}]}}]}, 0x50}}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040028bd7000fcdbdf25110000005000018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0800030002000000180003000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030001000000080003000200000014000200697036746e6c30000000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x8011}, 0x1)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x14) (async)
r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0xd}, 0x14)
ioctl$AUTOFS_IOC_PROTOVER(r11, 0x80049363, &(0x7f0000000040)) (async)
ioctl$AUTOFS_IOC_PROTOVER(r11, 0x80049363, &(0x7f0000000040))
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00')
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e20, 0x10000, @local, 0x2}, 0x1c)

4.126303288s ago: executing program 7 (id=979):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x842, 0x100}}}]}, 0x38}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x12, r4, {0x0, 0x7}, {0xd, 0xffff}, {0xfff8}}}, 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
syz_emit_ethernet(0xd6, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
fcntl$setstatus(r2, 0x4, 0x6000)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000b000900053582c137153e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1}, 0x0)
r10 = socket$caif_seqpacket(0x25, 0x5, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r10, 0x116, 0x7f, &(0x7f00000000c0)=0x3, 0x4)
connect$caif(r10, &(0x7f0000000000)=@dbg, 0x18)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x8, 0x5, 0x630, 0x300, 0x0, 0xffffffff, 0xf0, 0x1e0, 0x560, 0x560, 0xffffffff, 0x560, 0x560, 0x5, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, [0x80800000, 0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff], 'ip6gretap0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x3a, 0x5, 0x1, 0x42}, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4, @icmp_id=0x2, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @common=@ipv6header={{0x28}, {0xea, 0x44}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690)

3.979695211s ago: executing program 7 (id=980):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x19)
write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {0x0, 0x0, 0x0, 0xd}, 0x0, [0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90b, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x40, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xdf3]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000200)={0x2, 0x83a, 0x0, 0x0})
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
fcntl$dupfd(r0, 0x406, r3)

3.850424106s ago: executing program 7 (id=981):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000b548f73e5166f5f508000300", @ANYRES32=r3], 0x24}}, 0x0)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r4, 0x10d, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000165000/0x1000)=nil, 0x1000, 0x3)
r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000001000)}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r8, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}})
syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaa9efffffed000008004500fde10000000000119078000000000000000000004e22fdcd90780400"/58], 0x0)
io_uring_enter(r5, 0x5b43, 0x0, 0x0, 0x0, 0x0)

3.768748263s ago: executing program 7 (id=984):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10}, @TCA_FQ_TIMER_SLACK, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0xb, 0xfe, 0x7, 0xfff9, 0x3, 0x0, 0x4, 'syz0\x00'})
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

3.679832352s ago: executing program 7 (id=986):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x1})
r1 = socket(0x80000000000000a, 0x2, 0x0)
rt_sigtimedwait(&(0x7f0000000040)={[0x6]}, &(0x7f0000000100), &(0x7f0000000080)={0x77359400}, 0x8)
r2 = socket(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000200)="7800000018001feeb8f9f50dffff00000204be04fe05fe02061123094300050015000000fac8388827a685a168d0bf46d323456536f7578d04001000c291214549975ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400180012000a000000000000000018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000d80)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x2, 0x0, @remote, 0x3}}}, 0x108)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0)
syz_pidfd_open(r0, 0x0)
r4 = signalfd(r3, &(0x7f0000000180)={[0x6]}, 0x8)
write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2c)
r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
r6 = socket(0x1f, 0x6, 0xfa)
connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
ioctl$NBD_SET_SOCK(r5, 0xab00, r6)
r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_DISCONNECT(r7, 0xab08)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108)

2.820404105s ago: executing program 7 (id=993):
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040), 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, <r2=>0x0}, &(0x7f0000000180)=0xc)
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x4, &(0x7f0000000600)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r2}}, {@access_user}, {@uname={'uname', 0x3d, '@'}}], [{@fowner_lt}]}})
setxattr$incfs_id(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x0, 0x0, 0x2)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYRES16], 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0xdca6, 0x0)
ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000000))
ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000080)=0xd)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1})
r6 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0)
ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f00000000c0)=""/159)
syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008007864010101ac1414aa00004e2200"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_disconnect(r3)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x12, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000051}, 0x0)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)

1.719623811s ago: executing program 2 (id=1016):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r2=>0x0}) (async)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000140)={0x0, @reserved})
sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r0}, './file0\x00'})
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000040))
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f0000001ff0)={0x1d, r7}, 0x10)
sendmsg$can_raw(r6, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000ee4e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000001c000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="660fd326c4e33d7b3800c4e1f95126670f01f3b9800000c00f3235010000000f30b8faffffff0f23d00f21f8350000000f0f23f80f07c4c14174b00080000066baf80cb8e8775c89ef66bafc0cb0b8ee66b854000f00d8", 0x57}], 0x2a, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000001bcf2474770e11722c0b480c2e"]) (async)
ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, 0x40})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

1.660465736s ago: executing program 6 (id=1017):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) (async)
shutdown(r0, 0x1) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x4}]]}}}]}, 0x38}}, 0x0) (async)
r2 = inotify_init1(0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff) (async)
fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, <r3=>0x0})
r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00')
open_by_handle_at(r4, &(0x7f0000000380)=@ceph_nfs_confh={0x10, 0x2, {0x1c8, 0x2}}, 0x10000) (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f00000000c0)={0x8, r5})

1.6602279s ago: executing program 6 (id=1018):
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = syz_open_dev$loop(&(0x7f0000000300), 0x7fff, 0x5802)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000340)=0x23)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r2 = syz_io_uring_setup(0x7ea9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x1, r5, 0x0, 0x0})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r2, 0x2d7e, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x5c, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)='\x006', 0x2}], 0x1}}], 0x1, 0x0)
sendmmsg$inet(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1}}], 0x2, 0x16da)
fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f00000001c0)=@sha1={0x1, "4d506b5ca747fcaf13622b01e916cb1e87345d07"}, 0x15, 0x3)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x24}], 0x1}, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30)
r7 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r7, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492728, 0x0)

1.587106405s ago: executing program 6 (id=1019):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000600)={@private2, 0x0, 0x0, 0xff, 0x1}, 0x20)
close(r2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000ffffffffe6c2ec358b5cb284686807000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYRESOCT=r0], 0x38}}, 0x14044044)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
r4 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x2e, 0x1, @buffer={0x0, 0xc4, &(0x7f0000000000)=""/196}, &(0x7f0000000100)="a7886599d3ac4970cd5a1c959e472f1cc058f5d49ede193b75a0e5cd75d0a39a4096bd639c92a327b01289b1e87f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcff})

1.586753945s ago: executing program 2 (id=1020):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00'}) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_NMI(r2, 0xae9a)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000080))
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"])
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x2000000, 0x0) (async, rerun: 32)
chdir(&(0x7f000009df00)='./file0\x00') (async, rerun: 32)
open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) (async)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r6, &(0x7f00000008c0)=""/49, 0x31) (async)
rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') (async)
getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x842, 0x100}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x24004000) (async, rerun: 32)
r7 = socket(0x11, 0x800000003, 0x0) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', <r8=>0x0})
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) (async, rerun: 32)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x4, {0x0, 0x0, 0x12, r8, {0x0, 0x7}, {0x0, 0xffff}, {0x8}}}, 0x24}}, 0x0) (async)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1.586434713s ago: executing program 6 (id=1021):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r2 = dup2(r1, r0)
ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, 0x0) (async)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000000002000000000543600000059add0d31ef21edbb8a2b03adf47773a0bae389196a56a76e5405ed19e147d9e96e161414ea611c0768903a97055977e4c", @ANYRES32=0x0, @ANYBLOB="00000000042000001c00128009000100626f6e64000000000c0002800500160000000000"], 0x3c}}, 0x4044000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)
splice(r3, 0x0, r5, 0x0, 0x4ffe2, 0x0)

1.339237801s ago: executing program 2 (id=1022):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup(r2)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="580000000206050000000000fffff00000000000050005000200000009f9ffffff797a320000000005000400000000000c000780080006400000000014000300686173683a69702c706f72742c697000050001000700000094811cb4e5b492273d6fa0ecff2973f4e3683308d63ff875aefe1d297f15a3791f88c682c6a065dfe6c61ff1def9465c1cd1f4152098"], 0x58}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x58}}, 0x0)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000600)=""/179, 0xb3, <r8=>0x0, &(0x7f00000006c0)=""/20, 0x14}}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0x18, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf090000000000005509010000000000e81fa099427b291aa748f17e83950000000000000085100000f8ffffff8520000003000000186100000b0000000000000007000000184000000000000000000000000000002dbe00001000000095000000000000008d05060004000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x80000000, 0x39, &(0x7f00000001c0)=""/57, 0x41100, 0x10, '\x00', r6, @fallback=0x2, r7, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x1}, 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b00)=@bpf_ext={0x1c, 0xd, &(0x7f00000019c0)=ANY=[@ANYBLOB="1868000008000000000000000500000058110000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018160000", @ANYRES32=0x1, @ANYBLOB="0000000000000000a5730c0010000000"], &(0x7f0000001a40)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a80)={0x5, 0x3, 0x4f, 0xe}, 0x10, 0x788a, r0, 0x2, 0x0, &(0x7f0000001ac0)=[{0x4, 0x1, 0x10, 0x4}, {0x2, 0x4, 0x5, 0xa}], 0x10, 0x1000, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x1b, 0x19, &(0x7f0000000ac0)=ANY=[@ANYRES64, @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000086000000ac80e0fffcffffff18120000", @ANYRES32, @ANYBLOB="00000000000000009d38f8ff0100000018450000070000000000000000000000b7080000000000007b8af8ff00000000b67f251471ac3e23733c82080000050000007b8af0ff00000000bfa10000000000000701ed00f8ffffffbfa400000000000007040000f0ffbe86d5e5ffffb70200000800000018230000f34aeb07952b289a512149b222c42a9ccdde2659ed430d", @ANYRES16=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0xf7, &(0x7f0000001840)=""/247, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000001940)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001980)={0x4, 0x6, 0x2000009, 0xffff}, 0x10, r8, r10, 0x3, &(0x7f0000001bc0)=[0x1], &(0x7f0000001c00)=[{0x5, 0x1, 0x1, 0x4}, {0x5, 0x3, 0x10, 0x6}, {0x2, 0x1, 0x5, 0xa}], 0x10, 0x1, @void, @value}, 0x94)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', <r12=>0x0, 0x78ba2eba29206761, 0xd3, 0x5, 0x9, 0x2, @local, @loopback, 0x8, 0x1, 0x2a02, 0x9}})
r13 = socket$packet(0x11, 0x3, 0x300)
r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'lo\x00', <r15=>0x0})
sendto$packet(r13, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @link_local}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x2, 0xee, 0xc, 0x4a, @local, @remote, 0x8, 0x8, 0x21, 0x80000001}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r11, @ANYBLOB="000828bd7000ffdbdf2508000000140001800800030002000000080003000100000028000180140002007465616d5f736c6176655f310000000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00018008000300060000004c00018014000200766c616e30000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="080003000100000008000100", @ANYRES32=r15, @ANYBLOB="140002006272690008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32=r15, @ANYBLOB="0c00028008000200ffffffff"], 0xc0}}, 0x8c0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

1.262876065s ago: executing program 2 (id=1023):
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'wg2\x00', 0x5})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000080)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8)

