last executing test programs:

57.370059134s ago: executing program 2 (id=1222):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8040)
sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f0000001380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x4008040)
write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r0], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
r3 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000cc0)={&(0x7f0000000040)=@sco={0x1f, @none}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000100)="bc08679ca5801e122ac92a605ed8673f856b05e71e129ff798de0bc6e22971c743c86b19d04cdb256b8ff99707dd75b9449517a404172dac4eaee00fdcf198598de6accedd7ed9ed83e35fe7ac21cc", 0x4f}, {&(0x7f0000000180)="d35e433d361f72a1a23aa4b04cc85201af0db706a70a1c46d3d21283f3af5b9973b963b6263540443de9501ace7884bf64d4efde4cc217a76ff53e1a91897235cffb10081657c20ed02b261fb73de33de003dcb3d5338a3c6ac27ec5e101cc3d1cb9ce5e56854e309d0973d87f69e06355eee759da1507098525d57260cf8eba5a4a3d919515d2acb9c571fe", 0x8c}, {&(0x7f0000000280)="f833fccb2dfcd880b5f198845e562580271cdabb2eb5fdd79d0fbf8070b50a71cdaae56568d286a80e498ec58333773ea7eb1cd327dcb892bedf7a97a4a3e42dba69867dcebf375dfb659e8260", 0x4d}, {&(0x7f0000000300)="06a77b6af0d382d6bbad096109e63f11265c36c76ae628551542d88b5d84680a7311f375ce7e7ecb160c4dfd8725e6c7376f5bd96ff838f4d34e8d43dc719ff3cb78eb0bea8edd5448a71d3be7ad612bc5b139914b6b0a8c92b7ebbce1279575b4087e01ad6319d257f775f40606eab1cea67ef4337bb998bb3168721fecfe196152ddfee4b5ef3eb931e1e12a728bb0a107474ecaecbc749b5ef03f4a72a7194f7c54207374a76a5f26f2b025d229191be2e47c00cafe2554ea05c83b322207be7565bf993b61314e334e947932dfc8f45afd5aca85e119264d9d483a640b546b9da3ff4786cd780bcd9d4ce4b3e3a3", 0xf0}, {&(0x7f0000000400)="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", 0xfa}, {&(0x7f0000000500)="aa5985fdda5d8dd6fe31a210adb4419efeddfb8b349c81a11aa855b914d099f87b08249cf0a4e3ed824ce5f0757e5b9066bc0a0de4cb24c14ef2f11800379512edc06204092fc12937bdb63db9b7ece85c8ee3de4f4c736727710e0fc848f465ba549c5c2db0c48c7b9e1c918ad594", 0x6f}, {&(0x7f0000000580)="4f390b69e6b4195741b8e1f0b2185379312037e74ecffb462df161bd44288c15f8b37a5966fe097e3b2bbba7fd86e5e10659b46247c0a9c839b18a5eda0a79b47af47283431add2fc72b12370593d65eecb7697f8cbfb89d418f32a338ab6ffc2519968608e3464f496b132c5f1305670b27684cf1483e5ef230117e9278b2c5c036ce830b7fcf7df2dd86012ca1242cfcf3486cc56f70a86f0be86ebd94ebfe79f97182c8edfdf0e2c8e2d7cd5d81e25afb5532c1d58c1f7090ec36d8576de0c7bed851d63220d0e05f2355474feb6317d592c5e54a0feb3a2c", 0xda}, {&(0x7f0000000680)="00b091bfaa8ad6a7ccf7d50a9bf09d5b7ea5562d6a8d44ad564ae24fc85bc890ffbe2a4768bf654178ed0dbd766cf41f760aed081d872fa81925c1a16fdc25338d15efb0da3953d67dc0b5cc6e9ea12eb63843898c9423a05d7574a49ff266f9caa5734f7fc14579465bda7eef553fc639efc2ec61046bef91fa8c2b78cd042e48fd8cafabaf2337f9614b7b", 0x8c}, {&(0x7f0000000740)="1f5a2e54f900b47d823922eae50aa061a2e540ef23357a55a82c3e1476b118507f5be7bca96725a0ba1d0b13e3c7b6542651fb902a71f3756d77f41eb37dceded53bb85630e72ffed1a24263fd24762736b67475d0ed53e23fb8549d43f0090296c019bff95b8a9eef7143d3e457db23722cfc14bfc72566d79c7ad16101d0c27b365a358e9a0818ada6fe9ae6b84f323b595ca0e261070ee6c7ffa09b6398f4c10c08e3c7370da352c3c4d3fe33f5c784853315fbede9abf1f70b17d9a1a77237214d77f4b909fa7c0e3a77f285268a8a8a451b22d8d8088bc7ce83836ce8e6ccb41e41cf7c2f", 0xe7}, {&(0x7f0000000840)="e4786c09c4e9fbd5133efcf7cbea2008e83b450c68801c82c22fade693fef232408f3ddc530f10ac6f2708745a1b7b8cb85e15a1b19de788c64649d898c11652f577c60110f35af91062b11cea69bb974dd33ef5ffbbe8fcafe84793f07f35261536aee621068a4438de70c66d37e218f28cce1051d63a3c1e7f9c383a442a7e1647ce556f9b7a4985daf6c8df961ebeef36b06b5908c49758f8070734ebd64744e9dc496f8e566635d42f001cd105aa96e062c98f1d8fbd3cb79c3894c9e372e66f30889a704c2fedd0a19f89e3d67394a53222883d1670e94aea8eb3cef601e3454356ad3472e7b20d227e8fb1c774e34413e222", 0xf5}], 0xa, &(0x7f0000000a00)=[{0xf0, 0x1, 0x7f, "3478e68bde66a98fe171fdbf02a1eed8fde35f06c31c5b8327730445ca8aab22319c0d31727209e639697bb3e70cfedb7e81c548f0f8b39c98fa79f0005cfe0808aa688dfb15c60a1d1107722d74671b41d62d49bbfcc3b588d9fab524784c0cfa2d04e6885e93f7b62879977290cc78cd4060b89831de2444f0710403d8966f72f4bb7b2c41b4178ee37168928df8e7a5eff662062f411b6999b32ad2d2fe67c07f59bf28826afa7da262cb66f866aa2845c90fbd65bb5efeee73480d9304d9f0c6d303320da5f01bd48138102a60398a313065eee72c2c3e79541a4679fd"}, {0x108, 0x10f, 0x9, "8a6b70d245471318296bcd1d40a72a973c57c50ecafc62145edb66d1c4d48dbe044d5e764581e5d3f585ee6ea59db6323335c29301d4e4a08269931bbf0a442f186b0f5da32c529469bd5aa9662c13e1b678b62bda922565080c0b6412d18ca523c2477484c9e6eed55e86cecb91f690ef06ecea997d2b053cac4187b8f48ea0a8e2e3f16a84b48c17afc716354527f5a95bb927af6d2088deedd0e0a1a53840bf7c2a631979480d5a7c81c276194cd8a53566e0588e08daffe806c4b74b2b85253100fd10c8fd23a87b09a86f155a7ab2c8770115de88b1b28901ed2d2c2896e00666d4dca356af2b02f182cf45df344552977f"}, {0xc0, 0x10a, 0x2, "0bc35c384450f7e456160992c10c8cb045fbcbd2b059af8fb7a16f8fa0a14c40c4fb9ce7eda571938c80a31c181d6dfc6856a17733cea7cd1c551f2572bf1045279909a6ca68c6235d21b7f253dd064dbd1325194e55a0f9da8707516f68cbe5bcc4a82b5cfa3ebcb5a76f39ee7deac2ef1104fa6b65c163fe5fd4603cec775a73678daf098ed8727b0f6542705de33c1b02a4eeac6d9d8cb65199492139201c7f90715d43c6258aeba24d26ddc993"}], 0x2b8}, 0x1)
write(r0, &(0x7f00000000c0)="842a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

57.320374629s ago: executing program 2 (id=1223):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000240)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x2, 0x4, 0xfffff00c}, {0x6}]}, 0x10)
sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, <r3=>0x0], &(0x7f0000000040), 0x4000000000000045, r2, 0xcccccccc})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000040), &(0x7f0000000600)=[r3], &(0x7f0000000340)})
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x280000, 0xd5f, 0x0, 0x7fffffffffffffff, 0x401, 0x2c6b})
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0xb0, 0x1403, 0x900, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000)
sendmmsg(r4, &(0x7f0000000180), 0x40000000000007b, 0x4004)

57.247807917s ago: executing program 2 (id=1225):
r0 = gettid()
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(seed)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
clock_gettime(0x0, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0})
clock_nanosleep(0x3, 0x1, &(0x7f00000000c0)={r2, r3+60000000}, &(0x7f0000000080))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff00800", 0x0, 0x104, 0x6000000000000000, 0xc1, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab30", 0x0}, 0x50)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500001400000000000290157f53bd080a692400907800"/54], 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfce)
tkill(r0, 0x7)

57.069648997s ago: executing program 2 (id=1229):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x105090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
stat(&(0x7f0000000140)='./file0/../file0/../file0/file0\x00', 0x0)
lstat(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f00000000c0))

57.020047796s ago: executing program 2 (id=1231):
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x0)
mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x818892, &(0x7f0000000000)={[{@uid={'uid', 0x3d, r4}}]})
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

56.839158542s ago: executing program 2 (id=1235):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x80003, 0x34343452, 0x1, 0x8000, 0x3, 0x6, 0x10, 0x1, 0x7, 0x0, 0x2}})

56.789814626s ago: executing program 32 (id=1235):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x1, 0x80003, 0x34343452, 0x1, 0x8000, 0x3, 0x6, 0x10, 0x1, 0x7, 0x0, 0x2}})

13.040149266s ago: executing program 0 (id=1743):
setuid(0xee00)
fanotify_init(0x200, 0x0)
r0 = syz_io_uring_setup(0x885, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x9d}, &(0x7f0000000280)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x4c, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x50182, 0x90, 0x3c}, &(0x7f0000000100)='./file0\x00', 0x18, 0x0, 0x12345})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)
prctl$PR_GET_NAME(0x10, &(0x7f0000000200)=""/99)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000bb0000005f0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x600, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40000, 0x130)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000040)={0x6})
userfaultfd(0x801)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1810039000000000bf008000000000e000a000f000000028002002d1f", 0x2e}], 0x1, 0x0, 0x0, 0x3000000}, 0x4000080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="050002000a0000000500030004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x80)