1.262499738s ago: executing program 2 (id=1024):
r0 = syz_io_uring_setup(0x6d72, &(0x7f0000000540)={0x0, 0x0, 0x10000, 0x0, 0x386}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000037b54c92004b9a000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x80)
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x200200, &(0x7f0000000200)="213a319e51da86b64f33041a6e7fc389654fc9e145cd4d9eb0b354d5bdd9571617bea5c75da45ea892ba85cb705c4945d85b60520a49cda2d9d0b3d05180f089165d288960ac25559797ef1cd642f80926f781174aa4eaa21e8d67742fc9ff2a6edd79a6b8e9c01ec2480ba02d7dd142d4ab2d0b2cfea393b5ffd086752708f91be5fccebb8d93930830c359de453c9c93b2236a056acf185041be45ca09d470cf1e182d19b60fbd8d33d223f0b5a7e02dda0a39c8d6768de5440f3aefe8675b20c1db16f348a7c2f84fd1ec35cc5c997c2c6409dc2321c5dd2627b8f69277d09a2a01", 0xe3, &(0x7f0000000040), &(0x7f0000000300), &(0x7f00000005c0)="63f94f04e7aff5716229a787857b88c0753c6cc74ef5879b1d7fbf03ea67677dadb6bc2e5fc691a1931f849defde405a8595018bde437398a4c4331cba3883b39f9edf3f99aa9ff170fa3fb87b60918c72d67b0d6273bcd195dd4fbfd665f4548ada19a97d15672f10d462a380b5e26e34a84ec1f0c1b6ebe6692915f7d679f157936b8edf47b938a7693f485afec4f5fe7e859df0c78d21b5886970ca56386b603572264c1bbc9fc322744fd29ccae6233e616bd7efdd98c9214c46b668028af2060a37405b1e6652fb8aa88461376430141726e7004e8a390552599e4d36046f4e26ca9fe3f01d7316ef1ab127d38f641a36e5f5657d5dec6fcbb87ae140e25d856ad31ed25c70da00a02cf4be0a93ca34ec6b3e87e5651811757ab5fc7d7bfc439444c14f666796c42bc7221e79c526e2bf8bc39dc51e69c311d104ff40e13689a7cf3d0e04a82343358d39cd482505f85fcb5b9a98d28bff6ae90a72a33bc784cc34ca92df433df6e44412e9931340c52dad2052f8886a4173b47d076b31a238c3bc40b44b1b3baf4b6ee3457529a4ab682868375ed1f74d309dedb9a756b08349f6fa3a0c657d15da74ba97f9113c1306c4a63ca5d2fcecacd5fbf7f1627e125a37adcff9038f4b3896eba00b21175a7a3a003f868d43cba243924480faad3bb444a3b843223666117e5741e0ec043fd59cf2a8dc0b026fe5aba844bbdbbf2874152b3202111010dad0234afa90231bcb34ddf2422b8ef32db9e2037b98c79d57dd21e667123f224a3e512c8a63bf0c7d842d29aa862871db1e0fc9e17214f7cff4572036414bcecdeef425c41e075e419e61b4df9ed2246c530c0418ac1e55fc477a500cfbfb3387ef6493331977334c1a29512dfcc2fdfaceac796741cafcf38c73b2f38ca8efdf6292bd61f0c7a3c4a200b44defe06ecb05a666f814c784eb02d30728cecb3606acfd7f46192d2c91ab69b60ba143ccd4b1d9aeec83ec55bd83d90d6cb5a75e902c8add66250accd44bf964bbdf6db961306d649262b482e95a82ba782ef68214fd42563a7e7832d9a50c30daf8ab9fd7dcd58fad4122776621b8ae47a02e77bfb847732bde1a20934b0408cacb325d56903925d5ed962e520b90fb599527199bb11b1a68abacdec33edd6f70a118917ce98c8730f9b1e6d71d671d461e9d188c8c45e359468c4bddc45ad57d23b1168647d0340821a471316070bd24b99f735161111798e3e00ac13bce60b6240c70ad3debe10e305c0c780e6990b9c3c1edc41ded263f8d248988b62a39d05c4fbac0e362d39f98796e7201b0045c703215fb05d3ef8cfe0d274f469c6bdab4ce351f111ea1ba0e9ef9615c3d49fa49982711e69b6dc22c481903ddd5d196d6f71a130d33f50f085ece891500447ff68fb8274476e28d360e1cab5191e08b6f7b271f01b6e9adea02c128d4df1996570d86139173cfa0e955283b0c5e5d81448dda4dbaaf39d5a9f17558411bfd0c5a166bf442314446ec471169534b16899c60c95c2ef69c1415e7612367f72191a7082910d32a6d7435388682c9c64429498d82c435d000bf186e016008f65ce68e338be7a991cbc52c3d6fa60f52b3e8b3accd2d33648caf608038e7e2213672f54757afff697644ce3cda91a5371417e2359c0bd4e7ce985385f37ee0d6617b1c2b1ca9b40926f2a6f6bb0cd3b68fa22f949f69080aec9caa530a6eca97a967d5e7552483a452ba3241ea148aae6b45bd4693f6be6002af8c293ca67690c95d3fc6d77da5cb95e6d6ab237089ca4d3360655bbdcdab6ef755baf91e7e59baaf57a582d31d81fd03db17946d928aebbad924e237ed3f60528c3f12ab141aca1329a31d07d897165fe076c6c051a5d6dd7913789c61a6c3a7fa6f306beb0dc4447f1f75c69e84301a8d47c0062f98d11a3d46df05e662d8ae96ac9fa73b780de457c04c3b0ca8fbdfd939024d6511c02819ec8a1c21cf66b85c5a907b360aac4810cc487e484ecd375c3e4477c55192d78b87c3403b879a6ff5b513f8f8c37d33b5fbc22851b74014259f62b8d9b554842c32b16379e911489718281b7d90db4942a2e5007a1fa3cf7db414453d2a4dce734695921065b382173fbaf87e1b672f07aa0bb0e3e49f90d316b1f3d0af6125adfa86bbdf796a2d60441e25208d27bd6676606091bd376d047d0a40bbea336f7e8cc593f2be3b0ba1d478f0abdb8435530136c9d25a018c9ba642f081e6b1a10b44b62b3bcda61ebeaeffdcc09525cc6d323abc124334f9b5161b81fdcc9933c0a73f777d87321a1d4e7094e5482f2927c35a7079b503c103bee7ab0698fa5172320e07ea457ea5d14e914368631d1b3f85e0cc4d661553ff6ec4e3c74c9448a9d9287674e563e21ebd61ac6ee7e339e0b598966ba8fbcfa87c38ddbe3decc6c137bff7f95277598326006bae369ce3b7b81a5bf544af3e8607be376e30798ff60fcf196507cf0350b59cf667739d4315cbf594fc86aa82bef2d0602f93334a64a4b6df98b27df315c79591c9312a7d51c9a33bc5066b11241b51f1dcb030565205df696b7d59e1c00eebd5d764520856d3b1483744786e4d8ce9039f1621417ce6f7f42ad5098eb6d84db8804a44f067e2c15bf6d0b47ccae11f89a60ec98531c8f00868813a8ab4af359adab87cf0d9427a5cf87a8b0d32b1bc021fd103084e0afa47b0d9089001166afcc6d1ac23f58f3ae69f00a55e1b980fe2e83e40972eb7214273100d10c330daaff18b9114681ea0c7fba5fff02adfc3914540012080bfbb7ff94357917c47247355cc2244870e72cba0f53250928573657c6f5eb6cf42d43c2b5cfd0b981682f4421a798a5c3e8d1868323e2b41952c6247fa4b29cbd90b311c97f5a037d1eac923adc6e84527cd0897d8c7a293787f6e471eb657b0022d1c25d64e03294c36cf82b8f972f9380659880e4dd696d55429ff2532c64eec66c1aeebc690ad0784671e074528ec8797dbd9ca65dda468cb1d68e270f1ebee9ea1d561fe14c1e8063f16cdcb2ffb922981c69fee3f07bfeff1850e27fa7d9ed56c1a33862de2aaa267dda406560a84d3cda2b266a4364306ebe27772b767abba75b4451f630d1a74cf780d0badc969743385a70ac327deb2d77c8bbf51bba7961d4f2ebf1d3f9a74a9da746928e3db303434fc045a5064f32a0b501e947696155d111e9a039f23c8dcc89a8b9e3bb00e21a240b0fc7a5cfa4a41d662226385b502fdcb145de8a3419a492b332bde637076d917669e1c6fafa9060f748720041fc65a0e314ac993e32ea4e4016d0fcb5e2361d415d40ae784a4fffc47ef81c9526c6057119d8c33ccbb9d9d69489144816348586d85827d67b4fb5151aacca3672f8d56be7aa53afa944f935fc1bb8e2963a84172222f13dae2f047241e35dbfb94ff1f81af4ef394c756d7167ece2ee70db093a2d3b9cbad417dfee6823d0279fea2ac401d7c84fc87362768da9a2907b14668c2e9452ca41bde41933d76b972dcb4c031be725c788d90f87c999435038e98da3bf1cffb9d937bdd7cb733de23e10e3d8c0570ba60b9fbb8741324b07cb45eb67db59cae06b11a0932b9555cf28132b051732d540cebd6d2eacb41034cb1a7fdbb3f3dac3586db4a4bb4eb99e269ba30a9e3e540e205752853fb9593d0c0bb8d5fc4d03df9609e039ad1afe40789805ee0adeb8cdcc6be7886a42e0fe2ba9e9f835332b89514b6e8c634219d759dfa3ef8a4566d478a61c23997d29aacff0754f851f225a841b305ea10c4e8aa4f3af7449c6e66e25d9beab91d563b3584a24cf61884a21c94ec889d656b34f095f977234fdb3e33cc48c327d30ad4dd52c80889e58547a26469a71853c938cbdc13447c84d24c6cbae8aa708fd09f3b387ca300397e614efd9bb7f3f93769a21dc21e071d9c71637b378134873c07acc69375e1c34977a643316e6fdbbede2630fa7e1a8ad0107e7ebf26b7fc23c98f77293c737852df2c89779523a672d7219bdf671bfbd9b1550ffa44732e901bce1765be8bfa47d86bee5594bcca91abf1e1de5691ffe89819c1fa29a1d581be05aaca315b5a0ae5d71d9d219bea29e412df85b3fd6cf67453df3fea13a59891144fb561dc141306164d9ad6495a9cf160070e399fc2e5d6534d26b573fadb230c0b234fcb4e84f20ae259e2da3be7a8a896dcb4ea824b505eb93256d12faaec9839ed66fca6cd42f32f1e9a6df47672046ba986822f1f80dcf1f7c969d4e2f29c731e8666ac98ac2f5c020cc8a56acc343a57fd524e2c1228a4d5b236c1281e7753b064f1c1e949b3e17a1e047189b5054f72d3935e4745fedd6b9a490a05c6906c98bd675fb6742b5cc053632db695a644385bfbe5d5cb6cbc82f32fb8db7565b9761a59eaf77745d0ec77fca60db4fddc55f2c4fcb4a89267a6c9a7e07b0e604f975c0b2dadee4a34cb2de3f7327340385a1ba488af17d1adef88ecdcee7695badd41f33a182bfb2e298a9eff3e7bfbce805e44c255f60b8c75edd1dfed6cb11c946efd6fffde36f250c08623dee3ad8c6a04fdb7db60b9c95be086084ac96347355f071d3be16514a2f88af3cc20899277e50b531314cd55f158313f8e23720cbfa2d87554c8c290f7e2da2ebc8c42d66b6222d5127b09ca46bc2a1fe19f50d7874d15d7f149a6152d7318a1f619b371cad4b4cdff1d16fba4a1f10f466608cd57fbb919a5e9aa688483ee1243d1a2a3b1154239ac222f140630e233cdf1cd22e73894794623c8077375ec66227e9328d87e38f65b5af27c5220fe39adb97a905237b50e745becc4d515a566bfa13e5aceb2e6db3e2c6d095a822906c1c2eb6974ce94f767dba04843132e5fb410127522f83dcdeb6e3af6739cb92f1b0c93608d0c588c9ac0e4602032b7638bde4d9072256de50818a0301bf29608e2e48d77bdc55f089cb37d57ebf7cbb0ed5da9e8fb32ccfd918fc0a4feb59e2385e16f3ef354fa1f592a62672b3bb2cd31ef2a80455f64bd4ba716e8456bdcb551c998652636b1a6c81d5e63ad20f711c88a352d8b72d060285002d96bfea2c28d8e52a1d8c77a810ff34c3495129568824ad1b154da2ad99982dba231ed57d005df45c12a17c2dbe6db7f3121cfd64dff012c251f3a87c18b6fc89ebaaa37158499d1448cca3f22400e3b6c9b579288eeb308ec64e595fd537238575e1f1fab2c500ed71836129d506a882d5cbdb0df9b670724c46fb36ac2d497233b72cb0ad41ac988907ce33444313f276d7043c6e318e9e85352090d352d278a2ac8133371eb2ee5ed7e521ad4524c6b5effe9c97c221ce893624d0e1f6d606ddfd8d4b9268317862aee6de4298dbee92e9db5dc9e80aff09d38164f1564b7d754fd1b9f39e30cbeee43ce639c819a66a9cc8eba99ff56026a23ee8d0781e7ba44342942da2bd16b8c928f0c418d65a4d1f6f16fe21721ca87e31a8e96dd483d8dc751248bf45691532c4f7fa25b12d2840b1c145d47b6b0234cedd456efa5c6ed4beeb8ec50d9b4723511780a3285f511d24b2e2e380a9c1840973f3f560ae00e8c67d9eef78160e81dff3be7fddabcdb4d32627dcff3bfed5a70bec0807e8f5e3ff07dd06989ee5c59e8fa8e8bdc0b9928d9ed886842a206c8723f8e36ae92486ca9f1805ea83b1f09607d6821f1fd9fd02ed2d4b046fc97d35a9146415ca6ed8705aa8b678b90b6285ab5e9c0b5a4810e3788c938f8397f67bb595364833286e8cdd0e832e03dfcf6c4b110fac5d80a0c60a67d87737ee45b29d67b")

1.17045464s ago: executing program 2 (id=1025):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES32], 0x0)
r1 = openat$procfs(0xffffff9c, &(0x7f0000001080)='/proc/slabinfo\x00', 0x0, 0x0)
ppoll(&(0x7f0000000240)=[{r1}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x30, r4, 0x5, 0x0, 0x8, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='w'}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0d, 0xfac05]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40040)
syz_usb_disconnect(r0)
read$char_usb(r2, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000200)={0x2, 0xb48, 0x0, 0x0})

699.163104ms ago: executing program 6 (id=1033):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@remote, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @multicast, @dev={0xac, 0x14, 0x14, 0x34}}}}}, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x20)
read$hidraw(0xffffffffffffffff, &(0x7f0000000140)=""/226, 0xe2)
r1 = dup2(r0, r0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4)
connect$pptp(r1, &(0x7f0000000280)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1e)
chdir(&(0x7f00000002c0)='./file1\x00')
listen(r0, 0x9)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd0e, 0x30}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r1)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000440)={0x9, 0x9, 0x2d27, 0x4, '\x00', '\x00', '\x00', 0x6, 0x8, 0x8000, 0x0, "c8a6d9a360d342ffa3474479c51b82a8"})
r3 = accept$inet(r1, &(0x7f0000000580)={0x2, 0x0, @broadcast}, &(0x7f00000005c0)=0x10)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7000000, 0x12, r3, 0xb57a0000)
write$P9_RVERSION(r1, &(0x7f0000000600)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.u'}, 0x15)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'veth0_to_team\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl1\x00', r4, 0x2f, 0x1, 0x4, 0x5, 0x18, @private2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7800, 0x7800, 0x9, 0x7}})
r5 = open$dir(&(0x7f0000000780)='./file0\x00', 0x204200, 0x20)
symlinkat(&(0x7f0000000740)='./file2\x00', r5, &(0x7f00000007c0)='./file0\x00')
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000800)=<r6=>0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000840)={0x1, 0x28000000, {<r7=>0x0}, {<r8=>0xee00}, 0x1, 0x2})
r9 = accept(r1, 0x0, &(0x7f0000000880))
kcmp(r6, r7, 0x2, r9, r5)
sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20048004)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@ifindex=r4, 0x13, 0x1, 0x3, &(0x7f00000009c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0]}, 0x40)
quotactl_fd$Q_SETINFO(r2, 0xffffffff80000602, r8, &(0x7f0000000b00)={0xfffffffffffff4b6, 0x3, 0x1, 0x4})
read$qrtrtun(r1, &(0x7f0000000b40)=""/227, 0xe3)
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000001040)={0x10003, 0x80, 0x280, &(0x7f0000000c40)=[0x3, 0x6, 0x6ad7, 0xd, 0xfffffffffffff015, 0x5, 0x8, 0x3500, 0x5, 0x3, 0x5, 0x31631d20, 0x8, 0xc1e2, 0x8, 0x0, 0x8, 0x4, 0x1, 0x9, 0x5, 0x100000001, 0x1, 0x9, 0x8000, 0x2, 0x5, 0x1, 0x9e0, 0x80000001, 0x0, 0x7, 0x1, 0x4, 0x3, 0x3, 0x3, 0x6, 0x3, 0x7, 0x8, 0x36b8, 0x0, 0x2d, 0x64efab8e, 0xb2, 0x89, 0x92d9, 0xe000000000000000, 0x9, 0x1, 0x7f, 0x1, 0x24, 0x2, 0x8, 0xa, 0x8, 0x1, 0x7f, 0x9, 0x20000000, 0x9, 0xc50, 0x5, 0x2, 0x4, 0x7fffffffffffffff, 0x100, 0xff, 0xbb29, 0x7d, 0x1, 0x8001, 0x2, 0xfffffffffffffff8, 0x9, 0x7fffffffffffffff, 0x2594, 0xb, 0xff, 0x0, 0x3, 0x7, 0xbf60, 0x7fffffff, 0x3, 0x9, 0x8, 0x4, 0xff, 0x0, 0x6, 0x2, 0x6, 0x7, 0x3, 0x2, 0x63c, 0x6, 0x2, 0x9, 0x6, 0x0, 0x0, 0x7, 0x7fffffffffffffff, 0x9, 0x40, 0xfffffffffffffffa, 0x4, 0x7, 0x10, 0x9, 0x10, 0xff, 0x8, 0x6, 0xc, 0x1ff, 0x8, 0xffff, 0x2, 0x6, 0x8, 0x0, 0x7, 0x8e2]})

650.378901ms ago: executing program 6 (id=1034):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000280))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x804, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0)
mkdir(&(0x7f0000000600)='./file1\x00', 0x0)
mount(&(0x7f0000000040)=@sr0, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000440)='minix\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000340)={0xe, 0x5, 0x40})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = io_uring_setup(0x534f, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$cgroup_int(r7, &(0x7f0000000540), 0xfffffdd8)
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

519.850932ms ago: executing program 3 (id=1036):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'syz2', 0x3a, 'Y$*@', 0x3a, './file0', 0x3a, [0x4f, 0x50, 0x46, 0xa1facbc173bce8fd]}, 0x33) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000a80)={0x7, 0x7, {0x51, 0x5, 0x3, {0x6}, {0x400, 0x1}, @const={0x3d37, {0xfff7, 0x9, 0x7, 0x63cf}}}, {0x55, 0x401, 0x3, {0x5, 0xc}, {0x4, 0x2}, @const={0x9, {0xc7, 0x80, 0x2, 0x5}}}})
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0400020091bd"], 0x1c}}, 0x0)

519.527765ms ago: executing program 3 (id=1037):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x1})
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"])
chdir(&(0x7f0000000280)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
write$FUSE_LK(r1, &(0x7f00000002c0)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x1e)
syz_open_dev$dri(0x0, 0x80000000, 0x80000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540100001000130700000000800000000a010101000000000000000000000000e000000100000000001200000000000000000000000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000010000000000000002000400000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001800cd"], 0x154}}, 0x0)

270.275245ms ago: executing program 3 (id=1038):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r2, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="680000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000004dfa2b2f00128009000100766c616e"], 0x68}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x4, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8}]}, 0x6c}}, 0x0)

70.215901ms ago: executing program 3 (id=1039):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0xafbbe109ec9fff9e, 0x3, 0x0, 0x2000, &(0x7f0000b13000/0x2000)=nil})
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2})
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xd6e, 0x2)
write$9p(r0, &(0x7f0000000680), 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x24040800)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc058565d, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7ac667c7"}, 0x0, 0x2, {0x0}})
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15)
msgget(0x2, 0x100)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r3 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00')
mkdirat(r3, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
openat(r3, &(0x7f0000000000)='./file0\x00', 0x82941, 0x0)

69.568012ms ago: executing program 3 (id=1040):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = dup(r2)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="580000000206050000000000fffff00000000000050005000200000009f9ffffff797a320000000005000400000000000c000780080006400000000014000300686173683a69702c706f72742c697000050001000700000094811cb4e5b492273d6fa0ecff2973f4e3683308d63ff875aefe1d297f15a3791f88c682c6a065dfe6c61ff1def9465c1cd1f4152098"], 0x58}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x58}}, 0x0)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000600)=""/179, 0xb3, <r8=>0x0, &(0x7f00000006c0)=""/20, 0x14}}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0x18, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf090000000000005509010000000000e81fa099427b291aa748f17e83950000000000000085100000f8ffffff8520000003000000186100000b0000000000000007000000184000000000000000000000000000002dbe00001000000095000000000000008d05060004000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x80000000, 0x39, &(0x7f00000001c0)=""/57, 0x41100, 0x10, '\x00', r6, @fallback=0x2, r7, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x1}, 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b00)=@bpf_ext={0x1c, 0xd, &(0x7f00000019c0)=ANY=[@ANYBLOB="1868000008000000000000000500000058110000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018160000", @ANYRES32=0x1, @ANYBLOB="0000000000000000a5730c0010000000"], &(0x7f0000001a40)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a80)={0x5, 0x3, 0x4f, 0xe}, 0x10, 0x788a, r0, 0x2, 0x0, &(0x7f0000001ac0)=[{0x4, 0x1, 0x10, 0x4}, {0x2, 0x4, 0x5, 0xa}], 0x10, 0x1000, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x1b, 0x19, &(0x7f0000000ac0)=ANY=[@ANYRES64, @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000086000000ac80e0fffcffffff18120000", @ANYRES32, @ANYBLOB="00000000000000009d38f8ff0100000018450000070000000000000000000000b7080000000000007b8af8ff00000000b67f251471ac3e23733c82080000050000007b8af0ff00000000bfa10000000000000701ed00f8ffffffbfa400000000000007040000f0ffbe86d5e5ffffb70200000800000018230000f34aeb07952b289a512149b222c42a9ccdde2659ed430d", @ANYRES16=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0xf7, &(0x7f0000001840)=""/247, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000001940)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001980)={0x4, 0x6, 0x2000009, 0xffff}, 0x10, r8, r10, 0x3, &(0x7f0000001bc0)=[0x1], &(0x7f0000001c00)=[{0x5, 0x1, 0x1, 0x4}, {0x5, 0x3, 0x10, 0x6}, {0x2, 0x1, 0x5, 0xa}], 0x10, 0x1, @void, @value}, 0x94)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', <r12=>0x0, 0x78ba2eba29206761, 0xd3, 0x5, 0x9, 0x2, @local, @loopback, 0x8, 0x1, 0x2a02, 0x9}})
r13 = socket$packet(0x11, 0x3, 0x300)
r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'lo\x00', <r15=>0x0})
sendto$packet(r13, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @link_local}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x2, 0xee, 0xc, 0x4a, @local, @remote, 0x8, 0x8, 0x21, 0x80000001}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r11, @ANYBLOB="000828bd7000ffdbdf2508000000140001800800030002000000080003000100000028000180140002007465616d5f736c6176655f310000000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0c00018008000300060000004c00018014000200766c616e30000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="080003000100000008000100", @ANYRES32=r15, @ANYBLOB="140002006272690008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32=r15, @ANYBLOB="0c00028008000200ffffffff"], 0xc0}}, 0x8c0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