12.979966165s ago: executing program 0 (id=1744):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)={[&(0x7f00000006c0)=' \x87N\x10<?\xbd\x151\xe9\xf8\xff\xff\xff\xff\xff\xff\xff\xc0\x98\xca\x89\x12\x85\x94B\xad\xff\xab%\xca\x1d\x18\x05N\xda\x9a\x00\"\xba\x8b0:\x88\x89:\x048z\x9c\x98\xd6qO\x8a\xc9 \xdc\xb9/\xd9\x13gG\x02\xa6\nY0\xb0\x97e\xec\xe1\x02\x9e\xf3\xb6o\xfa\xe9\x11\xc3\x99\xa2*\xb80\x00\x00\x00\x95\xd0\xcaM\xd4\x9c\xe8@\xf4\b\x15\xe1\xed\xd3g\xdd*p\xe4\xe1#>\x86A.\x8fF\xa1\x1c\xf9\a\x00\x00\x00\x1c$}\xfb\xebP\xd7\xfa\xce\xf7\xad\x0f\xe6\xc4I\xfa\x83\x85B\x11\x14h\t\x00\xb3\xc9\x1c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe0v\xe8Z\xa3\x8dBER\x00\x00\x00\x00\x00\x00\x00\x00']})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}})
read$FUSE(r3, &(0x7f0000002300)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f00000001c0)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x0, 0x20, 0x0, 0x0, 0x8}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x78, 0x0, 0x8, {0xb10, 0xc, 0x0, {0x5, 0x8, 0x9261, 0x4, 0x5, 0x2, 0x4, 0x8, 0xfffffffd, 0x1000, 0x2, r5, r6, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
utimes(&(0x7f0000000100)='./file0\x00', 0x0)
ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000240)={"b407f400166696daebcbe60d", &(0x7f00000000c0)="91f9ab1b", 0x4, 0x7461adcc, 0x0, 0x1, 0xffffff05, 0x2fc, 0x0})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x20000000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
r11 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r10, 0xae9a)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, <r12=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r12}, 0x4)

12.109893469s ago: executing program 0 (id=1755):
r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0xc8d03)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r1, &(0x7f0000000580), 0x1000000000000297)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000080)=[r2], 0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000380)={&(0x7f00000001c0)=[r2], &(0x7f00000002c0)=[0xbd], 0x100000000, 0x1, 0x5})

12.109376712s ago: executing program 0 (id=1756):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
fanotify_init(0x4, 0x80000)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x105090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
stat(&(0x7f0000000140)='./file0/../file0/../file0/file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4)
sendto$inet6(r1, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback, 0x4}, 0x1c)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r2)

11.22006731s ago: executing program 0 (id=1763):
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000140), &(0x7f0000000180)='%+9llu \x00'}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r2}, 0x4) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000020240), 0x10010) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r6, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10b4c1, 0x0) (rerun: 64)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x20)
rmdir(&(0x7f0000000740)='./file0\x00') (async, rerun: 64)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) (async, rerun: 64)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000aa000000003300000020010000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000005000000000000000048000400656362286369706865725f6e756c6c2900000000000000000000000000000000acd1493500000000000000000000000000000000000000000000000000000000000000004c0014007368613100"/316], 0x184}}, 0x0)

11.02986145s ago: executing program 0 (id=1764):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x5c, r6, 0x1, 0x70bd27, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x1})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0xfffff01c}]}, 0x10)
socket$inet(0x10, 0x3, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) (async)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x5c, r6, 0x1, 0x70bd27, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x1}) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0xfffff01c}]}, 0x10) (async)

11.014261201s ago: executing program 33 (id=1764):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x5c, r6, 0x1, 0x70bd27, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x1})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0xfffff01c}]}, 0x10)
socket$inet(0x10, 0x3, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) (async)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x5c, r6, 0x1, 0x70bd27, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x1}) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0xfffff01c}]}, 0x10) (async)

3.487919782s ago: executing program 5 (id=1908):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async)
madvise(&(0x7f000058d000/0x4000)=nil, 0x4000, 0x0)

3.419658213s ago: executing program 5 (id=1909):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSLCKTRMIOS(r0, 0x80047456, &(0x7f00000010c0))
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0)
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x3, 0x0, 0x0, &(0x7f0000000180)="cb1cb94f1ddd638e5a33e0cb15f0711a42169970ffcba6e1bea3ced8cfe13a0f96a52c3c839efa88ca5eecd44932262306fa237a1a25b5e420cd5c5263cf93ccf1115208f2d9f2be107c1c947c1fe32978e9680c18253178422daec67cbf8d8006bb7ee18cf1df5b2add4ad8fe1ef5edca2d54d472b92fcf0ebcd6b98466a57b4df6545d7820bdcfaeced1ba1fa5a2b27735b07c3e1bd3cfe194c7708ef0830eaae5c2bd9ee6e672761c5518a55431570c91cd1c", 0xb4, 0x972})

3.419250662s ago: executing program 5 (id=1910):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0) (async, rerun: 64)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async, rerun: 64)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
chdir(&(0x7f0000000080)='./file1\x00') (async, rerun: 32)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x3a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000080008004500002c0000000000119078002c9ed94e000018bd6c4f18e000000100004e20001890780400"/62], 0x0) (async, rerun: 64)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x33) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async)
r8 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x1, 0x0, 0x2000000000000}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8) (async)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x100, @loopback}, 0x1c) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x7d) (async)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x2c380, 0x0)

3.249503428s ago: executing program 5 (id=1913):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000003700), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000053ed3eac000c0000000c00000002000000000000000000000d000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x4, 0x1}, 0xfffffffffffffe99, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$packet(0x11, 0x2, 0x300)
dup(r3)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000003700), 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000053ed3eac000c0000000c00000002000000000000000000000d000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x4, 0x1}, 0xfffffffffffffe99, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
socket$packet(0x11, 0x2, 0x300) (async)
dup(r3) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) (async)

3.120092393s ago: executing program 3 (id=1915):
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
fremovexattr(r0, &(0x7f0000000100)=@known='security.selinux\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg2\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_VERSION={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x20, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x4, {@in6_addr=@remote}}}]}, 0x38}}, 0x24008000)

3.119766409s ago: executing program 3 (id=1916):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000040)=0xa, 0x7, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r5, 0x0, 0xfce)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x101})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0xffffffffffffff61, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000000c0)="0f01bd00800f22a78332d8b800008ed0f3f00fb1028f005dd2f30fd6ffb800008eab0fae4560", 0x26}], 0x1, 0x0, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x750800, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}}, 0x8090)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

3.020035531s ago: executing program 5 (id=1917):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x310, 0x1170, 0x1398, 0x188, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x120, 0x188, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0, @loopback}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x0, 0x51, &(0x7f00000004c0)=ANY=[], 0x0)

3.019682112s ago: executing program 3 (id=1918):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x28d)

2.940086776s ago: executing program 3 (id=1919):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300) (async)
pipe(&(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x40d, 0x60bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x3000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

2.868141299s ago: executing program 3 (id=1920):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c)
r1 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={<r2=>0x0, 0xc939, 0x8, 0xa, 0x5, 0x200}, &(0x7f0000000140)=0x14)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x2}, &(0x7f00000001c0)=0x8)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000002c0)={'sit0\x00', <r3=>0x0, 0x40, 0x7, 0x7, 0x7, {{0x2c, 0x4, 0x1, 0x22, 0xb0, 0x65, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@noop, @noop, @end, @timestamp={0x44, 0xc, 0x69, 0x0, 0x4, [0x10001, 0x5]}, @lsrr={0x83, 0x23, 0x83, [@private=0xa010102, @private=0xa010101, @rand_addr=0x64010102, @loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x14, 0xaa, 0x0, 0x0, [0x8, 0x1, 0x0, 0x1000]}, @timestamp_prespec={0x44, 0x54, 0xb7, 0x3, 0x8, [{@empty, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4499}, {@broadcast, 0x2115}, {@private=0xa010100, 0x983}, {@multicast1, 0x1}, {@multicast2, 0x1}, {@multicast1, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x8}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}]}}}}})
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@multicast2, @loopback, r3}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="721ca7fa509eae871ab1b4100180c2000000aaaaaab06c40aaaa0008004500002800000000000211009078e00000020000000280000000004e0804b52a8669bfbbeec3d9e8453b74b8c155335f4b7b25ff9300"/92], 0x0)