0s ago: executing program 3 (id=1041):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_usbip_server_init(0x4)
ptrace$getenv(0x4201, 0x0, 0x0, 0x0)
syz_usbip_server_init(0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r2], 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETVERSION(r5, 0x80044942, &(0x7f0000000000))
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r7], 0x20}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x192}}, 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

0c03 failed: -110
[   69.585696][   T56] usb 5-1: USB disconnect, device number 3
[   69.619844][ T1018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.622859][ T1018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.625497][ T1018] usb 7-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[   69.627818][ T1018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.631164][ T1018] usb 7-1: config 0 descriptor??
[   70.046451][ T1018] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:28BD:0933.0002/input/input10
[   70.111910][ T1018] uclogic 0003:28BD:0933.0002: input,hidraw1: USB HID v5.50 Mouse [HID 28bd:0933] on usb-dummy_hcd.2-1/input0
[   70.117023][ T7929] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.494' resets device
[   70.119719][   T39] audit: type=1400 audit(1730996949.686:507): avc:  denied  { map } for  pid=7928 comm="syz.0.494" path="socket:[21311]" dev="sockfs" ino=21311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   70.145175][   T39] audit: type=1326 audit(1730996949.706:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.0.495" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6a97e719 code=0x7ffc0000
[   70.151518][   T39] audit: type=1326 audit(1730996949.706:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.0.495" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6a97e719 code=0x7ffc0000
[   70.152419][ T7933] ipvlan2: entered promiscuous mode
[   70.157335][   T39] audit: type=1326 audit(1730996949.716:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.0.495" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fcf6a97e719 code=0x7ffc0000
[   70.157358][   T39] audit: type=1326 audit(1730996949.716:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.0.495" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6a97e719 code=0x7ffc0000
[   70.170807][   T39] audit: type=1326 audit(1730996949.716:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.0.495" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6a97e719 code=0x7ffc0000
[   70.176692][   T39] audit: type=1326 audit(1730996949.716:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.0.495" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf6a97e719 code=0x7ffc0000
[   70.240078][ T7922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.244769][ T7922] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.398612][ T7936] /dev/sr0: Can't open blockdev
[   70.404553][ T7954] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   70.406238][ T7954] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   70.413126][ T7954] vhci_hcd vhci_hcd.0: Device attached
[   70.588174][   T73] vhci_hcd: vhci_device speed not set
[   70.648070][ T5308] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[   70.650234][   T73] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[   70.810002][ T5308] usb 5-1: config 0 has no interfaces?
[   70.811566][ T5308] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   70.814312][ T5308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.817513][ T5308] usb 5-1: config 0 descriptor??
[   71.023880][ T7954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.026415][ T7954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.041529][ T1412] ieee802154 phy1 wpan1: encryption failed: -22
[   71.083766][ T5950] Bluetooth: hci3: unexpected subevent 0x05 length: 10 < 12
[   71.088162][   T73] vhci_hcd: vhci_device speed not set
[   71.148087][   T73] usb 37-1: device descriptor read/64, error -71
[   71.229299][ T5308] usb 7-1: reset high-speed USB device number 6 using dummy_hcd
[   71.231731][ T7954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.234032][ T7954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.238708][   T35] usb 5-1: USB disconnect, device number 4
[   71.240907][ T7955] vhci_hcd: connection reset by peer
[   71.243282][ T7681] vhci_hcd: stop threads
[   71.244434][ T7681] vhci_hcd: release socket
[   71.245654][ T7681] vhci_hcd: disconnect device
[   71.338157][   T73] vhci_hcd: vhci_device speed not set
[   72.152237][   T39] kauditd_printk_skb: 89 callbacks suppressed
[   72.152247][   T39] audit: type=1400 audit(1730996951.716:603): avc:  denied  { write } for  pid=7990 comm="syz.0.512" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[   72.160900][   T39] audit: type=1400 audit(1730996951.716:604): avc:  denied  { open } for  pid=7990 comm="syz.0.512" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[   72.160975][ T7985] /dev/sr0: Can't open blockdev
[   72.541762][   T39] audit: type=1400 audit(1730996952.106:605): avc:  denied  { map } for  pid=8008 comm="syz.2.517" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   72.548686][   T39] audit: type=1400 audit(1730996952.106:606): avc:  denied  { execute } for  pid=8008 comm="syz.2.517" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   72.584930][ T8013] tmpfs: Bad value for 'mpol'
[   72.607496][ T8017] 9pnet: Could not find request transport: rma
[   72.651230][ T8021] __nla_validate_parse: 5 callbacks suppressed
[   72.651244][ T8021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.520'.
[   72.655228][ T8021] netlink: 40 bytes leftover after parsing attributes in process `syz.2.520'.
[   72.684134][   T39] audit: type=1400 audit(1730996952.246:607): avc:  denied  { getopt } for  pid=8022 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   72.688558][ T8024] binder: 8022:8024 ioctl c018620c 20000080 returned -22
[   72.688562][ T8023] binder: 8022:8023 ioctl c018620c 20000080 returned -22
[   72.742798][ T8028] fuse: Bad value for 'group_id'
[   72.744243][ T8028] fuse: Bad value for 'group_id'
[   72.942738][ T8043] fuse: Unknown parameter '/dev/cdrom'
[   72.952088][ T8045] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   72.981271][   T39] audit: type=1400 audit(1730996952.546:608): avc:  denied  { call } for  pid=8049 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   72.986103][   T39] audit: type=1400 audit(1730996952.546:609): avc:  denied  { transfer } for  pid=8049 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   73.020830][ T6040] usb 7-1: USB disconnect, device number 6
[   73.026132][ T8057] program syz.3.533 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   73.049475][   T39] audit: type=1400 audit(1730996952.616:610): avc:  denied  { ioctl } for  pid=8053 comm="syz.0.532" path="/173/file0/file0" dev="9p" ino=36837398 ioctlcmd=0x5639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   73.056548][ T8054] netfs: Couldn't get user pages (rc=-14)
[   73.058911][ T8054] netfs: Zero-sized read [R=19]
[   73.111072][ T8064] kvm: kvm [8063]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000006f)
[   73.366963][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'.
[   73.420145][ T8082] syz.3.539[8082] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   73.420233][ T8082] syz.3.539[8082] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   73.420765][ T8085] syz.3.539[8085] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   73.423433][ T8082] syz.3.539[8082] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   73.426159][ T8085] syz.3.539[8085] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   73.432054][ T8085] syz.3.539[8085] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   73.440867][   T39] audit: type=1400 audit(1730996953.006:611): avc:  denied  { execute } for  pid=8086 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   73.458054][   T39] audit: type=1400 audit(1730996953.006:612): avc:  denied  { execute_no_trans } for  pid=8086 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   73.516491][ T5960] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.520276][ T5960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.523675][ T5960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.528833][ T5960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.534009][ T5960] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   73.537170][ T5960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.604603][ T8090] chnl_net:caif_netlink_parms(): no params data found
[   73.653512][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.655412][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.657250][ T8090] bridge_slave_0: entered allmulticast mode
[   73.666093][ T8090] bridge_slave_0: entered promiscuous mode
[   73.669737][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.671585][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.673382][ T8090] bridge_slave_1: entered allmulticast mode
[   73.675369][ T8090] bridge_slave_1: entered promiscuous mode
[   73.696003][ T8090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.700924][ T8090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.730350][ T8090] team0: Port device team_slave_0 added
[   73.732920][ T8090] team0: Port device team_slave_1 added
[   73.738435][ T8104] syz.3.545: attempt to access beyond end of device
[   73.738435][ T8104] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[   73.744186][ T8104] (syz.3.545,8104,1):ocfs2_get_sector:1769 ERROR: status = -5
[   73.746167][ T8104] (syz.3.545,8104,1):ocfs2_sb_probe:749 ERROR: status = -5
[   73.748363][ T8104] (syz.3.545,8104,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[   73.750525][ T8104] (syz.3.545,8104,1):ocfs2_fill_super:1178 ERROR: status = -5
[   73.756428][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.758898][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.765452][ T8090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.768960][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.771239][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.777913][ T8090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.802046][ T8090] hsr_slave_0: entered promiscuous mode
[   73.810443][ T8090] hsr_slave_1: entered promiscuous mode
[   73.858526][ T8116] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   73.896755][ T8090] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   73.900877][ T8090] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   73.904553][ T8090] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   73.907875][ T8090] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   73.917038][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.918934][ T8090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.920865][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.922721][ T8090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.946882][ T8090] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.956759][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.959885][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.980040][ T8090] 8021q: adding VLAN 0 to HW filter on device team0
[   73.992866][ T7680] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.994763][ T7680] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.999022][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.000949][ T7681] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.071889][ T8090] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.155560][ T8090] veth0_vlan: entered promiscuous mode
[   74.160861][ T8090] veth1_vlan: entered promiscuous mode
[   74.172824][ T8090] veth0_macvtap: entered promiscuous mode
[   74.175928][ T8090] veth1_macvtap: entered promiscuous mode
[   74.182641][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.185423][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.189054][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.191778][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.194319][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.197038][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.200521][ T8090] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.206294][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.209193][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.211758][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.214485][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.217066][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.219880][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.223414][ T8090] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.227464][ T8090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.230056][ T8090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.232447][ T8090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.234823][ T8090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.259062][ T7680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.263021][ T7680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.271055][ T7680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.273551][ T7680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.362972][ T8143] kernel profiling enabled (shift: 17)
[   74.431674][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   74.938238][ T5986] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[   75.078082][ T5986] usb 7-1: device descriptor read/64, error -71
[   75.320266][ T8176] netlink: 'syz.5.563': attribute type 10 has an invalid length.
[   75.328265][ T5986] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[   75.332843][ T8176] team0: Failed to send options change via netlink (err -105)
[   75.334840][ T8176] team0: Port device netdevsim0 added
[   75.336978][ T7184] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[   75.340000][ T8176] netlink: 'syz.5.563': attribute type 10 has an invalid length.
[   75.346306][ T8176] team0: Failed to send options change via netlink (err -105)
[   75.349281][ T8176] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[   75.353097][ T8176] team0: Port device netdevsim0 removed
[   75.357036][ T8176] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   75.468048][ T5986] usb 7-1: device descriptor read/64, error -71
[   75.580460][ T5986] usb usb7-port1: attempt power cycle
[   75.598224][ T5950] Bluetooth: hci0: command tx timeout
[   75.646944][ T8186] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[   75.891754][ T8189] netlink: 'syz.3.566': attribute type 3 has an invalid length.
[   75.893800][ T8189] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.566'.
[   75.928330][ T5986] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[   75.950426][ T5986] usb 7-1: device descriptor read/8, error -71
[   76.160832][  T829] cfg80211: failed to load regulatory.db
[   76.190535][ T5986] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[   76.218558][ T5986] usb 7-1: device descriptor read/8, error -71
[   76.338377][ T5986] usb usb7-port1: unable to enumerate USB device
[   77.134837][ T8214] xt_CT: You must specify a L4 protocol and not use inversions on it
[   77.158111][   T39] kauditd_printk_skb: 13 callbacks suppressed
[   77.158123][   T39] audit: type=1400 audit(1730996956.716:626): avc:  denied  { view } for  pid=8215 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   77.193352][ T8219] input: syz0 as /devices/virtual/input/input12
[   77.209735][   T39] audit: type=1400 audit(1730996956.776:627): avc:  denied  { sqpoll } for  pid=8218 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   77.374777][ T8229] fuse: Bad value for 'rootmode'
[   77.431993][   T39] audit: type=1326 audit(1730996956.996:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8228 comm="syz.3.580" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c3977e719 code=0x0
[   77.436389][ T8232] misc userio: The device must be registered before sending interrupts
[   77.441911][ T8232] misc userio: Invalid payload size
[   77.542557][ T8237] netlink: 'syz.5.583': attribute type 5 has an invalid length.
[   77.544558][ T8237] netlink: 20 bytes leftover after parsing attributes in process `syz.5.583'.
[   77.603639][ T8243] netfs: Couldn't get user pages (rc=-14)
[   77.678110][ T5950] Bluetooth: hci0: command tx timeout
[   77.731808][   T39] audit: type=1400 audit(1730996957.296:629): avc:  denied  { read } for  pid=8245 comm="syz.2.586" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   77.745865][   T39] audit: type=1400 audit(1730996957.306:630): avc:  denied  { create } for  pid=8247 comm="syz.5.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   77.753568][   T39] audit: type=1400 audit(1730996957.306:631): avc:  denied  { write } for  pid=8247 comm="syz.5.585" path="socket:[25432]" dev="sockfs" ino=25432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   77.762292][   T39] audit: type=1400 audit(1730996957.306:632): avc:  denied  { nlmsg_read } for  pid=8247 comm="syz.5.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   77.767063][ T8250] fuse: Unknown parameter '000000000000000000040x000000000000000400000000000000000004'
[   77.781897][   T39] audit: type=1326 audit(1730996957.346:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.5.588" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7fd7e719 code=0x7ffc0000
[   77.788951][   T39] audit: type=1326 audit(1730996957.356:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.5.588" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7fd7e719 code=0x7ffc0000
[   77.795490][   T39] audit: type=1326 audit(1730996957.356:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.5.588" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbf7fd7e719 code=0x7ffc0000
[   78.098201][   T30] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[   78.227351][ T8264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.592'.
[   78.237777][ T8264] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.249490][   T30] usb 7-1: Using ep0 maxpacket: 16
[   78.251966][   T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.254672][   T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.257113][   T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   78.260756][   T30] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   78.261527][ T8270] fuse: Bad value for 'user_id'
[   78.263082][   T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.266264][   T30] usb 7-1: config 0 descriptor??
[   78.266805][ T8270] fuse: Bad value for 'user_id'
[   78.272002][ T8270] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   78.297166][ T8272] vivid-002: =================  START STATUS  =================
[   78.299992][ T8272] vivid-002: ==================  END STATUS  ==================
[   78.353705][ T8278] xt_ecn: cannot match TCP bits for non-tcp packets
[   78.480755][ T8302] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   78.484994][ T8302] overlayfs: failed to set xattr on upper
[   78.486578][ T8302] overlayfs: ...falling back to redirect_dir=nofollow.
[   78.488561][ T8302] overlayfs: ...falling back to index=off.
[   78.490110][ T8302] overlayfs: ...falling back to uuid=null.
[   78.495467][ T8302] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   78.497329][ T8302] overlayfs: failed to set xattr on upper
[   78.499018][ T8302] overlayfs: ...falling back to redirect_dir=nofollow.
[   78.500769][ T8302] overlayfs: ...falling back to index=off.
[   78.502362][ T8302] overlayfs: ...falling back to uuid=null.
[   78.504721][ T8302] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   78.508732][ T8302] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   78.512396][ T8302] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   78.674607][   T30] input: HID 0955:7214 Haptics as /devices/virtual/input/input13
[   78.686776][   T30] shield 0003:0955:7214.0003: Registered Thunderstrike controller
[   78.690109][   T30] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0
[   78.788087][  T829] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[   78.872966][ T8254] random: crng reseeded on system resumption
[   78.928113][  T829] usb 10-1: device descriptor read/64, error -71
[   79.032243][ T8326] ALSA: mixer_oss: invalid OSS volume ''
[   79.032996][ T8254] ntfs3: Unknown parameter ''
[   79.041013][ T8326] geneve2: entered promiscuous mode
[   79.042565][ T8326] geneve2: entered allmulticast mode
[   79.143101][   T30] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   79.143226][ T5987] usb 7-1: USB disconnect, device number 11
[   79.148144][   T30] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   79.151027][   T30] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   79.153738][   T30] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   79.178084][  T829] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[   79.319193][  T829] usb 10-1: device descriptor read/64, error -71
[   79.375317][ T8336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.612'.
[   79.380410][ T8336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8336 comm=syz.3.612
[   79.438501][  T829] usb usb10-port1: attempt power cycle
[   79.728409][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'.
[   79.758169][ T5950] Bluetooth: hci0: command tx timeout
[   79.780143][  T829] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[   79.808441][  T829] usb 10-1: device descriptor read/8, error -71
[   80.048086][  T829] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[   80.068412][  T829] usb 10-1: device descriptor read/8, error -71
[   80.088471][ T8362] program syz.3.620 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   80.178282][  T829] usb usb10-port1: unable to enumerate USB device
[   80.426887][ T8382] netlink: 'syz.3.623': attribute type 4 has an invalid length.
[   80.687288][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   80.689928][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   80.692261][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   80.694670][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   80.696851][ T5960] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   80.700679][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   80.774222][ T8389] chnl_net:caif_netlink_parms(): no params data found
[   80.811847][ T7177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.860065][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.861871][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.863687][ T8389] bridge_slave_0: entered allmulticast mode
[   80.865624][ T8389] bridge_slave_0: entered promiscuous mode
[   80.868353][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.870151][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.871967][ T8389] bridge_slave_1: entered allmulticast mode
[   80.873926][ T8389] bridge_slave_1: entered promiscuous mode
[   80.895270][ T7177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.910912][ T8389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.914426][ T8389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.936043][ T8389] team0: Port device team_slave_0 added
[   80.938858][ T8389] team0: Port device team_slave_1 added
[   80.958518][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.960934][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.967852][ T8389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.981068][ T7177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.986553][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.989823][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.996810][ T8389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.020512][ T8389] hsr_slave_0: entered promiscuous mode
[   81.022412][ T8389] hsr_slave_1: entered promiscuous mode
[   81.024204][ T8389] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.026136][ T8389] Cannot create hsr debugfs directory
[   81.101510][ T7177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.211492][ T7177] bridge_slave_1: left allmulticast mode
[   81.212944][ T7177] bridge_slave_1: left promiscuous mode
[   81.214427][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.217301][ T7177] bridge_slave_0: left allmulticast mode
[   81.218923][ T7177] bridge_slave_0: left promiscuous mode
[   81.220951][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.630248][ T7177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.635030][ T7177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.639823][ T7177] bond0 (unregistering): Released all slaves
[   81.658838][ T5950] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   81.667385][ T5950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   81.675444][ T5950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   81.685363][ T5950] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   81.695095][ T5950] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   81.699932][ T5950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   81.746270][ T7177] bond1 (unregistering): Released all slaves
[   81.784956][ T8411] batadv0: entered promiscuous mode
[   81.838112][ T5960] Bluetooth: hci0: command tx timeout
[   81.894076][ T8405] chnl_net:caif_netlink_parms(): no params data found
[   81.988165][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.990048][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.992011][ T8405] bridge_slave_0: entered allmulticast mode
[   81.994200][ T8405] bridge_slave_0: entered promiscuous mode
[   81.996791][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.001011][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.003123][ T8405] bridge_slave_1: entered allmulticast mode
[   82.005285][ T8405] bridge_slave_1: entered promiscuous mode
[   82.030010][ T8405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.033898][ T8405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.064189][ T8405] team0: Port device team_slave_0 added
[   82.070044][ T5987] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[   82.073557][ T8405] team0: Port device team_slave_1 added
[   82.100425][ T7177] hsr_slave_0: left promiscuous mode
[   82.103279][ T7177] hsr_slave_1: left promiscuous mode
[   82.105200][ T7177] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.107192][ T7177] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.111222][ T7177] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.113167][ T7177] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.134273][ T7177] veth1_macvtap: left promiscuous mode
[   82.135802][ T7177] veth0_macvtap: left promiscuous mode
[   82.137274][ T7177] veth1_vlan: left promiscuous mode
[   82.139271][ T7177] veth0_vlan: left promiscuous mode
[   82.201803][ T5987] usb 10-1: device descriptor read/64, error -71
[   82.438084][ T5987] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[   82.570654][ T5987] usb 10-1: device descriptor read/64, error -71
[   82.679651][ T5987] usb usb10-port1: attempt power cycle
[   82.721548][ T5960] Bluetooth: hci3: command tx timeout
[   82.777786][ T7177] team0 (unregistering): Port device team_slave_1 removed
[   82.848501][ T7177] team0 (unregistering): Port device team_slave_0 removed
[   83.018071][ T5987] usb 10-1: new full-speed USB device number 8 using dummy_hcd
[   83.038533][ T5987] usb 10-1: device descriptor read/8, error -71
[   83.280116][ T5987] usb 10-1: new full-speed USB device number 9 using dummy_hcd
[   83.299416][ T5987] usb 10-1: device descriptor read/8, error -71
[   83.335587][ T8434] random: crng reseeded on system resumption
[   83.336687][   T39] kauditd_printk_skb: 43 callbacks suppressed
[   83.336701][   T39] audit: type=1400 audit(1730996962.896:679): avc:  denied  { append } for  pid=8432 comm="syz.2.630" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   83.384152][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.385968][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.392632][ T8405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.396574][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.398618][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.405051][ T8405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.408443][ T5987] usb usb10-port1: unable to enumerate USB device
[   83.487578][ T8405] hsr_slave_0: entered promiscuous mode
[   83.493927][ T8405] hsr_slave_1: entered promiscuous mode
[   83.495918][ T8405] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   83.497887][ T8405] Cannot create hsr debugfs directory
[   83.601002][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'.
[   83.679796][ T8446] hsr_slave_1 (unregistering): left promiscuous mode
[   83.688612][ T8389] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.701741][ T8389] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.715050][ T8389] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.718530][ T8389] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.746130][ T8405] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   83.749710][ T8405] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   83.753681][ T8405] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   83.756814][ T8405] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   83.758139][ T5960] Bluetooth: hci4: command tx timeout
[   83.775240][ T8460] iso9660: Bad value for 'gid'
[   83.776569][ T8460] iso9660: Bad value for 'gid'
[   83.784502][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.798314][ T8389] 8021q: adding VLAN 0 to HW filter on device team0
[   83.803086][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.804933][ T7681] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.805873][ T8462] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.633' sets config #3
[   83.810335][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.812231][ T7681] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.822058][   T39] audit: type=1400 audit(1730996963.386:680): avc:  denied  { append } for  pid=8461 comm="syz.2.633" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   83.832535][ T8405] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.843894][ T8405] 8021q: adding VLAN 0 to HW filter on device team0
[   83.851603][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.853443][ T7681] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.859426][ T7182] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.861308][ T7182] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.913886][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.932533][ T8389] veth0_vlan: entered promiscuous mode
[   83.936426][ T8389] veth1_vlan: entered promiscuous mode
[   83.947812][ T8389] veth0_macvtap: entered promiscuous mode
[   83.956055][ T8389] veth1_macvtap: entered promiscuous mode
[   83.960371][ T8405] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.965387][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.968263][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.970718][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.973343][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.975744][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.978520][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.981687][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.985655][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.989111][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.991792][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.994376][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.996837][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.999903][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.004363][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.010353][ T8389] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.012600][ T8389] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.014828][ T8389] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.017033][ T8389] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.041858][ T8488] hsr0: entered allmulticast mode
[   84.051185][ T8488] hsr_slave_0: entered allmulticast mode
[   84.055025][ T8488] hsr_slave_0: left promiscuous mode
[   84.066426][ T8488] hsr0 (unregistering): left allmulticast mode
[   84.078416][ T7681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.080451][ T7681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.098461][ T7182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.100465][ T7182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.109297][ T8405] veth0_vlan: entered promiscuous mode
[   84.115907][ T8405] veth1_vlan: entered promiscuous mode
[   84.126704][ T8405] veth0_macvtap: entered promiscuous mode
[   84.131470][ T8405] veth1_macvtap: entered promiscuous mode
[   84.137761][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.141219][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.143698][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.146266][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.148965][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.151508][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.153908][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.156520][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.161104][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.165574][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.168995][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.171467][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.174147][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.176639][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.179612][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.182113][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.184759][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.188179][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.193940][ T8405] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.196285][ T8405] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.198658][ T8405] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.200866][ T8405] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.231230][ T7182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.233255][ T7182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.244454][ T7187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.246472][ T7187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.452840][ T8516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.641'.
[   84.491871][ T8525] fuse: Unknown parameter '0x000000000000000300000000000000000000003'
[   84.519648][   T39] audit: type=1400 audit(1730996964.086:681): avc:  denied  { setopt } for  pid=8526 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   84.728258][   T73] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[   84.758777][ T5989] usb 7-1: new low-speed USB device number 12 using dummy_hcd
[   84.798230][ T5960] Bluetooth: hci3: command tx timeout
[   84.822900][ T8531] netlink: 'syz.5.646': attribute type 21 has an invalid length.
[   84.824888][ T8531] netlink: 128 bytes leftover after parsing attributes in process `syz.5.646'.
[   84.827175][ T8531] netlink: 'syz.5.646': attribute type 4 has an invalid length.
[   84.829687][ T8531] netlink: 'syz.5.646': attribute type 3 has an invalid length.
[   84.832451][ T8531] netlink: 3 bytes leftover after parsing attributes in process `syz.5.646'.
[   84.893597][   T73] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.896418][   T73] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   84.898890][   T73] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.901906][   T73] usb 11-1: config 0 descriptor??
[   84.909385][ T5989] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.911976][ T5989] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[   84.914344][ T5989] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   84.917099][ T5989] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.919813][ T5989] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   84.922362][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.926651][ T5989] hub 7-1:1.0: bad descriptor, ignoring hub
[   84.928265][ T5989] hub 7-1:1.0: probe with driver hub failed with error -5
[   84.941845][ T5989] cdc_wdm 7-1:1.0: skipping garbage
[   84.943256][ T5989] cdc_wdm 7-1:1.0: skipping garbage
[   84.945383][ T5989] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[   84.946949][ T5989] cdc_wdm 7-1:1.0: Unknown control protocol
[   85.123748][   T39] audit: type=1400 audit(1730996964.686:682): avc:  denied  { bind } for  pid=8502 comm="syz.6.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   85.128932][   T39] audit: type=1400 audit(1730996964.686:683): avc:  denied  { name_bind } for  pid=8502 comm="syz.6.627" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   85.134163][   T39] audit: type=1400 audit(1730996964.686:684): avc:  denied  { node_bind } for  pid=8502 comm="syz.6.627" saddr=172.20.20.187 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   85.137001][   T73] usbhid 11-1:0.0: can't add hid device: -71
[   85.141463][   T73] usbhid 11-1:0.0: probe with driver usbhid failed with error -71
[   85.144084][   T73] usb 11-1: USB disconnect, device number 2
[   85.208034][ T5986] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[   85.368061][ T5986] usb 10-1: Using ep0 maxpacket: 8
[   85.370740][ T5986] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[   85.372954][ T5986] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   85.375461][ T5986] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   85.377872][ T5986] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   85.381307][ T5986] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   85.384595][ T5986] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   85.387037][ T5986] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.426904][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.651'.
[   85.452488][ T8547] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8547 comm=syz.3.652
[   85.478553][ T8549] ipt_REJECT: TCP_RESET invalid for non-tcp
[   85.507242][    C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   85.514501][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.654'.
[   85.565553][ T8558] netlink: 'syz.3.656': attribute type 10 has an invalid length.
[   85.569360][ T8558] geneve0: entered promiscuous mode
[   85.574826][ T8558] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   85.594537][ T5986] usb 10-1: usb_control_msg returned -32
[   85.596251][ T5986] usbtmc 10-1:16.0: can't read capabilities
[   85.660260][ T8527] usb 7-1: reset low-speed USB device number 12 using dummy_hcd
[   85.733247][ T8567] netlink: 'syz.6.660': attribute type 10 has an invalid length.
[   85.740650][ T8567] team0: Port device netdevsim0 added
[   85.743476][ T8567] netlink: 'syz.6.660': attribute type 10 has an invalid length.
[   85.752184][ T8567] team0: Port device netdevsim0 removed
[   85.755078][ T8567] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   85.763572][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'.
[   85.767649][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'.
[   85.770134][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'.
[   85.772367][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'.
[   85.838309][ T5960] Bluetooth: hci4: command tx timeout
[   85.865731][ T8577] kvm: pic: non byte write
[   85.959389][   T39] audit: type=1400 audit(1730996965.526:685): avc:  denied  { getopt } for  pid=8587 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   85.976534][ T8527] cdc_wdm 7-1:1.0: Error submitting int urb - -90
[   85.993161][ T5989] hid-generic 0005:16C0:FFF9.0004: item fetching failed at offset 0/2
[   85.996196][ T5989] hid-generic 0005:16C0:FFF9.0004: probe with driver hid-generic failed with error -22
[   85.997115][ T8586] netlink: 'syz.6.666': attribute type 5 has an invalid length.
[   86.020218][   T39] audit: type=1400 audit(1730996965.586:686): avc:  denied  { module_load } for  pid=8593 comm="syz.3.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   86.050717][ T8601] misc userio: Invalid payload size
[   86.090762][ T8592] cdc_wdm 7-1:1.0: Error submitting int urb - -90
[   86.104634][ T8608] netlink: 'syz.6.673': attribute type 1 has an invalid length.
[   86.106690][ T8608] netlink: 'syz.6.673': attribute type 3 has an invalid length.
[   86.108991][ T8608] NCSI netlink: No device for ifindex 0
[   86.109437][   T39] audit: type=1400 audit(1730996965.676:687): avc:  denied  { mounton } for  pid=8605 comm="syz.3.672" path="/23/file0/bus" dev="hugetlbfs" ino=30808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1
[   86.112078][ T8606] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   86.119000][ T8606] overlayfs: failed to set xattr on upper
[   86.120438][ T8606] overlayfs: ...falling back to redirect_dir=nofollow.
[   86.122176][ T8606] overlayfs: ...falling back to index=off.
[   86.123702][ T8606] overlayfs: ...falling back to uuid=null.
[   86.125204][ T8606] overlayfs: maximum fs stacking depth exceeded
[   86.186143][ T8614] netlink: 'syz.3.676': attribute type 4 has an invalid length.
[   86.211416][ T8615] sctp: [Deprecated]: syz.6.674 (pid 8615) Use of struct sctp_assoc_value in delayed_ack socket option.
[   86.211416][ T8615] Use struct sctp_sack_info instead
[   86.299170][   T73] usb 7-1: USB disconnect, device number 12
[   86.432130][   T39] audit: type=1400 audit(1730996965.996:688): avc:  denied  { nlmsg_read } for  pid=8629 comm="syz.6.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   86.438246][   T35] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   86.606763][ T8637] syzkaller0: entered allmulticast mode
[   86.608356][   T35] usb 8-1: Using ep0 maxpacket: 32
[   86.610874][   T35] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[   86.613040][   T35] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   86.615185][   T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[   86.617429][   T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   86.620604][   T35] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   86.622822][ T8637] syzkaller0: tun_chr_ioctl cmd 1074025677
[   86.623102][   T35] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   86.624628][ T8637] syzkaller0: Linktype set failed because interface is up
[   86.627861][   T35] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   86.632782][   T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.636779][   T35] usb 8-1: config 0 descriptor??
[   86.649759][   T30] syzkaller0: tun_net_xmit 76
[   86.682420][ T8638] bond0: option fail_over_mac: unable to set because the bond device has slaves
[   86.840768][   T35] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   86.844890][   T35] usb 8-1: USB disconnect, device number 6
[   86.848275][ T8314] syzkaller0: tun_net_xmit 76
[   86.852199][   T35] usblp0: removed
[   86.878165][ T5960] Bluetooth: hci3: command tx timeout
[   87.051044][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.288110][   T35] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   87.448096][   T35] usb 8-1: Using ep0 maxpacket: 32
[   87.450817][   T35] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[   87.453036][   T35] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   87.455273][   T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[   87.457566][   T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   87.460504][   T35] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   87.463040][   T35] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   87.466411][   T35] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   87.469041][   T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.472083][   T35] usb 8-1: config 0 descriptor??
[   87.692435][   T35] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   87.930117][ T5960] Bluetooth: hci4: command tx timeout
[   87.944943][    T8] usb 10-1: USB disconnect, device number 10
[   88.721663][ T8681] syz.6.690[8681] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   88.721717][ T8681] syz.6.690[8681] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   88.724642][ T8681] syz.6.690[8681] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   88.800079][ T8693] __nla_validate_parse: 38 callbacks suppressed
[   88.800092][ T8693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.692'.
[   88.808042][ T8688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.692'.
[   88.851809][ T8700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.696'.
[   88.958236][ T5960] Bluetooth: hci3: command tx timeout
[   89.193377][ T5988] usb 8-1: USB disconnect, device number 7
[   89.202829][ T5988] usblp0: removed
[   89.226681][ T8726] input: syz0 as /devices/virtual/input/input14
[   89.618029][ T5988] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   89.769798][ T5988] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   89.772177][ T5988] usb 8-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config
[   89.774672][ T5988] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[   89.777019][ T5988] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   89.780219][ T5988] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59315, setting to 1024
[   89.784302][ T5988] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   89.786558][ T5988] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   89.788746][ T5988] usb 8-1: Product: syz
[   89.789795][ T5988] usb 8-1: Manufacturer: syz
[   89.792347][ T8736] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   89.794795][ T5988] cdc_wdm 8-1:1.0: skipping garbage
[   89.796217][ T5988] cdc_wdm 8-1:1.0: skipping garbage
[   89.798437][ T5988] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   89.800052][ T5988] cdc_wdm 8-1:1.0: Unknown control protocol
[   89.996762][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   89.998059][ T5960] Bluetooth: hci4: command tx timeout