2.867007527s ago: executing program 3 (id=1921):
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', &(0x7f0000000080), 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x100, 0x23, 0x11}, 0x18)
lsetxattr$security_ima(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v1={0x2, "133fe680b708b42c24e54b"}, 0xc, 0x1)
getdents64(r0, &(0x7f0000000200)=""/71, 0x47)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x101300, 0x0)
ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000002c0)={0x10})
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000600), &(0x7f0000000640), 0x2, 0x3)
syz_emit_vhci(&(0x7f0000000680)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
getdents64(r0, &(0x7f00000006c0)=""/4096, 0x1000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000001700)={'sit0\x00', &(0x7f00000016c0)={@rand_addr=' \x01\x00', @dev={0xac, 0x14, 0x14, 0x21}, 0xd}})
statfs(&(0x7f0000001740)='./file1\x00', &(0x7f0000001780)=""/121)
getdents64(r0, &(0x7f0000001800)=""/55, 0x37)
r3 = syz_open_dev$evdev(&(0x7f0000001840), 0xffffffffffffc08a, 0x551202)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000001880)={0x52, 0x1000, 0x8, {0x8, 0x7}, {0x800, 0xa694}, @rumble={0x2, 0x6}})
r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000018c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x94, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa, 0x20, 0xf9, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x12, {0x9, 0x21, 0x7fff, 0x56, 0x1, {0x22, 0xa52}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe, 0x9, 0xb}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x5, 0x2, 0x80}}]}}}]}}]}}, &(0x7f0000001b40)={0xa, &(0x7f0000001900)={0xa, 0x6, 0x200, 0x1, 0x80, 0xc, 0x20, 0xf8}, 0x11c, &(0x7f0000001940)={0x5, 0xf, 0x11c, 0x4, [@generic={0xf2, 0x10, 0xa, "f77c2854a6a90d5dd6d7a823191c6af5d05e598fd8e4cbaa5d85f41760cd2a2a2ef257bd44e8ef32ebf31b86ef2c81ffa927e142bc7e550675ee6f77e0acee1b726ad180cf214185380825db26f5c7bbd83c0b922537a3db87f7ddf77af08d52f3cc1d25aa8a3b67e049053010c220abd4f23a83918f4ff1bfb2628f827c91274f915bbd3b88c3b6f6d296933efb9c05c292bc3a0be53499dd6d069fd05bcbdcec45947db538602f615273c71ab3e508d882a9499c5bdbc367ea09d1b2e5aa3792d12eeaa05896b1778a2bf3ee26e23965c8ded112aed8bb0352c3e50da98b3d7f60ad681fd06c673a90188c1b1cda"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0xf9, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x6, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0x7c, "a9fb2e6f003bc0912b2fde0202f21f8d"}]}, 0x3, [{0x25, &(0x7f0000001a80)=@string={0x25, 0x3, "eb94d16164de77592efe13f29107dd7409ff2a2195501755e89e5f9e7c9f3f56d91663"}}, {0x24, &(0x7f0000001ac0)=@string={0x24, 0x3, "31b9d0f8d6d40f157d8b2a1a16ebe34c5f2999d1f6ea80d7ba292c03ca3ff1613e20"}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x1c01}}]})
syz_usb_control_io$hid(r4, &(0x7f0000001e00)={0x24, &(0x7f0000001b80)={0x0, 0x30, 0xa7, {0xa7, 0xe, "0345415a6b0d68e24297ceed650abc2823337d72903ac47116f6656532c8537d32593707909c8820bad63903a0ddf78dbb7b62d88f2e1ec5ef29bbd0d38674ae13a9f75139065db71eb08b193a4d00c686de51584f7c1da3a22e04556d3548508c64c60c1f4313c523f87860824895324b8e7e1c7e4da2089755bbddc11ab269885020ea26172643c94831668e55c67e8ce6c7af452b537cfd7ebb04c3437ee586f8701385"}}, &(0x7f0000001c40)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, &(0x7f0000001d80)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "529d2e11"}, @global=@item_012={0x1, 0x1, 0x9, "9d"}]}}, &(0x7f0000001dc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x86, 0x1, {0x22, 0x124}}}}, &(0x7f0000002080)={0x2c, &(0x7f0000001e40)={0x20, 0x7, 0xc2, "49e002fe6cc6d9443f592e7684cbc96235dbe084270b4693b0d5789fd7f971f15cb80c8f8b6a7a621bd168f7b132e071aa29fea25b863d073dc583807771cb4494e07390d478a7595e13bc4665fabf8d6133c771548b0d8809cd4948c687f12190421d44fe5b0a4079e470c5e980555a6ba152ba4f392f90d8ecdc3040faf11df8ea0a1ac74dd884ff6b41ae7343690f059fc44b78635511ca4169902efb5e2ebc3b79fd3b17e9488659025cbe4118d5c279cf563f0c72276c1cffdab9dc9b214a87"}, &(0x7f0000001f40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001f80)={0x0, 0x8, 0x1, 0x5f}, &(0x7f0000001fc0)={0x20, 0x1, 0x6d, "2e9635a151bf532bdc2b5cffc86c2296b0f334ebe902b4d4969c89371cf1681ab00eb360fc6da218a80bf96d995a8f88e88dcd8452394246361f4e8611904729c043d7c2fa5df1ba03b04f5aa6ee656765b46a9897d0afefab8517761b20c46e157336a5c6a01f48596378898e"}, &(0x7f0000002040)={0x20, 0x3, 0x1, 0x8}})
write(r3, &(0x7f00000020c0)="88a0147b7a1f32bdded969170f8c700a42b67cd0b5f61c56a1d58a334ecd4fd9ccbbef0f653179c7b6de8ec532522a543778acc1a26ed89576dcc30fa5", 0x3d)
pselect6(0x40, &(0x7f0000002100)={0x5, 0x7, 0x4, 0x3, 0x6, 0x8000000000000000, 0xe, 0x2d7e80000}, &(0x7f0000002140)={0x5, 0x7, 0x200, 0x1, 0x81, 0x100, 0x4, 0x1}, &(0x7f0000002180)={0x1da7f188, 0x70, 0x8, 0x34b, 0x62e, 0x80000001, 0xf0, 0xb6e8}, &(0x7f00000021c0), &(0x7f0000002240)={&(0x7f0000002200)={[0x400]}, 0x8})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004440)={<r6=>0x0}, &(0x7f0000004480)=0xc)
statx(r0, &(0x7f0000004640)='./file2\x00', 0x1000, 0x800, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fstat(r3, &(0x7f0000004780)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getresuid(&(0x7f0000004880), &(0x7f00000048c0), &(0x7f0000004900)=<r9=>0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000004b00)={0x7, 0xffffffff, {}, {<r10=>0xffffffffffffffff}, 0x15b, 0x101})
getresgid(&(0x7f0000004b40), &(0x7f0000004b80)=<r11=>0x0, &(0x7f0000004bc0))
stat(&(0x7f0000004c00)='./file0\x00', &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
statx(r0, &(0x7f0000004cc0)='./file0\x00', 0x1000, 0x100, &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004e00)={{0x1, 0x1, 0x18, r1, {<r14=>0xee00}}, './file1/file0\x00'})
syz_fuse_handle_req(r5, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000005400)={&(0x7f00000042c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x7, 0x4090008, 0x81, 0x6, 0x81, 0x7, 0x0, 0x0, 0x4, 0x1}}, &(0x7f0000004340)={0x18, 0xfffffffffffffffe, 0x8, {0xffff}}, &(0x7f0000004380)={0x18, 0x0, 0x7fffffff, {0xffffffff}}, &(0x7f00000043c0)={0x18, 0xffffffffffffffda, 0x7, {0xcea}}, &(0x7f0000004400)={0x18, 0x0, 0x5, {0x7}}, &(0x7f00000044c0)={0x28, 0xffffffffffffffda, 0x2, {{0x1, 0x9, 0x0, r6}}}, &(0x7f0000004500)={0x60, 0xfffffffffffffff5, 0x6, {{0x4, 0x7, 0x9, 0x5, 0xffffffff, 0x374, 0x7fff, 0x7}}}, &(0x7f0000004580)={0x18, 0xfffffffffffffff5, 0xfb7, {0x3800}}, &(0x7f00000045c0)={0x17, 0xffffffffffffffda, 0x2, {'.+%*@,\x00'}}, &(0x7f0000004600)={0x20, 0x0, 0x7, {0x0, 0x4734c23fecdf1c57}}, &(0x7f0000004800)={0x78, 0x0, 0x8, {0x9, 0x2, 0x0, {0x0, 0xa, 0xd92b, 0x6, 0x8001, 0x7, 0x8, 0x3, 0x7, 0x1000, 0x1, r7, r8, 0x7fff, 0x80000000}}}, &(0x7f0000004940)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xf, 0x6, 0x8, {0x0, 0x7fffffff, 0x0, 0x0, 0xffffffff80000000, 0x8, 0x5, 0xe, 0xb427, 0x6000, 0x4, r9, 0xee00, 0x35, 0x3}}}, &(0x7f0000004a00)={0xc8, 0x0, 0x1, [{0x3, 0x7, 0xd, 0x1, 'security.ima\x00'}, {0x2, 0x3, 0x8, 0x2, '\xd8^]$@\'.}'}, {0x4, 0x2, 0x1, 0x17fc, '-'}, {0x2, 0x8, 0x0, 0x4}, {0x3, 0x9, 0x0, 0x44}, {0x2, 0x5, 0x4, 0x1, '}!!#'}]}, &(0x7f0000004e40)={0x1e8, 0xffffffffffffffda, 0x8, [{{0x6, 0x3, 0x1, 0x100000001, 0x6, 0x2, {0x3, 0xffffffffffffffc3, 0x6, 0x22bf, 0x3, 0x0, 0x2, 0x69bd, 0xffffff09, 0xc000, 0x0, r10, r11, 0x8, 0x10001}}, {0x1, 0x6, 0x6, 0x8, ',$/#&\''}}, {{0x0, 0x1, 0xe20, 0x0, 0x0, 0x5, {0x2, 0x2, 0x100000001, 0x3, 0x81, 0x3, 0x10000, 0x6, 0x5, 0x8000, 0x40, r12, r13, 0x7, 0x5}}, {0x5, 0x5, 0x5, 0xe, 'sit0\x00'}}, {{0x0, 0x2, 0x5, 0x4, 0x60000000, 0xc06, {0x1, 0x5, 0x7fffffffffffffff, 0x4, 0x1, 0xb8, 0x7ff, 0x4, 0x8, 0x8000, 0x6, r14, 0x0, 0x55, 0xa}}, {0x0, 0x1}}]}, &(0x7f0000005100)={0xa0, 0x0, 0x8000, {{0x1, 0x0, 0x8, 0x0, 0x9, 0x2, {0x4, 0x0, 0x5, 0x22, 0x7, 0x9, 0x1, 0x1, 0x4, 0x1000, 0x7, 0xffffffffffffffff, 0x0, 0x9489, 0x4}}, {0x0, 0xe}}}, &(0x7f00000051c0)={0x20, 0xfffffffffffffff5, 0xffffffffffff8be1, {0xff, 0x0, 0x75, 0x6}}, &(0x7f00000052c0)={0x130, 0x0, 0x4, {0x7, 0x8, 0x0, '\x00', {0x4000, 0x5, 0x65e, 0x7, 0x0, 0x0, 0x3000, '\x00', 0x3, 0x2, 0x79560113, 0xc10, {0x8000000000000001, 0x7}, {0x8b1, 0x18000}, {0x9, 0x9e8e}, {0x7, 0x1ff}, 0x7fffffff, 0x188, 0x7fffffff, 0x2}}}})