[   89.998929][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   90.002289][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   90.004032][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   90.005866][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   90.007592][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   90.009375][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   90.011684][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   90.013494][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   90.015184][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   90.016909][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   90.018618][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   90.020408][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   90.022189][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   90.024068][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   90.025799][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   90.027508][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   90.029249][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   90.031592][    C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[   90.033362][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[   90.092356][    C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[   90.095585][   T35] usb 8-1: USB disconnect, device number 8
[   90.419415][ T8778] TCP: TCP_TX_DELAY enabled
[   90.443799][ T8781] netlink: 496 bytes leftover after parsing attributes in process `syz.6.721'.
[   90.446239][ T8781] netlink: ct family unspecified
[   90.447610][ T8781] openvswitch: netlink: Actions may not be safe on all matching packets
[   90.952912][ T8819] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[   91.165554][ T8825] xt_hashlimit: size too large, truncated to 1048576
[   91.228625][   T39] kauditd_printk_skb: 4 callbacks suppressed
[   91.228635][   T39] audit: type=1400 audit(1730996970.796:693): avc:  denied  { getopt } for  pid=8830 comm="syz.6.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   91.228722][ T8831] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   91.232222][   T39] audit: type=1400 audit(1730996970.796:694): avc:  denied  { ioctl } for  pid=8830 comm="syz.6.739" path="socket:[31212]" dev="sockfs" ino=31212 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   91.283798][   T39] audit: type=1400 audit(1730996970.846:695): avc:  denied  { getopt } for  pid=8841 comm="syz.6.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   91.284700][ T8829] Bluetooth: MGMT ver 1.23
[   91.361816][ T8852] pim6reg1: entered promiscuous mode
[   91.363532][ T8852] pim6reg1: entered allmulticast mode
[   91.474231][ T8864] veth3: entered promiscuous mode
[   91.507524][   T39] audit: type=1107 audit(1730996971.066:696): pid=8867 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='i!<â:øôT¹ÿ%¹#pË(Y‹²ëxÍ ^	Î/9i‚¥Œµéb
[   91.507524][   T39] òO F‰ç»hÅe	ªBï“ŽæÇ'
[   91.565146][   T39] audit: type=1400 audit(1730996971.126:697): avc:  denied  { create } for  pid=8874 comm="syz.6.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   91.567050][ T8875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=8875 comm=syz.6.751
[   91.570114][   T39] audit: type=1400 audit(1730996971.126:698): avc:  denied  { connect } for  pid=8874 comm="syz.6.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   91.584999][   T39] audit: type=1400 audit(1730996971.146:699): avc:  denied  { setopt } for  pid=8867 comm="syz.5.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   91.591456][   T39] audit: type=1400 audit(1730996971.146:700): avc:  denied  { read write } for  pid=8867 comm="syz.5.749" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   91.597479][   T39] audit: type=1400 audit(1730996971.146:701): avc:  denied  { open } for  pid=8867 comm="syz.5.749" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   91.674812][   T39] audit: type=1400 audit(1730996971.236:702): avc:  denied  { listen } for  pid=8874 comm="syz.6.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   91.848022][    T8] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[   91.908055][   T35] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[   91.938114][ T5987] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[   91.998172][    T8] usb 10-1: Using ep0 maxpacket: 8
[   92.000687][    T8] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[   92.002791][    T8] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   92.005261][    T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   92.005919][ T8884] jfs: Unrecognized mount option "gid=" or missing value
[   92.007713][    T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   92.007728][    T8] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   92.007750][    T8] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   92.007761][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.068714][   T35] usb 11-1: Using ep0 maxpacket: 8
[   92.071357][   T35] usb 11-1: config 0 has no interfaces?
[   92.072801][   T35] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   92.075120][   T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.080149][   T35] usb 11-1: config 0 descriptor??
[   92.088010][ T5987] usb 8-1: Using ep0 maxpacket: 32
[   92.091849][ T5987] usb 8-1: config index 0 descriptor too short (expected 35577, got 27)
[   92.094034][ T5987] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   92.096286][ T5987] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92
[   92.096845][ T8888] netlink: 32 bytes leftover after parsing attributes in process `syz.2.756'.
[   92.098646][ T5987] usb 8-1: config 1 has no interface number 0
[   92.101931][ T8888] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.756'.
[   92.102440][ T5987] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   92.104736][ T8888] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes.
[   92.109618][ T5987] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   92.112895][ T5987] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   92.115228][ T5987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.122192][ T5987] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found
[   92.211114][    T8] usb 10-1: GET_CAPABILITIES returned 0
[   92.212621][    T8] usbtmc 10-1:16.0: can't read capabilities
[   92.283640][ T8314] usb 11-1: USB disconnect, device number 3
[   92.417731][    T8] usb 10-1: USB disconnect, device number 11
[   92.526649][ T5987] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached
[   92.729577][ T8882] 9p: Unknown access argument 18446744073709551615: -34
[   92.773621][ T8882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.775913][ T8882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.784443][   T73] usb 8-1: USB disconnect, device number 9
[   92.786586][   T73] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected
[   92.955891][ T8908] bridge0: the hash_elasticity option has been deprecated and is always 16
[   92.964783][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.966946][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.047447][ T8925] SELinux:  policydb version 536870912 does not match my version range 15-33
[   93.051983][ T8925] SELinux: failed to load policy
[   93.106781][ T8937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.119029][ T8937] ipt_REJECT: ECHOREPLY no longer supported.
[   93.288032][   T73] usb 10-1: new full-speed USB device number 12 using dummy_hcd
[   93.358058][ T5960] Bluetooth: hci0: Opcode 0x0401 failed: -110
[   93.358155][ T5950] Bluetooth: hci0: command 0x0401 tx timeout
[   93.419364][   T73] usb 10-1: device descriptor read/64, error -71
[   93.658067][   T73] usb 10-1: new full-speed USB device number 13 using dummy_hcd
[   93.745815][ T5950] Bluetooth: hci5: sending frame failed (-49)
[   93.748590][ T5960] Bluetooth: hci5: Opcode 0x1003 failed: -49
[   93.798027][   T73] usb 10-1: device descriptor read/64, error -71
[   93.828194][    T8] usb 11-1: new high-speed USB device number 4 using dummy_hcd
[   93.830511][ T8969] netlink: 228 bytes leftover after parsing attributes in process `syz.3.785'.
[   93.908635][   T73] usb usb10-port1: attempt power cycle
[   93.973292][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.787'.
[   93.978116][    T8] usb 11-1: Using ep0 maxpacket: 16
[   93.980770][    T8] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.983625][    T8] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   93.987083][    T8] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   93.992362][    T8] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.996110][    T8] usb 11-1: config 0 descriptor??
[   93.997275][ T8977] overlayfs: failed to resolve './file0': -2
[   94.248264][   T73] usb 10-1: new full-speed USB device number 14 using dummy_hcd
[   94.268623][   T73] usb 10-1: device descriptor read/8, error -71
[   94.401398][    T8] microsoft 0003:045E:07DA.0005: item fetching failed at offset 33/34
[   94.404267][    T8] microsoft 0003:045E:07DA.0005: parse failed
[   94.405935][    T8] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22
[   94.528113][   T73] usb 10-1: new full-speed USB device number 15 using dummy_hcd
[   94.531222][ T8989] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   94.548560][   T73] usb 10-1: device descriptor read/8, error -71
[   94.651957][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.654316][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.668186][   T73] usb usb10-port1: unable to enumerate USB device
[   94.780616][ T1018] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[   94.861430][   T30] usb 11-1: USB disconnect, device number 4
[   94.943706][ T1018] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   94.946864][ T1018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   94.949892][ T1018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   94.952454][ T1018] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   94.955932][ T1018] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   94.958480][ T1018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.961584][ T1018] usb 7-1: config 0 descriptor??
[   95.367711][ T1018] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[   95.378711][ T1018] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   95.385496][ T8997] netlink: 80 bytes leftover after parsing attributes in process `syz.6.793'.
[   95.410885][ T9000] netlink: 60 bytes leftover after parsing attributes in process `syz.6.795'.
[   95.416127][ T9001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=9001 comm=syz.3.794
[   95.448472][ T5950] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1
[   95.712346][ T9025] xt_hashlimit: size too large, truncated to 1048576
[   95.787512][ T1018] usb 7-1: USB disconnect, device number 13
[   96.043151][ T9035] netlink: 60 bytes leftover after parsing attributes in process `syz.5.804'.
[   96.087569][ T9037] 9pnet_fd: Insufficient options for proto=fd
[   96.121287][ T9042] binder: 9041:9042 ioctl c0306201 20000480 returned -22
[   96.438449][ T9063] netlink: 60 bytes leftover after parsing attributes in process `syz.6.813'.
[   96.474926][ T9066] netlink: 72 bytes leftover after parsing attributes in process `syz.6.814'.
[   96.558169][   T30] IPVS: starting estimator thread 0...
[   96.561279][ T9069] tipc: Started in network mode
[   96.563412][ T9069] tipc: Node identity ac1414aa, cluster identity 4711
[   96.566001][ T9069] tipc: Enabled bearer <udp:s>, priority 10
[   96.587405][ T9072] UHID_CREATE from different security context by process 198 (syz.3.816), this is not allowed.
[   96.668092][ T9070] IPVS: using max 35 ests per chain, 84000 per kthread
[   97.131556][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.821'.
[   97.187773][   T39] kauditd_printk_skb: 19 callbacks suppressed
[   97.187785][   T39] audit: type=1400 audit(1730996976.746:722): avc:  denied  { listen } for  pid=9085 comm="syz.5.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   97.194192][   T39] audit: type=1400 audit(1730996976.746:723): avc:  denied  { read } for  pid=9085 comm="syz.5.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   97.448241][ T9093] netlink: 60 bytes leftover after parsing attributes in process `syz.6.823'.
[   97.526512][   T39] audit: type=1400 audit(1730996977.086:724): avc:  denied  { execute } for  pid=9096 comm="syz.6.825" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   97.571514][ T9105] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   97.580270][   T30] tipc: Node number set to 2886997162
[   97.608960][ T9107] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.828'.
[   97.611420][ T9107] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   97.888070][   T73] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[   97.939371][ T9116] syz.5.830 (9116) used greatest stack depth: 18928 bytes left
[   98.038512][   T73] usb 8-1: too many configurations: 9, using maximum allowed: 8
[   98.038623][ T9121] overlayfs: conflicting options: metacopy=off,verity=require
[   98.041232][   T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   98.044825][   T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   98.047755][   T73] usb 8-1: config 0 interface 0 has no altsetting 0
[   98.051523][   T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   98.053839][   T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   98.056531][   T73] usb 8-1: config 0 interface 0 has no altsetting 0
[   98.059099][   T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   98.061556][   T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   98.064306][   T73] usb 8-1: config 0 interface 0 has no altsetting 0
[   98.067031][   T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   98.070161][   T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   98.073090][   T73] usb 8-1: config 0 interface 0 has no altsetting 0
[   98.075557][   T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   98.077845][   T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   98.080788][   T73] usb 8-1: config 0 interface 0 has no altsetting 0
[   98.084900][   T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   98.087227][   T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   98.090389][   T73] usb 8-1: config 0 interface 0 has no altsetting 0
[   98.092927][   T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   98.095156][   T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   98.098044][   T73] usb 8-1: config 0 interface 0 has no altsetting 0
[   98.100464][   T73] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[   98.102770][   T73] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   98.105445][   T73] usb 8-1: config 0 interface 0 has no altsetting 0
[   98.108604][   T73] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   98.111156][   T73] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   98.113403][   T73] usb 8-1: Product: syz
[   98.114496][   T73] usb 8-1: Manufacturer: syz
[   98.115757][   T73] usb 8-1: SerialNumber: syz
[   98.118324][   T73] usb 8-1: config 0 descriptor??
[   98.122269][   T73] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0
[   98.256839][   T39] audit: type=1400 audit(1730996977.816:725): avc:  denied  { read append } for  pid=9125 comm="syz.5.832" name="blkio.bfq.io_serviced" dev="9p" ino=36837439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   98.263394][   T39] audit: type=1400 audit(1730996977.816:726): avc:  denied  { open } for  pid=9125 comm="syz.5.832" path="/66/file0/blkio.bfq.io_serviced" dev="9p" ino=36837439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   98.266055][ T9126] netfs: Couldn't get user pages (rc=-14)
[   98.269969][   T39] audit: type=1400 audit(1730996977.816:727): avc:  denied  { write } for  pid=9125 comm="syz.5.832" name="blkio.bfq.io_serviced" dev="9p" ino=36837439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   98.277248][   T39] audit: type=1400 audit(1730996977.836:728): avc:  denied  { map } for  pid=9125 comm="syz.5.832" path="/66/file0/blkio.bfq.io_serviced" dev="9p" ino=36837439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   98.325002][   T39] audit: type=1400 audit(1730996977.886:729): avc:  denied  { ioctl } for  pid=9125 comm="syz.5.832" path="/66/file0/blkio.bfq.io_serviced" dev="9p" ino=36837439 ioctlcmd=0x54e3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   98.374679][    C3] usb 8-1: yurex_control_callback - control failed: -71
[   98.374882][   T30] usb 8-1: USB disconnect, device number 10
[   98.380879][   T30] yurex 8-1:0.0: USB YUREX #0 now disconnected
[   98.522409][   T39] audit: type=1400 audit(1730996978.086:730): avc:  denied  { create } for  pid=9133 comm="syz.6.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   98.532279][   T39] audit: type=1400 audit(1730996978.096:731): avc:  denied  { listen } for  pid=9133 comm="syz.6.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   98.602033][ T9143] No control pipe specified
[   98.603918][ T9143] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   98.606612][ T9143] overlayfs: missing 'lowerdir'
[   98.634731][ T1140] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.665291][ T9149] syz.6.840: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   98.670556][ T9149] CPU: 0 UID: 0 PID: 9149 Comm: syz.6.840 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0
[   98.673252][ T9149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   98.675939][ T9149] Call Trace:
[   98.676819][ T9149]  <TASK>
[   98.677691][ T9149]  dump_stack_lvl+0x16c/0x1f0
[   98.678934][ T9149]  warn_alloc+0x24d/0x3a0
[   98.680026][ T9149]  ? __pfx_warn_alloc+0x10/0x10
[   98.681309][ T9149]  ? __pfx_stack_trace_save+0x10/0x10
[   98.682770][ T9149]  ? kasan_save_stack+0x42/0x60
[   98.684050][ T9149]  ? kasan_save_stack+0x33/0x60
[   98.685357][ T9149]  ? kasan_save_track+0x14/0x30
[   98.686831][ T9149]  ? __kasan_kmalloc+0xaa/0xb0
[   98.688120][ T9149]  ? xskq_create+0x52/0x1d0
[   98.689298][ T9149]  ? do_sock_setsockopt+0x222/0x480
[   98.690672][ T9149]  ? __sys_setsockopt+0x1a4/0x270
[   98.691981][ T9149]  ? __x64_sys_setsockopt+0xbd/0x160
[   98.693400][ T9149]  __vmalloc_node_range_noprof+0x11a7/0x15a0
[   98.694993][ T9149]  ? xskq_create+0xfb/0x1d0
[   98.696150][ T9149]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   98.697798][ T9149]  ? xskq_create+0xfb/0x1d0
[   98.698962][ T9149]  vmalloc_user_noprof+0x6b/0x90
[   98.700219][ T9149]  ? xskq_create+0xfb/0x1d0
[   98.701475][ T9149]  xskq_create+0xfb/0x1d0
[   98.702624][ T9149]  xsk_setsockopt+0x757/0xa10
[   98.703869][ T9149]  ? __pfx_xsk_setsockopt+0x10/0x10
[   98.705234][ T9149]  ? selinux_socket_setsockopt+0x6a/0x80
[   98.706736][ T9149]  ? __pfx_xsk_setsockopt+0x10/0x10
[   98.708145][ T9149]  do_sock_setsockopt+0x222/0x480
[   98.709451][ T9149]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   98.710905][ T9149]  ? fdget+0x176/0x210
[   98.711979][ T9149]  __sys_setsockopt+0x1a4/0x270
[   98.713258][ T9149]  ? __pfx___sys_setsockopt+0x10/0x10
[   98.714569][ T9149]  ? __sys_socket+0xad/0x260
[   98.715752][ T9149]  ? __pfx___x64_sys_futex+0x10/0x10
[   98.717192][ T9149]  ? rcu_is_watching+0x12/0xc0
[   98.718381][ T9149]  __x64_sys_setsockopt+0xbd/0x160
[   98.719699][ T9149]  ? do_syscall_64+0x91/0x250
[   98.720932][ T9149]  ? lockdep_hardirqs_on+0x7c/0x110
[   98.722224][ T9149]  do_syscall_64+0xcd/0x250
[   98.723409][ T9149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.724987][ T9149] RIP: 0033:0x7fc70597e719
[   98.726096][ T9149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.730861][ T9149] RSP: 002b:00007fc70685b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   98.732986][ T9149] RAX: ffffffffffffffda RBX: 00007fc705b35f80 RCX: 00007fc70597e719
[   98.735003][ T9149] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[   98.737080][ T9149] RBP: 00007fc7059f139e R08: 0000000000000020 R09: 0000000000000000
[   98.739128][ T9149] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000
[   98.741100][ T9149] R13: 0000000000000000 R14: 00007fc705b35f80 R15: 00007ffe82329f08
[   98.743098][ T9149]  </TASK>
[   98.749928][ T9149] Mem-Info:
[   98.750982][ T9149] active_anon:8298 inactive_anon:0 isolated_anon:0
[   98.750982][ T9149]  active_file:4725 inactive_file:50646 isolated_file:0
[   98.750982][ T9149]  unevictable:1777 dirty:43 writeback:0
[   98.750982][ T9149]  slab_reclaimable:12108 slab_unreclaimable:81384
[   98.750982][ T9149]  mapped:21882 shmem:4327 pagetables:783
[   98.750982][ T9149]  sec_pagetables:300 bounce:0
[   98.750982][ T9149]  kernel_misc_reclaimable:0
[   98.750982][ T9149]  free:445722 free_pcp:3724 free_cma:0
[   98.753661][ T5960] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   98.762513][ T9149] Node 0 active_anon:33192kB inactive_anon:0kB active_file:18900kB inactive_file:202508kB unevictable:3572kB isolated(anon):0kB isolated(file):0kB mapped:87528kB dirty:172kB writeback:0kB shmem:13772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13424kB pagetables:3132kB sec_pagetables:1200kB all_unreclaimable? no
[   98.762565][ T9149] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[   98.762603][ T9149] Node 0 
[   98.780130][ T5960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   98.782077][ T1140] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.783760][ T9149] DMA free:15088kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:4kB free_cma:0kB
[   98.792293][ T5960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   98.794268][ T9149] lowmem_reserve[]: 0 1214 0 0 0
[   98.796085][ T9149] Node 0 DMA32 free:182468kB boost:12288kB min:39924kB low:46832kB high:53740kB reserved_highatomic:0KB active_anon:33192kB inactive_anon:0kB active_file:18900kB inactive_file:202508kB unevictable:3572kB writepending:172kB present:2080628kB managed:1272192kB mlocked:36kB bounce:0kB free_pcp:12800kB local_pcp:7156kB free_cma:0kB
[   98.807292][ T5960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   98.809695][ T9149] lowmem_reserve[]: 0 0 0 0 0
[   98.811059][ T5960] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   98.812962][ T9149] Node 1 Normal free:1586220kB boost:0kB min:39600kB low:49500kB high:59400kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:4132kB local_pcp:0kB free_cma:0kB
[   98.815525][ T5960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   98.820461][ T9149] lowmem_reserve[]: 0 0 0 0 0
[   98.823636][ T9149] Node 0 DMA: 16*4kB (U) 8*8kB (U) 9*16kB (U) 13*32kB (U) 11*64kB (U) 13*128kB (U) 7*256kB (U) 8*512kB (U) 4*1024kB (U) 1*2048kB (U) 0*4096kB = 15088kB
[   98.828632][ T9149] Node 0 DMA32: 46*4kB (UME) 323*8kB (UME) 294*16kB (UME) 196*32kB (UME) 748*64kB (UME) 185*128kB (UME) 69*256kB (UM) 51*512kB (UME) 22*1024kB (UM) 7*2048kB (UME) 4*4096kB (UM) = 182320kB