2.499478926s ago: executing program 1 (id=1926):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x5) (async)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$UI_DEV_DESTROY(r3, 0x5502) (async)
unshare(0x62040200) (async)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0xe, 0x2}, {0x9}}}}, 0xf) (async)
arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r5 = socket$inet6(0xa, 0x1, 0x0) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
pselect6(0x40, &(0x7f0000000180)={0x3f, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) (async)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x5, 0x4) (async)
bind$inet6(r5, &(0x7f0000f65000)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) (async)
sendto$inet6(r5, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0xc0) (async)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000080))
getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x0, [0x2, 0x5, 0x40]}, &(0x7f0000000280)=0x44) (async)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x101, 0x8a})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x2)
setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f00000029c0)=0x2, 0x4)

2.299935537s ago: executing program 1 (id=1929):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
prlimit64(r0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000080)={0xf010004, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x6, '\x00', @value64=0x31}})
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
r6 = socket(0x1e, 0x2, 0x0)
getsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x10f, 0x6, 0x0, &(0x7f0000001800))
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r5, @ANYBLOB="8345050000000000280012800b000100697036746e6c000018000280140003000000000003"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x0)

2.150127829s ago: executing program 1 (id=1931):
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000020240)='./file1\x00'})
r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

2.149046226s ago: executing program 1 (id=1932):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x402080)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xfe}, @raw32}], 0x1c)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x11) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) (async)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x3600, 0x0) (async)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='iso9660\x00', 0x405, 0x0)

2.089920529s ago: executing program 1 (id=1934):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='xfs\x00', 0x0, &(0x7f0000000000)='usrquota')
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x378, 0xffffffff, 0xf8, 0xf8, 0x1c0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x9000000, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc014}, 0x0)

2.089339482s ago: executing program 1 (id=1935):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x9, 0x1, 0x4})
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x74000000)
write$dsp(r0, &(0x7f0000002000)='`', 0x88020)