[   98.833608][ T9149] Node 1 Normal: 6*4kB (UM) 11*8kB (UME) 14*16kB (UME) 157*32kB (UME) 77*64kB (UME) 28*128kB (UME) 8*256kB (UME) 7*512kB (UE) 8*1024kB (UE) 9*2048kB (UME) 376*4096kB (UM) = 1586224kB
[   98.838425][ T9149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   98.840979][ T9149] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   98.843766][ T9149] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   98.846342][ T9149] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   98.848991][ T9149] 59705 total pagecache pages
[   98.853272][ T9149] 0 pages in swap cache
[   98.854699][ T9149] Free swap  = 124192kB
[   98.856580][ T9149] Total swap = 124996kB
[   98.858914][ T9149] 1048443 pages RAM
[   98.861136][ T9149] 0 pages HighMem/MovableOnly
[   98.863526][ T9149] 281074 pages reserved
[   98.865803][ T9149] 0 pages cma reserved
[   98.887112][ T1140] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.890880][ T9164] use of bytesused == 0 is deprecated and will be removed in the future,
[   98.893916][ T9164] use the actual size instead.
[   98.920071][ T9166] binder: 9163:9166 ioctl c0306201 0 returned -14
[   98.922266][ T9172] netlink: 60 bytes leftover after parsing attributes in process `syz.3.846'.
[   98.934103][ T9154] chnl_net:caif_netlink_parms(): no params data found
[   98.961391][ T1140] bond0: (slave netdevsim0): Releasing backup interface
[   98.967565][ T1140] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.996957][ T9154] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.999713][ T9154] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.001654][ T9154] bridge_slave_0: entered allmulticast mode
[   99.003745][ T9154] bridge_slave_0: entered promiscuous mode
[   99.006351][ T9154] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.008627][ T9154] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.010589][ T9154] bridge_slave_1: entered allmulticast mode
[   99.012638][ T9154] bridge_slave_1: entered promiscuous mode
[   99.031625][ T9154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.037072][ T9154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.061517][ T9154] team0: Port device team_slave_0 added
[   99.065835][ T9154] team0: Port device team_slave_1 added
[   99.095612][ T9154] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.097527][ T9154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.105850][ T9154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.116087][ T9154] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.118022][ T9154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.125306][ T9186] FAULT_INJECTION: forcing a failure.
[   99.125306][ T9186] name failslab, interval 1, probability 0, space 0, times 0
[   99.127577][ T9154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.128599][ T9186] CPU: 0 UID: 0 PID: 9186 Comm: syz.3.849 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0
[   99.128622][ T9186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   99.128629][ T9186] Call Trace:
[   99.128633][ T9186]  <TASK>
[   99.128637][ T9186]  dump_stack_lvl+0x16c/0x1f0
[   99.128651][ T9186]  should_fail_ex+0x497/0x5b0
[   99.128663][ T9186]  ? fs_reclaim_acquire+0xae/0x150
[   99.128677][ T9186]  should_failslab+0xc2/0x120
[   99.128690][ T9186]  __kmalloc_noprof+0xcb/0x400
[   99.128701][ T9186]  ? __pfx_lock_acquire.part.0+0x10/0x10
[   99.128714][ T9186]  tomoyo_realpath_from_path+0xb9/0x720
[   99.128727][ T9186]  ? tomoyo_path_number_perm+0x232/0x590
[   99.128739][ T9186]  tomoyo_path_number_perm+0x245/0x590
[   99.128748][ T9186]  ? tomoyo_path_number_perm+0x232/0x590
[   99.128758][ T9186]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   99.128778][ T9186]  ? trace_lock_acquire+0x14a/0x1d0
[   99.128792][ T9186]  ? lock_acquire+0x2f/0xb0
[   99.128801][ T9186]  ? __fget_files+0x40/0x3f0
[   99.128816][ T9186]  ? __fget_files+0x244/0x3f0
[   99.128831][ T9186]  security_file_ioctl+0x9b/0x240
[   99.128843][ T9186]  __x64_sys_ioctl+0xbb/0x220
[   99.128857][ T9186]  do_syscall_64+0xcd/0x250
[   99.128867][ T9186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.128881][ T9186] RIP: 0033:0x7f2e2ab7e719
[   99.128891][ T9186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.169738][ T9186] RSP: 002b:00007f2e28ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   99.171901][ T9186] RAX: ffffffffffffffda RBX: 00007f2e2ad35f80 RCX: 00007f2e2ab7e719
[   99.173951][ T9186] RDX: 0000000020000200 RSI: 000000004038ae7a RDI: 0000000000000004
[   99.176014][ T9186] RBP: 00007f2e28ff6090 R08: 0000000000000000 R09: 0000000000000000
[   99.178099][ T9186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.180150][ T9186] R13: 0000000000000000 R14: 00007f2e2ad35f80 R15: 00007ffc12982ef8
[   99.182209][ T9186]  </TASK>
[   99.184550][ T9186] ERROR: Out of memory at tomoyo_realpath_from_path.
[   99.199676][ T1140] bridge_slave_1: left allmulticast mode
[   99.201303][ T1140] bridge_slave_1: left promiscuous mode
[   99.202779][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.205609][ T1140] bridge_slave_0: left allmulticast mode
[   99.207107][ T1140] bridge_slave_0: left promiscuous mode
[   99.209680][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.464076][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.468156][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.471597][ T1140] bond0 (unregistering): Released all slaves
[   99.476732][ T9154] hsr_slave_0: entered promiscuous mode
[   99.478905][ T9154] hsr_slave_1: entered promiscuous mode
[   99.480625][ T9154] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.482690][ T9154] Cannot create hsr debugfs directory
[   99.524108][ T9199] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.851'.
[   99.526574][ T9199] openvswitch: netlink: Multiple metadata blocks provided
[   99.632412][ T9154] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   99.644813][ T9154] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   99.648962][ T9154] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   99.653002][ T9154] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   99.709730][ T9154] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.717768][ T9154] 8021q: adding VLAN 0 to HW filter on device team0
[   99.721731][ T7184] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.723737][ T7184] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.736413][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.738335][ T7184] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.759439][ T9154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.790490][ T1140] hsr_slave_0: left promiscuous mode
[   99.792613][ T1140] hsr_slave_1: left promiscuous mode
[   99.795038][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.797125][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.809043][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.811089][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.839598][ T1140] veth1_macvtap: left promiscuous mode
[   99.841166][ T1140] veth0_macvtap: left promiscuous mode
[   99.842667][ T1140] veth1_vlan: left promiscuous mode
[   99.844069][ T1140] veth0_vlan: left promiscuous mode
[  100.498252][ T9228] netlink: 60 bytes leftover after parsing attributes in process `syz.3.855'.
[  100.533886][ T1140] team0 (unregistering): Port device team_slave_1 removed
[  100.612908][ T1140] team0 (unregistering): Port device team_slave_0 removed
[  100.729420][ T9233] netlink: 'syz.6.857': attribute type 11 has an invalid length.
[  100.866475][ T9238] FAULT_INJECTION: forcing a failure.
[  100.866475][ T9238] name failslab, interval 1, probability 0, space 0, times 0
[  100.870043][ T9238] CPU: 0 UID: 0 PID: 9238 Comm: syz.6.859 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0
[  100.872821][ T9238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  100.875580][ T9238] Call Trace:
[  100.876431][ T9238]  <TASK>
[  100.877178][ T9238]  dump_stack_lvl+0x16c/0x1f0
[  100.878386][ T9238]  should_fail_ex+0x497/0x5b0
[  100.879581][ T9238]  ? fs_reclaim_acquire+0xae/0x150
[  100.880827][ T9238]  should_failslab+0xc2/0x120
[  100.882028][ T9238]  __kmalloc_noprof+0xcb/0x400
[  100.883279][ T9238]  tomoyo_encode2+0x100/0x3e0
[  100.884474][ T9238]  tomoyo_encode+0x29/0x50
[  100.885590][ T9238]  tomoyo_realpath_from_path+0x19d/0x720
[  100.887005][ T9238]  ? tomoyo_path_number_perm+0x232/0x590
[  100.888523][ T9238]  tomoyo_path_number_perm+0x245/0x590
[  100.889896][ T9238]  ? tomoyo_path_number_perm+0x232/0x590
[  100.891363][ T9238]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  100.892936][ T9238]  ? trace_lock_acquire+0x14a/0x1d0
[  100.894303][ T9238]  ? lock_acquire+0x2f/0xb0
[  100.895472][ T9238]  ? __fget_files+0x40/0x3f0
[  100.896661][ T9238]  ? __fget_files+0x244/0x3f0
[  100.897848][ T9238]  security_file_ioctl+0x9b/0x240
[  100.899116][ T9238]  __x64_sys_ioctl+0xbb/0x220
[  100.900306][ T9238]  do_syscall_64+0xcd/0x250
[  100.901454][ T9238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.902991][ T9238] RIP: 0033:0x7fc70597e719
[  100.904148][ T9238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.908883][ T9238] RSP: 002b:00007fc70685b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  100.910966][ T9238] RAX: ffffffffffffffda RBX: 00007fc705b35f80 RCX: 00007fc70597e719
[  100.912937][ T9238] RDX: 0000000020000200 RSI: 000000004038ae7a RDI: 0000000000000004
[  100.914931][ T9238] RBP: 00007fc70685b090 R08: 0000000000000000 R09: 0000000000000000
[  100.916906][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.918868][ T9238] R13: 0000000000000000 R14: 00007fc705b35f80 R15: 00007ffe82329f08
[  100.920901][ T9238]  </TASK>
[  100.930344][ T5950] Bluetooth: hci0: command tx timeout
[  100.930724][ T9238] ERROR: Out of memory at tomoyo_realpath_from_path.
[  100.969053][ T9241] Bluetooth: (null): Too short H5 packet
[  101.044029][ T9244] binder: BINDER_SET_CONTEXT_MGR already set
[  101.051062][ T9244] binder: 9243:9244 ioctl 4018620d 20000040 returned -16
[  101.415147][ T9259] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  101.424303][ T9154] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.536635][ T9281] FAULT_INJECTION: forcing a failure.
[  101.536635][ T9281] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  101.541483][ T9281] CPU: 2 UID: 0 PID: 9281 Comm: syz.2.868 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0
[  101.544388][ T9281] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  101.547055][ T9281] Call Trace:
[  101.547895][ T9281]  <TASK>
[  101.548661][ T9281]  dump_stack_lvl+0x16c/0x1f0
[  101.549901][ T9281]  should_fail_ex+0x497/0x5b0
[  101.550431][ T9154] veth0_vlan: entered promiscuous mode
[  101.551138][ T9281]  _copy_from_user+0x2e/0xd0
[  101.551154][ T9281]  kvm_arch_vm_ioctl+0xa8f/0x1d10
[  101.551169][ T9281]  ? __pfx_mark_lock+0x10/0x10
[  101.551179][ T9281]  ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[  101.555693][ T9154] veth1_vlan: entered promiscuous mode
[  101.557069][ T9281]  ? hlock_class+0x4e/0x130
[  101.561112][ T9281]  ? __lock_acquire+0xbdd/0x3ce0
[  101.562383][ T9281]  ? hlock_class+0x4e/0x130
[  101.563645][ T9281]  ? __lock_acquire+0xbdd/0x3ce0
[  101.564962][ T9281]  ? hlock_class+0x4e/0x130
[  101.566161][ T9281]  ? __lock_acquire+0xbdd/0x3ce0
[  101.567478][ T9281]  ? __pfx___lock_acquire+0x10/0x10
[  101.568845][ T9281]  ? find_held_lock+0x2d/0x110
[  101.570125][ T9281]  ? lock_acquire+0x2f/0xb0
[  101.571343][ T9281]  ? is_bpf_text_address+0x30/0x1a0
[  101.572723][ T9281]  ? bpf_ksym_find+0x127/0x1c0
[  101.574760][ T9281]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  101.576653][ T9281]  ? is_bpf_text_address+0x94/0x1a0
[  101.578052][ T9281]  ? kernel_text_address+0x8d/0x100
[  101.579804][ T9281]  ? __kernel_text_address+0xd/0x40
[  101.582289][ T9281]  ? unwind_get_return_address+0x59/0xa0
[  101.585041][ T9281]  ? arch_stack_walk+0xa7/0x100
[  101.587457][ T9281]  ? stack_trace_save+0x95/0xd0
[  101.589684][ T9281]  ? __pfx_stack_trace_save+0x10/0x10
[  101.592351][ T9281]  ? __pfx_mark_lock+0x10/0x10
[  101.594576][ T9281]  ? stack_depot_save_flags+0x28/0x8f0
[  101.596304][ T9281]  kvm_vm_ioctl+0x1a6f/0x3de0
[  101.597552][ T9281]  ? security_file_ioctl+0x9b/0x240
[  101.599204][ T9281]  ? do_syscall_64+0xcd/0x250
[  101.600133][ T9154] veth0_macvtap: entered promiscuous mode
[  101.600421][ T9281]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.600440][ T9281]  ? hlock_class+0x4e/0x130
[  101.600452][ T9281]  ? mark_lock+0xb5/0xc60
[  101.603572][ T9154] veth1_macvtap: entered promiscuous mode
[  101.604155][ T9281]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  101.604172][ T9281]  ? __pfx_mark_lock+0x10/0x10
[  101.604190][ T9281]  ? find_held_lock+0x2d/0x110
[  101.612147][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.612255][ T9281]  ? tomoyo_path_number_perm+0x292/0x590
[  101.612510][ T9289] capability: warning: `syz.3.870' uses 32-bit capabilities (legacy support in use)
[  101.615012][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.616418][ T9281]  ? __pfx_lock_release+0x10/0x10
[  101.616436][ T9281]  ? tomoyo_path_number_perm+0x467/0x590
[  101.616449][ T9281]  ? tomoyo_path_number_perm+0x190/0x590
[  101.618949][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.621509][ T9281]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  101.621525][ T9281]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  101.621542][ T9281]  ? do_vfs_ioctl+0x513/0x1990
[  101.622934][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.625568][ T9281]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  101.625600][ T9281]  ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460
[  101.627246][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.632035][ T9281]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  101.632069][ T9281]  ? trace_lock_acquire+0x14a/0x1d0
[  101.632098][ T9281]  ? selinux_file_ioctl+0x180/0x270
[  101.634518][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.636520][ T9281]  ? selinux_file_ioctl+0xb4/0x270
[  101.636550][ T9281]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  101.637874][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.642440][ T9281]  __x64_sys_ioctl+0x18f/0x220
[  101.642475][ T9281]  do_syscall_64+0xcd/0x250
[  101.642495][ T9281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.644349][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.647004][ T9281] RIP: 0033:0x7f54ce97e719
[  101.647026][ T9281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.647042][ T9281] RSP: 002b:00007f54cf7c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  101.654702][ T9154] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.655953][ T9281] RAX: ffffffffffffffda RBX: 00007f54ceb35f80 RCX: 00007f54ce97e719
[  101.655965][ T9281] RDX: 0000000020000200 RSI: 000000004038ae7a RDI: 0000000000000004
[  101.655971][ T9281] RBP: 00007f54cf7c3090 R08: 0000000000000000 R09: 0000000000000000
[  101.655977][ T9281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  101.655984][ T9281] R13: 0000000000000000 R14: 00007f54ceb35f80 R15: 00007ffcb64d1c08
[  101.660257][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.661323][ T9281]  </TASK>
[  101.696376][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.699159][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.701972][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.704537][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.707225][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.709909][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.712590][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.716043][ T9154] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.722539][ T9154] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.724833][ T9154] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.727087][ T9154] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.729611][ T9154] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.781280][ T7680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.783378][ T7680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.794990][ T7177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.797051][ T7177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.840020][ T9301] netlink: 60 bytes leftover after parsing attributes in process `syz.3.871'.
[  102.054958][ T9336] veth1_macvtap: mtu less than device minimum
[  102.138654][ T9345] netlink: 72 bytes leftover after parsing attributes in process `syz.3.876'.
[  102.168067][ T5988] usb 12-1: new full-speed USB device number 2 using dummy_hcd
[  102.175764][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.875'.
[  102.203689][ T9353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.878'.
[  102.267850][   T39] kauditd_printk_skb: 6 callbacks suppressed
[  102.267861][   T39] audit: type=1400 audit(1730996981.831:738): avc:  denied  { mounton } for  pid=9352 comm="syz.2.878" path="/205/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  102.271282][ T9353] fuse: Bad value for 'fd'
[  102.388317][   T30] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  102.514129][ T9371] netlink: 60 bytes leftover after parsing attributes in process `syz.6.883'.
[  102.522374][ T9373] FAULT_INJECTION: forcing a failure.
[  102.522374][ T9373] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  102.525747][ T9373] CPU: 0 UID: 0 PID: 9373 Comm: syz.2.884 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0
[  102.528395][ T9373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  102.531092][ T9373] Call Trace:
[  102.531949][ T9373]  <TASK>
[  102.532690][ T9373]  dump_stack_lvl+0x16c/0x1f0
[  102.533900][ T9373]  should_fail_ex+0x497/0x5b0
[  102.535103][ T9373]  _copy_to_user+0x32/0xd0
[  102.536266][ T9373]  simple_read_from_buffer+0xd0/0x160
[  102.537638][ T9373]  proc_fail_nth_read+0x198/0x270
[  102.538919][ T9373]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  102.540310][ T9373]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  102.541795][ T9373]  vfs_read+0x1df/0xbe0
[  102.543081][ T9373]  ? __fget_files+0x23a/0x3f0
[  102.544339][ T9373]  ? fdget_pos+0x24c/0x360
[  102.545451][ T9373]  ? __pfx_lock_release+0x10/0x10
[  102.546732][ T9373]  ? trace_lock_acquire+0x14a/0x1d0
[  102.548054][ T9373]  ? __pfx_vfs_read+0x10/0x10
[  102.549297][ T9373]  ? __pfx___mutex_lock+0x10/0x10
[  102.550620][ T9373]  ? __fget_files+0x244/0x3f0
[  102.551810][ T9373]  ksys_read+0x12f/0x260
[  102.552898][ T9373]  ? __pfx_ksys_read+0x10/0x10
[  102.554137][ T9373]  do_syscall_64+0xcd/0x250
[  102.555327][ T9373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.556806][ T9373] RIP: 0033:0x7f54ce97d15c
[  102.557953][ T9373] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  102.558229][   T30] usb 8-1: Using ep0 maxpacket: 16
[  102.562875][ T9373] RSP: 002b:00007f54cf7c3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  102.562915][ T9373] RAX: ffffffffffffffda RBX: 00007f54ceb35f80 RCX: 00007f54ce97d15c
[  102.562922][ T9373] RDX: 000000000000000f RSI: 00007f54cf7c30a0 RDI: 0000000000000005
[  102.562928][ T9373] RBP: 00007f54cf7c3090 R08: 0000000000000000 R09: 0000000000000000
[  102.562937][ T9373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.562946][ T9373] R13: 0000000000000000 R14: 00007f54ceb35f80 R15: 00007ffcb64d1c08
[  102.562965][ T9373]  </TASK>
[  102.580443][   T30] usb 8-1: config 0 has an invalid interface number: 161 but max is 0
[  102.582597][   T30] usb 8-1: config 0 has no interface number 0
[  102.584222][   T30] usb 8-1: config 0 interface 161 has no altsetting 0
[  102.587596][   T30] usb 8-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01
[  102.590206][   T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.591261][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.592601][   T30] usb 8-1: Product: syz
[  102.595806][   T30] usb 8-1: Manufacturer: syz
[  102.596299][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.596974][   T30] usb 8-1: SerialNumber: syz
[  102.601280][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.602823][   T30] usb 8-1: config 0 descriptor??
[  102.605666][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.608005][   T39] audit: type=1400 audit(1730996982.171:739): avc:  denied  { sys_chroot } for  pid=9379 comm="dhcpcd" capability=18  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  102.608318][   T30] ums-jumpshot 8-1:0.161: USB Mass Storage device detected
[  102.613252][   T39] audit: type=1400 audit(1730996982.171:740): avc:  denied  { setgid } for  pid=9379 comm="dhcpcd" capability=6  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  102.619629][   T30] ums-jumpshot 8-1:0.161: Quirks match for vid 05dc pid 0001: 2
[  102.621426][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.624646][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.627140][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.629977][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.632441][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.635441][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.637917][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.641092][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.643585][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.646015][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.648914][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.651378][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.653872][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.656346][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.660569][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.663067][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.665782][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.669860][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.672455][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.675002][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.677498][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.680752][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.683397][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.686046][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.689688][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.692284][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.694846][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.697664][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.700451][ T9377] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  102.817650][ T5950] Bluetooth: hci3: Unknown advertising packet type: 0x16
[  102.817693][ T5950] Bluetooth: hci3: Unknown advertising packet type: 0x1c
[  102.820459][ T5950] Bluetooth: hci3: Unknown advertising packet type: 0x34
[  102.822324][ T5950] Bluetooth: hci3: Malformed LE Event: 0x0d
[  102.959519][ T5950] Bluetooth: hci0: command tx timeout