1.69937208s ago: executing program 4 (id=1939):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000080)={0x6, 0x0, &(0x7f0000000040)=[<r1=>0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0]}) (async)
r7 = dup3(r0, r0, 0x80000)
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, r6}) (async)
r8 = syz_open_dev$dri(&(0x7f0000000180), 0x4c, 0x8002) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000240)=[0x0], &(0x7f0000000280)=[{}, {}, {}, {}], &(0x7f00000003c0)=[<r9=>0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x1, 0x0, r4}) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000540)={&(0x7f00000004c0)=[<r10=>0x0, <r11=>0x0, 0x0, 0x0, <r12=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x8, r5, 0xdededede})
ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000600)={0x400, 0x4, &(0x7f00000001c0)=[r5, r1, r3, r6], &(0x7f0000000200)=[0xad66, 0x25f4, 0x0, 0x22c4], &(0x7f0000000580)=[r2, r4, 0x0, r9, r11], &(0x7f00000005c0)=[0x80], 0x0, 0x8000})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, <r13=>0x0, 0x0, 0x0], 0x7})
ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f00000007c0)={0x100, 0x2, &(0x7f00000006c0)=[r12, r13], &(0x7f0000000700)=[0x6, 0x5, 0x4e1], &(0x7f0000000740)=[r10], &(0x7f0000000780)=[0x3, 0x4, 0x1, 0x7, 0x8, 0x1000000, 0x2], 0x0, 0x845})
ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000800)={r4, 0x200, 0x5000, 0xc, 0x0, [], [0x5, 0x7, 0x8001, 0x2], [0x5, 0x1, 0x7, 0x80], [0x70, 0x100000001, 0x71cd, 0x7fffffff]}) (async)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000880)={'wlan0\x00', 0x2}) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r7, 0x20, &(0x7f0000000a40)={&(0x7f00000008c0)=""/136, 0x88, <r14=>0x0, &(0x7f0000000980)=""/158, 0x9e}}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000ac0)={r7, r7, 0x1e, 0x0, @val=@target_btf_id=r14}, 0x14) (async)
r15 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x110, r7, 0x0) (async)
r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r15, 0x0, &(0x7f0000000bc0)=@IORING_OP_MSG_RING={0x28, 0x23, 0x0, r7, 0x0, &(0x7f0000000b00)="520974b8d7a9e45e0c9cf6bd0a63b837f70af75062ac9b5bfa25f81ddf13f290d95eec3b1b96097dd2dbadefd794e7823c3b98c3023b1e9c7f625b93b80c1f74f9d067e2bd9b8e853292c31bc1c8f7e1026a46386c6c4b09d47d0f07415bd342b32e8619b2617230af09f199487e75329f9dd054c7327e79495025f5838acf7e630327342c277dac4e2d30de11b30e6c16", 0x91, 0x2, 0x1, {0x0, r16}}) (async)
ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000c00)=0x1) (async)
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r17, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000d80)={[0x6, 0x7, 0x80000001, 0x2, 0x2, 0x1, 0x9e, 0x9, 0x4, 0x2, 0x1, 0x9, 0x5, 0x2, 0x5, 0x5], 0x5000, 0x1000}) (async)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000e40)={0xfffffffffffffffe, r5, r2})
read$FUSE(r7, &(0x7f0000000ec0)={0x2020, 0x0, 0x0, <r18=>0x0}, 0x2020) (async)
read$FUSE(r7, &(0x7f0000002f00)={0x2020, 0x0, 0x0, <r19=>0x0}, 0x2020) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000004f40)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000005040)=0xe8) (async)
getgroups(0xa, &(0x7f0000005080)=[0xffffffffffffffff, 0xee00, 0x0, 0x0, 0xffffffffffffffff, <r21=>0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01]) (async)
statx(r7, &(0x7f00000050c0)='./file0\x00', 0x0, 0x100, &(0x7f0000005100)={0x0, 0x0, 0x0, 0x0, 0x0, <r22=>0x0}) (async)
r23 = getegid() (async)
r24 = getegid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000e80)='system.posix_acl_default\x00', &(0x7f0000005240)={{}, {0x1, 0x5}, [{0x2, 0x2, r18}, {0x2, 0x5, r19}, {0x2, 0x7, r20}], {0x4, 0x1}, [{0x8, 0x3, r21}, {0x8, 0x5, r22}, {0x8, 0x1, r23}, {0x8, 0x0, 0xee00}, {0x8, 0x3, r24}, {0x8, 0x8}, {}], {}, {0x20, 0x4}}, 0x74, 0x2)

1.619972492s ago: executing program 4 (id=1940):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x148, 0x5802, 0x294, 0x148, 0x294, 0x260, 0x378, 0x378, 0x260, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x100, 0x148, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xf, 0x400, 0x5, '\x00', {0x8}}}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x3, 0x81, '\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00')
ioctl$BTRFS_IOC_ADD_DEV(r1, 0xb701, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x40000000)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000003c0)=<r3=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, <r4=>0x0}}, './file0\x00'})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000540)=0xc)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000800)={0x150, 0x0, 0x0, [{{0x4, 0x3, 0x10001, 0xc, 0x9, 0x9, {0x4, 0x8, 0x4, 0x85c, 0x7fffffffffffffff, 0x1e00, 0x5, 0x7a1, 0x5, 0x6000, 0x8, r3, r4, 0x67, 0x9}}, {0x4, 0x9, 0x4, 0xb, '-\\#,'}}, {{0x4, 0x3, 0xffffffffffffff7f, 0xe30, 0x0, 0x80, {0x4, 0xe, 0x400, 0xfffffffffffff24a, 0x9, 0x5, 0x0, 0xbc, 0x6, 0xa000, 0x5, 0xee00, r5, 0x4, 0x8}}, {0x0, 0xdbfe, 0x5, 0x6968fc4e, 'frag\x00'}}]}, 0x150)
r6 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, r7, r6}, &(0x7f0000000600)=""/100, 0x64, &(0x7f0000000180)={&(0x7f0000000400)={'xxhash64-generic\x00'}, &(0x7f00000005c0)="0900a9351a47", 0x6})

1.61971024s ago: executing program 4 (id=1941):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_POST(r0, 0x8004500f, 0x1000000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r3, <r4=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pread64(r1, &(0x7f0000000440)=""/197, 0xc5, 0x4)