[  102.968191][ T1018] usb 11-1: new high-speed USB device number 5 using dummy_hcd
[  103.002911][ T5987] usb 8-1: USB disconnect, device number 11
[  103.080585][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'.
[  103.099851][ T9405] /dev/sr0: Can't open blockdev
[  103.123036][ T1018] usb 11-1: Using ep0 maxpacket: 8
[  103.126721][ T1018] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  103.129630][ T1018] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  103.132127][ T1018] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  103.134893][ T1018] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  103.139985][ T1018] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  103.142558][ T1018] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.350893][ T1018] usb 11-1: GET_CAPABILITIES returned 0
[  103.352431][ T1018] usbtmc 11-1:16.0: can't read capabilities
[  103.354952][ T9432] netlink: 60 bytes leftover after parsing attributes in process `syz.3.899'.
[  103.555709][ T9388] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  103.557649][ T9388] overlayfs: failed to set xattr on upper
[  103.559491][ T9388] overlayfs: ...falling back to redirect_dir=nofollow.
[  103.561462][ T9388] overlayfs: ...falling back to metacopy=off.
[  103.563080][ T9388] overlayfs: ...falling back to index=off.
[  103.564785][ T9388] overlayfs: ...falling back to uuid=null.
[  103.569715][ T1327] usb 11-1: USB disconnect, device number 5
[  103.615488][   T39] audit: type=1400 audit(1730996983.181:741): avc:  denied  { cmd } for  pid=9440 comm="syz.3.901" path="socket:[35468]" dev="sockfs" ino=35468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  103.937495][ T9474] __nla_validate_parse: 1 callbacks suppressed
[  103.937508][ T9474] netlink: 60 bytes leftover after parsing attributes in process `syz.3.909'.
[  103.987862][ T9479] tmpfs: Unknown parameter 'usrquotaÇÂ@'
[  104.208038][   T39] audit: type=1400 audit(1730996983.751:742): avc:  denied  { map } for  pid=9499 comm="syz.6.918" path="socket:[36909]" dev="sockfs" ino=36909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  104.250792][ T9503] netlink: 60 bytes leftover after parsing attributes in process `syz.6.919'.
[  104.501499][ T9505] /dev/sr0: Can't open blockdev
[  105.038167][ T5950] Bluetooth: hci0: command tx timeout
[  105.274621][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.921'.
[  105.450068][ T9512] sp0: Synchronizing with TNC
[  105.455924][ T9514] sp0: Found TNC
[  105.627749][ T9526] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.655047][ T9534] binder: 9533:9534 ioctl c0306201 200002c0 returned -14
[  105.715477][ T9544] netlink: 60 bytes leftover after parsing attributes in process `syz.6.930'.
[  105.754700][ T1327] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  105.836653][ T9561] netlink: 76 bytes leftover after parsing attributes in process `syz.7.936'.
[  105.839049][ T9560] bridge_slave_0: left allmulticast mode
[  105.839064][ T9560] bridge_slave_0: left promiscuous mode
[  105.839134][ T9560] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.850002][ T9560] bridge_slave_1: left allmulticast mode
[  105.851457][ T9560] bridge_slave_1: left promiscuous mode
[  105.851543][ T9560] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.867070][ T9560] bond0: (slave bond_slave_0): Releasing backup interface
[  105.875174][ T9560] bond0: (slave bond_slave_1): Releasing backup interface
[  105.894502][ T9560] team0: Port device team_slave_0 removed
[  105.901244][ T9560] team0: Port device team_slave_1 removed
[  105.903088][ T9560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.905128][ T9560] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.907735][ T9560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.908417][ T1327] usb 7-1: Using ep0 maxpacket: 32
[  105.910076][ T9560] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.912260][ T1327] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  105.915035][ T1327] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  105.917816][ T1327] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  105.922341][ T9562] vlan0: entered promiscuous mode
[  105.924690][ T1327] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  105.928245][ T1327] usb 7-1: config 0 interface 0 has no altsetting 0
[  105.929963][ T9562] team0: Port device vlan0 added
[  105.933746][ T1327] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  105.936407][ T1327] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  105.938856][ T1327] usb 7-1: Product: syz
[  105.939957][ T1327] usb 7-1: Manufacturer: syz
[  105.941105][ T1327] usb 7-1: SerialNumber: syz
[  105.944766][ T1327] usb 7-1: config 0 descriptor??
[  105.947434][ T1327] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  105.955137][ T1327] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  105.956022][ T9568] overlay: ./bus is not a directory
[  105.977001][   T39] audit: type=1400 audit(1730996985.541:743): avc:  denied  { accept } for  pid=9567 comm="syz.7.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  105.998717][ T9557] /dev/sr0: Can't open blockdev
[  106.050115][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.939'.
[  106.052366][ T9574] netlink: 'syz.3.939': attribute type 5 has an invalid length.
[  106.059915][ T9574] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.062406][ T9574] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.064623][ T9574] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.066751][ T9574] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.070895][ T9574] vxlan0: entered promiscuous mode
[  106.080113][ T9574] netlink: 'syz.3.939': attribute type 21 has an invalid length.
[  106.195554][   T39] audit: type=1400 audit(1730996985.761:744): avc:  denied  { getopt } for  pid=9519 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  106.783703][ T9583] netlink: 60 bytes leftover after parsing attributes in process `syz.6.941'.
[  106.820142][ T9586] Bluetooth: MGMT ver 1.23
[  106.988531][ T9605] netlink: 60 bytes leftover after parsing attributes in process `syz.3.950'.
[  107.128058][ T5960] Bluetooth: hci0: command tx timeout
[  107.153129][ T9620] input: syz1 as /devices/virtual/input/input18
[  107.199484][ T9602] /dev/sr0: Can't open blockdev
[  107.217822][ T9629] binder: 9627:9629 ioctl c0306201 20000680 returned -22
[  107.253278][ T9632] netlink: 60 bytes leftover after parsing attributes in process `syz.3.959'.
[  107.304318][ T9636] ip6t_srh: unknown srh invflags 7863
[  107.342042][ T9639] fuse: Bad value for 'group_id'
[  107.343404][ T9639] fuse: Bad value for 'group_id'
[  107.399658][ T9640] netlink: 666 bytes leftover after parsing attributes in process `syz.3.962'.
[  108.110366][ T9654] Bluetooth: hci5: Frame reassembly failed (-84)
[  108.112940][   T39] audit: type=1400 audit(1730996987.681:745): avc:  denied  { create } for  pid=9653 comm="syz.6.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  108.114930][ T7171] Bluetooth: hci5: Frame reassembly failed (-84)
[  108.228999][ T9661] netlink: 'syz.3.967': attribute type 10 has an invalid length.
[  108.232925][ T9661] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  108.268257][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  108.516430][   T73] usb 7-1: USB disconnect, device number 14
[  108.523468][   T73] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  108.608654][ T9675] /dev/sr0: Can't open blockdev
[  108.638559][   T39] audit: type=1400 audit(1730996988.211:746): avc:  denied  { attach_queue } for  pid=9680 comm="syz.2.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  108.960021][   T39] audit: type=1400 audit(1730996988.531:747): avc:  denied  { watch_sb } for  pid=9694 comm="syz.7.976" path="/26" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  109.059018][ T9703] __nla_validate_parse: 1 callbacks suppressed
[  109.059028][ T9703] netlink: 60 bytes leftover after parsing attributes in process `syz.7.978'.
[  109.182974][ T9706] netlink: 59 bytes leftover after parsing attributes in process `syz.7.979'.
[  109.193092][ T9705] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.979'.
[  109.195445][ T9705] openvswitch: netlink: Key type 29 is not supported
[  109.197859][   T39] audit: type=1400 audit(1730996988.761:748): avc:  denied  { setopt } for  pid=9704 comm="syz.7.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  109.198966][ T9705] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  109.203039][   T39] audit: type=1400 audit(1730996988.771:749): avc:  denied  { connect } for  pid=9704 comm="syz.7.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  109.208135][ T5961] Bluetooth: hci0: command 0x0411 tx timeout
[  109.370085][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.7.981'.
[  109.492758][ T9719] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input20
[  109.591314][ T9729] netlink: 'syz.7.986': attribute type 5 has an invalid length.
[  109.594104][ T9729] netlink: 'syz.7.986': attribute type 10 has an invalid length.
[  109.599581][ T9729] team0: Device ipvlan1 failed to register rx_handler
[  109.607352][ T9729] block nbd7: NBD_DISCONNECT
[  109.645830][ T9731] netlink: 60 bytes leftover after parsing attributes in process `syz.3.987'.
[  109.718070][    T8] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  109.888069][    T8] usb 7-1: Using ep0 maxpacket: 8
[  109.890705][    T8] usb 7-1: config 243 has an invalid interface number: 205 but max is 0
[  109.892846][    T8] usb 7-1: config 243 has no interface number 0
[  109.894492][    T8] usb 7-1: config 243 interface 205 altsetting 71 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  109.897356][    T8] usb 7-1: config 243 interface 205 altsetting 71 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  109.900909][    T8] usb 7-1: config 243 interface 205 has no altsetting 0
[  109.903501][    T8] usb 7-1: New USB device found, idVendor=0bb4, idProduct=0a95, bcdDevice=6b.87
[  109.906541][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.158127][ T5950] Bluetooth: hci5: command 0xfc11 tx timeout
[  110.158185][ T5960] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  110.357897][ T9753] kvm: kvm [9750]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111
[  110.403398][ T9756] 9p: Unknown uid 00000000004294967295
[  110.409845][ T9751] /dev/sr0: Can't open blockdev
[  110.688125][ T5308] usb 12-1: new high-speed USB device number 3 using dummy_hcd
[  110.794550][    T8] usb 7-1: string descriptor 0 read error: -71
[  110.808069][    T8] usb 7-1: USB disconnect, device number 15
[  110.818090][ T5308] usb 12-1: device descriptor read/64, error -71
[  110.995440][ T9774] netlink: 60 bytes leftover after parsing attributes in process `syz.6.997'.
[  111.031777][ T9770] netlink: 48 bytes leftover after parsing attributes in process `syz.2.998'.
[  111.034333][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'.
[  111.058877][ T5308] usb 12-1: new high-speed USB device number 4 using dummy_hcd
[  111.062228][   T39] audit: type=1326 audit(1730996990.631:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.2.1001" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ce97e719 code=0x7ffc0000
[  111.070255][   T39] audit: type=1326 audit(1730996990.631:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.2.1001" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ce97e719 code=0x7ffc0000
[  111.078762][   T39] audit: type=1326 audit(1730996990.631:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.2.1001" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54ce97d0b0 code=0x7ffc0000
[  111.086390][   T39] audit: type=1326 audit(1730996990.631:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.2.1001" exe="/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f54ce97ff47 code=0x7ffc0000
[  111.094634][   T39] audit: type=1326 audit(1730996990.631:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.2.1001" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54ce97e719 code=0x7ffc0000
[  111.142706][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'.
[  111.145792][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1002'.
[  111.228098][ T5308] usb 12-1: device descriptor read/64, error -71
[  111.258041][ T9795] netlink: 'syz.2.1007': attribute type 10 has an invalid length.
[  111.278071][ T5960] Bluetooth: hci0: command 0x0411 tx timeout
[  111.339236][ T5308] usb usb12-port1: attempt power cycle
[  111.443116][ T9798] kvm: kvm [9791]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111
[  111.461117][ T9792] /dev/sr0: Can't open blockdev
[  111.688104][ T5308] usb 12-1: new high-speed USB device number 5 using dummy_hcd
[  111.720069][ T5308] usb 12-1: device descriptor read/8, error -71
[  111.978402][ T5308] usb 12-1: new high-speed USB device number 6 using dummy_hcd
[  111.998562][ T5308] usb 12-1: device descriptor read/8, error -71
[  112.108341][ T5308] usb usb12-port1: unable to enumerate USB device
[  112.223850][ T9870] netlink: 'syz.3.1026': attribute type 1 has an invalid length.
[  112.250953][ T9872] i2c i2c-1: Invalid block write size 34
[  112.278231][    T8] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  112.408046][    T8] usb 7-1: device descriptor read/64, error -71
[  112.648102][    T8] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  112.669444][ T9904] openvswitch: netlink: Unknown key attributes 2
[  112.725906][ T9902] kvm: kvm [9899]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111
[  112.748753][ T9900] /dev/sr0: Can't open blockdev
[  112.778091][    T8] usb 7-1: device descriptor read/64, error -71
[  112.802777][ T9911] netfs: Couldn't get user pages (rc=-14)
[  112.888274][    T8] usb usb7-port1: attempt power cycle
[  113.111101][ T9915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=9915 comm=syz.3.1038
[  113.227334][ T9924] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  113.228140][    T8] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  113.229560][ T9924] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  113.235831][ T9924] vhci_hcd vhci_hcd.0: Device attached
[  113.240400][ T9924] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6)
[  113.242632][ T9924] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  113.246340][ T9924] vhci_hcd vhci_hcd.0: Device attached
[  113.252179][    T8] usb 7-1: device descriptor read/8, error -71
[  113.253929][   T39] kauditd_printk_skb: 24 callbacks suppressed
[  113.253937][   T39] audit: type=1400 audit(1731062757.817:779): avc:  denied  { ioctl } for  pid=9923 comm="syz.3.1041" path="socket:[38893]" dev="sockfs" ino=38893 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  113.254215][ T9924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.268608][ T9924] batadv_slave_0: entered promiscuous mode
[  113.286275][ T9927] vhci_hcd: connection closed
[  113.286374][ T9925] vhci_hcd: connection closed
[  113.286473][ T7681] vhci_hcd: stop threads
[  113.291723][ T7681] vhci_hcd: release socket
[  113.292884][ T7681] vhci_hcd: disconnect device
[  113.298758][ T7681] vhci_hcd: stop threads
[  113.300357][ T7681] vhci_hcd: release socket
[  113.301500][   T43] page: refcount:2 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b147
[  113.301830][ T7681] vhci_hcd: disconnect device
[  113.301855][ T7681] list_add corruption. next->prev should be prev (ffffe8fefc933260), but was ffff888107e74800. (next=ffff888030cbf800).
[  113.304095][   T43] flags: 0xfff00000010001(locked|reclaim|node=0|zone=1|lastcpupid=0x7ff)
[  113.304113][   T43] raw: 00fff00000010001 ffffc900009b7608 ffffc900009b7608 ffffffff8b7d6b82
[  113.304123][   T43] raw: 0000000000000000 0000000000000000 00000002ffffffff 0000000000000000
[  113.304128][   T43] page dumped because: VM_BUG_ON_PAGE(!((__builtin_constant_p(PAGE_CLAIMED) && __builtin_constant_p((uintptr_t)(&page->private) != (uintptr_t)((void *)0)) && (uintptr_t)(&page->private) != (uintptr_t)((void *)0) && __builtin_constant_p(*(const unsigned long *)(&page->private))) ? const_test_bit(PAGE_CLAIMED, &page->private) : _test_bit(PAGE_CLAIMED, &page->private)))
[  113.304141][   T43] page_owner tracks the page as allocated
[  113.304146][   T43] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12800(GFP_NOWAIT|__GFP_NORETRY), pid 9900, tgid 9899 (syz.6.1034), ts 113065798435, free_ts 79870071888
[  113.304161][   T43]  post_alloc_hook+0x2d1/0x350
[  113.306355][ T7681] ------------[ cut here ]------------
[  113.310614][   T43]  get_page_from_freelist+0xf7d/0x2d10
[  113.311951][ T7681] kernel BUG at lib/list_debug.c:29!
[  113.311970][ T7681] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  113.314120][   T43]  __alloc_pages_noprof+0x223/0x25a0
[  113.317011][ T7681] CPU: 3 UID: 0 PID: 7681 Comm: kworker/u32:36 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0
[  113.317029][ T7681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  113.317040][ T7681] Workqueue: zswap1 compact_page_work
[  113.326310][   T43]  alloc_pages_mpol_noprof+0x2c9/0x610
[  113.327260][ T7681] 
[  113.327268][ T7681] RIP: 0010:__list_add_valid_or_report+0xa9/0x100
[  113.332073][   T43]  z3fold_zpool_malloc+0x853/0x14f0
[  113.333139][ T7681] Code: b4 d1 8b e8 b9 6f d7 fc 90 0f 0b 48 c7 c7 a0 b4 d1 8b e8 aa 6f d7 fc 90 0f 0b 48 89 d9 48 c7 c7 00 b5 d1 8b e8 98 6f d7 fc 90 <0f> 0b 48 89 f1 48 c7 c7 80 b5 d1 8b 48 89 de e8 83 6f d7 fc 90 0f
[  113.333157][ T7681] RSP: 0018:ffffc90003f4fbf8 EFLAGS: 00010286
[  113.334552][   T43]  zswap_store+0xda1/0x1fe0
[  113.336291][ T7681] 
[  113.336298][ T7681] RAX: 0000000000000075 RBX: ffff888030cbf800 RCX: ffffffff816d3e59
[  113.336311][ T7681] RDX: 0000000000000000 RSI: ffffffff816de776 RDI: 0000000000000005
[  113.336321][ T7681] RBP: ffff88802b147000 R08: 0000000000000005 R09: 0000000000000000
[  113.337666][   T43]  swap_writepage+0x3b6/0x990
[  113.340770][ T7681] R10: 0000000080000002 R11: 0000000000000272 R12: ffff888030cbf800
[  113.340788][ T7681] R13: ffff88802b1470b0 R14: ffffea0000ac51c0 R15: ffff88802b147008
[  113.340799][ T7681] FS:  0000000000000000(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000
[  113.340826][ T7681] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  113.340840][ T7681] CR2: 000000110c3906c4 CR3: 0000000062c00000 CR4: 0000000000352ef0
[  113.343728][   T43]  shmem_writepage+0xf8f/0x14b0
[  113.346692][ T7681] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  113.346706][ T7681] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  113.346717][ T7681] Call Trace:
[  113.346722][ T7681]  <TASK>
[  113.346729][ T7681]  ? die+0x31/0x80
[  113.346746][ T7681]  ? do_trap+0x232/0x430
[  113.346762][ T7681]  ? __list_add_valid_or_report+0xa9/0x100
[  113.346786][ T7681]  ? __list_add_valid_or_report+0xa9/0x100
[  113.346805][ T7681]  ? do_error_trap+0xf4/0x230
[  113.350381][   T43]  pageout+0x3b2/0xaa0
[  113.351258][ T7681]  ? __list_add_valid_or_report+0xa9/0x100
[  113.352724][   T43]  shrink_folio_list+0x3025/0x42d0
[  113.353473][ T7681]  ? handle_invalid_op+0x34/0x40
[  113.355134][   T43]  reclaim_folio_list+0xd8/0x3a0
[  113.356788][ T7681]  ? __list_add_valid_or_report+0xa9/0x100
[  113.356816][ T7681]  ? exc_invalid_op+0x2e/0x50
[  113.361897][ T5960] Bluetooth: hci0: command 0x0411 tx timeout
[  113.363718][ T7681]  ? asm_exc_invalid_op+0x1a/0x20
[  113.363748][ T7681]  ? __wake_up_klogd.part.0+0x99/0xf0
[  113.366044][   T43]  reclaim_pages+0x481/0x650
[  113.368344][ T7681]  ? vprintk+0x86/0xa0
[  113.368368][ T7681]  ? __list_add_valid_or_report+0xa9/0x100
[  113.368389][ T7681]  ? __list_add_valid_or_report+0xa8/0x100
[  113.370873][   T43]  madvise_cold_or_pageout_pte_range+0x13ae/0x20d0
[  113.372987][ T7681]  do_compact_page+0x10f2/0x27b0
[  113.373014][ T7681]  ? lock_acquire+0x2f/0xb0
[  113.374232][   T43]  walk_pgd_range+0xb8e/0x18d0
[  113.376778][ T7681]  ? process_one_work+0x921/0x1ba0
[  113.376800][ T7681]  process_one_work+0x9c5/0x1ba0
[  113.376817][ T7681]  ? __pfx_event_handler+0x10/0x10
[  113.379310][   T43]  __walk_page_range+0x637/0x770
[  113.381850][ T7681]  ? __pfx_process_one_work+0x10/0x10
[  113.383477][   T43]  walk_page_range+0x55a/0x940
[  113.386091][ T7681]  ? assign_work+0x1a0/0x250
[  113.386126][ T7681]  worker_thread+0x6c8/0xf00
[  113.387425][   T43] page last free pid 5877 tgid 5877 stack trace:
[  113.390078][ T7681]  ? __kthread_parkme+0x148/0x220
[  113.390101][ T7681]  ? __pfx_worker_thread+0x10/0x10
[  113.390115][ T7681]  kthread+0x2c1/0x3a0
[  113.390132][ T7681]  ? _raw_spin_unlock_irq+0x23/0x50
[  113.390153][ T7681]  ? __pfx_kthread+0x10/0x10
[  113.390172][ T7681]  ret_from_fork+0x45/0x80
[  113.390185][ T7681]  ? __pfx_kthread+0x10/0x10
[  113.392713][   T43]  free_unref_page+0x5f4/0xdc0
[  113.393359][ T7681]  ret_from_fork_asm+0x1a/0x30
[  113.394127][   T43]  qlist_free_all+0x4e/0x120
[  113.395377][ T7681]  </TASK>
[  113.396407][   T43]  kasan_quarantine_reduce+0x192/0x1e0
[  113.398343][ T7681] Modules linked in:
[  113.398617][ T7681] ---[ end trace 0000000000000000 ]---
[  113.400511][   T43]  __kasan_kmalloc+0x8a/0xb0
[  113.401392][ T7681] RIP: 0010:__list_add_valid_or_report+0xa9/0x100
[  113.401420][ T7681] Code: b4 d1 8b e8 b9 6f d7 fc 90 0f 0b 48 c7 c7 a0 b4 d1 8b e8 aa 6f d7 fc 90 0f 0b 48 89 d9 48 c7 c7 00 b5 d1 8b e8 98 6f d7 fc 90 <0f> 0b 48 89 f1 48 c7 c7 80 b5 d1 8b 48 89 de e8 83 6f d7 fc 90 0f
[  113.402513][   T43]  __kmalloc_node_noprof+0x211/0x430
[  113.404401][ T7681] RSP: 0018:ffffc90003f4fbf8 EFLAGS: 00010286
[  113.404417][ T7681] RAX: 0000000000000075 RBX: ffff888030cbf800 RCX: ffffffff816d3e59
[  113.405707][   T43]  __kvmalloc_node_noprof+0xad/0x1a0
[  113.407478][ T7681] RDX: 0000000000000000 RSI: ffffffff816de776 RDI: 0000000000000005
[  113.407495][ T7681] RBP: ffff88802b147000 R08: 0000000000000005 R09: 0000000000000000
[  113.409262][   T43]  seq_read_iter+0x82a/0x12b0
[  113.410825][ T7681] R10: 0000000080000002 R11: 0000000000000272 R12: ffff888030cbf800
[  113.412003][   T43]  kernfs_fop_read_iter+0x414/0x580
[  113.413950][ T7681] R13: ffff88802b1470b0 R14: ffffea0000ac51c0 R15: ffff88802b147008
[  113.415202][   T43]  vfs_read+0x87f/0xbe0
[  113.416946][ T7681] FS:  0000000000000000(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000
[  113.418432][   T43]  ksys_read+0x12f/0x260
[  113.419517][ T7681] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  113.420950][   T43]  do_syscall_64+0xcd/0x250
[  113.422964][ T7681] CR2: 000000110c3906c4 CR3: 0000000062c00000 CR4: 0000000000352ef0
[  113.424644][   T43]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.426295][ T7681] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  113.427516][   T43] ------------[ cut here ]------------
[  113.429159][ T7681] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  113.430414][   T43] kernel BUG at mm/z3fold.c:1293!
[  113.432054][ T7681] Kernel panic - not syncing: Fatal exception
[  113.433941][ T7681] Kernel Offset: disabled

VM DIAGNOSIS:
16:29:53  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=000000000000001b RCX=ffffffff816da34a RDX=ffff88801bba0000
RSI=ffffffff816da336 RDI=0000000000000001 RBP=1ffff92000136e40 RSP=ffffc900009b71f0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=2139323a632e656b
R12=0000000000000001 R13=0000000000000200 R14=ffff88801eaca440 R15=ffffc900009b72d8
RIP=ffffffff816da338 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000001b3041fffc CR3=00000000458b4000 CR4=00352ef0
DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7059f223b
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7059f2248
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7059f2242
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7059f2256
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7059f22dc
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7059f23ba
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc705b0c488 00007fc705b0c480 00007fc705b0c478 00007fc705b0c450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc70666d100 00007fc705b0c440 00007fc705b00004 00080000000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc705b0c498 00007fc705b0c490 00007fc705b0c488 00007fc705b0c480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000040000 RBX=0000000000000003 RCX=ffffc9003395f000 RDX=0000000000040000
RSI=ffffffff813ca8d4 RDI=ffffffff813ca8c1 RBP=ffff8880291d7408 RSP=ffffc9000323eea0
R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff905f590f R11=0000000000000000
R12=0000000000000003 R13=0000000000000003 R14=ffff88806a73fdc0 R15=ffffed100523ae81
RIP=ffffffff813ca8d6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007fc70683a6c0 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000205b2000 CR3=00000000458b4000 CR4=00352ef0
DR0=0000000000000005 DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc12983290 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e2abf223b
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e2abf2248
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e2abf2242
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e2abf2256
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e2abf22dc
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e2abf23ba
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=fffffbfff20beb21 RBX=fffffbfff20beb22 RCX=ffffffff819528e6 RDX=fffffbfff20beb22
RSI=0000000000000008 RDI=ffffffff905f5908 RBP=fffffbfff20beb21 RSP=ffffc90004607bc0
R8 =0000000000000000 R9 =fffffbfff20beb21 R10=ffffffff905f590f R11=0000000000000001
R12=000000000003dbcc R13=ffff888059d22440 R14=dffffc0000000000 R15=ffff88806a83ee80
RIP=ffffffff81eeff23 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c2d74d0 CR3=0000000037742000 CR4=00352ef0
DR0=000000000000e213 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000208001 Opmask01=0000000000000014 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 733396b04688dc79 988a17521ea91c73
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3429ca4ae031f9e2 9a11679820292a87
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1fd3d3b891282354 492739a73b28922c
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 84c458da5701a275 7fe52a1f3249f115
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006200
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45b1fa2900000197 58000000c0000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45b20a6645b93192 000000a745b961bc
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45b92e776b000000 cc00000074000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e0000000b000000 00000126be000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ead2614ea4db015a 8fbb2c4f11f144a6
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 377f8b2fba1419c6 60fd1a3e2aa7133c
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00050008bb000000 0000000000000000 000080fe00060014 000000000000000a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e2b86d100 00007f2e2ad0c440 00007f2e2ad00004 00080000000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e2ad0c498 00007f2e2ad0c490 00007f2e2ad0c488 00007f2e2ad0c480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000041 RCX=ffffffff816da34a RDX=ffff88801eaca440
RSI=ffffffff816da336 RDI=0000000000000001 RBP=1ffff920007e9f08 RSP=ffffc90003f4f830
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=6e69203a73706f4f
R12=0000000000000001 R13=0000000000000000 R14=ffff88801bba0000 R15=ffffc90003f4f918
RIP=ffffffff816da340 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c3906c4 CR3=0000000062c00000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000080000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe8232a2a0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7059f223b
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7059f2248
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7059f2242
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7059f2256
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7059f22dc
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7059f23ba
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000