1.429815923s ago: executing program 4 (id=1942):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="01070000000000001c00edd6bb6606fbc434ece95d47f17e01128009000100626f6e6400000008000000800800070000010000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r0 = syz_io_uring_complete(0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, <r3=>0x0})
r4 = gettid()
r5 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
splice(r6, 0x0, r5, 0x0, 0x4, 0x0)
r7 = syz_clone(0x8000000, &(0x7f00000001c0)="b6503f80f24493cece4e03f622154be705c624c02a41b805b8ff1953e056b56dd447f54707bdd1ed16c2e727992dbe172f8a040dd44469c41ac6ba67cfa0dff90539b54e8d8040b52f6eb5da2c4fbfeeede2da5bee2370f5570be342c62276218879f4a32b52608cd773003f7757bd0036deee04095b09bdf741c9ac72ebd40f0c3eacda34616b6ac7843db273557faef52d4a5e59d3b2ad57cbf0ecc07ae1e16862ad24eca8b3a6e571975000ca195f5c0a5a9eb442989b903221f1b5acda08352eeea7770b213720e0b87f226a3596fd2938bad23c045aa1a7296dc2f9018b30646d8604882ff3e8ef729f2959d9c3777b86fd", 0xf4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="4c6cfaf48b635fd46537ca96a680889d5dc62c7fc1f1485c0f95c1e493cfec9e048104fcf95e89fec7e3d07cd6e22786903ad87556b0615a3e5f8995867dca5e3af504805b94399f01abb20f23de49ea4e8cde178e0718db394b5677f1c875dc579949ba3d40909471fdef239090d21612499274e5b6c9c1541a958385ab35770492821bfe90d1f2c3a7d7b02eb4bffd8c0cd015870cbe1a2b8989ddba03185e2fbeef68326b3bd7fa8d31659a8071c2200b1a02f05ca9eeb7cdcd0a6b9e35b21b0a3a544383cb59d79ba7ba29c0cd986df6612db60d1e1ba75f7e798523617656d0d05401a44a436084aa2555f2b3477a7c3703d110d95866f8bc72")
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r1, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x240400c0)

559.946942ms ago: executing program 4 (id=1943):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000000040))
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240)={0x4, 0x0, [{0x0, 0x33, &(0x7f0000000080)=""/51}, {0x1000, 0x40, &(0x7f00000000c0)=""/64}, {0xffff1000, 0x30, &(0x7f0000000100)=""/48}, {0xeeef0000, 0xcd, &(0x7f0000000140)=""/205}]})
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000300)={0x3, r1})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x400400, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1)
ioctl$TCFLSH(r1, 0x540b, 0x2)
r4 = dup2(r2, r1)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000003c0)=0xd)
r5 = syz_io_uring_setup(0x51cc, &(0x7f0000000400)={0x0, 0xa586, 0x8000, 0x1, 0x292, 0x0, r4}, &(0x7f0000000480), &(0x7f00000004c0))
accept4$x25(r1, &(0x7f0000000500)={0x9, @remote}, &(0x7f0000000540)=0x12, 0x180800)
sendmsg$nl_crypto(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@del={0x100, 0x11, 0x200, 0x70bd2c, 0x25dfdbfc, {{'streebog512-generic\x00'}, '\x00', '\x00', 0x2000, 0x2000}, [{0x8, 0x1, 0x3ce}, {0x8, 0x1, 0xb7}, {0x8, 0x1, 0x2c5e}, {0x8, 0x1, 0x585}]}, 0x100}, 0x1, 0x0, 0x0, 0xa084}, 0x4004880)
fcntl$notify(r5, 0x402, 0x11)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r4)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbf96}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000008c0)={0x62, @broadcast, 0x4e23, 0x1, 'wrr\x00', 0x10, 0x3, 0x52}, 0x2c)
setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000900)=0x1, 0x4)
ioctl$int_in(r1, 0x5421, &(0x7f0000000940)=0xfff)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000009c0)={0x5, 0x2, 0x2, 0x400, 'syz0\x00', 0xff})
syz_io_uring_setup(0x3383, &(0x7f0000000a00)={0x0, 0xe34e, 0x2000, 0x1, 0x2ea, 0x0, r5}, &(0x7f0000000a80), &(0x7f0000000ac0))
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000b00))
openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x2000, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000b80)={0x2, 0x6, 0x1, 0x88f, 0x347a, 0x1000, 0x6, 0x627f, <r8=>0x0}, &(0x7f0000000bc0)=0x20)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000c00)={r8, 0x800}, &(0x7f0000000c40)=0x8)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x81}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x200000c1)
dup(r2)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000dc0)={'wlan1\x00', 0x1000})
syz_open_dev$sndmidi(&(0x7f0000000e00), 0x8c, 0x40000)

359.92453ms ago: executing program 4 (id=1944):
r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x30442, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)
quotactl_fd$Q_SETINFO(r1, 0x7fffffff40000901, 0xee00, &(0x7f00000000c0)={0xf7, 0x1})
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0)
close_range(r1, r1, 0x0)
r2 = openat$cgroup_int(r0, &(0x7f0000000400)='cpu.max.burst\x00', 0x2, 0x0)
io_submit(0x0, 0x4, &(0x7f0000000540)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, &(0x7f0000000100)="5789de7f912d51d2043f3ac7a6350b140d901cc5abddbe8e9b59a658fe9787ce4afa2c4b65a9554298c911815681f6af7c74760ad569d0ace9aefa567491f1025ac28867f600ed40b8ed5d0a06e76d3ac7326b3728f1e8fb0b4814aa42034792511ace3cf192414b06dda056520f91638f8870a278bc8e4e6b0588c0621ce6a9f0bda4d8372464b10f0a2f426f82c882c5382ccf3c8a7a2cc8de399190b2349ad59ee6a02d6c40056e7717711d35d20c71f7ec61a69d", 0xb6, 0x2, 0x0, 0x2, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="c655386e146702d7c160fd944d22969f805dea99a52a9cf2f2c3d39ed182b419cb6bf085114634af920cb90e9bf05a05d22b355185225e039c91695019ed37e7fc0ee6a84fc70219387f4eda8272eb4cb63822b577c99e0116218b78eb28e653d8c248ab4ff8a42e3dc57ee74b01d9e365adf93d671f9a1ce3e555f6903e4636c21082724ec419cba1716b93be98820582c7b8d5029de15204eb942530a51b68942e4fab1b7d1f31744328618dcb4c97a2b69ef78710e599fc8b59aa584ebe1edf186419fa35016c4a1a58cc328c9f6d3b874e621fa3412429cf2614eb5cd92dbbf98e81", 0xe4, 0x1, 0x0, 0x1, r0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x8, r1, &(0x7f0000000340)="041f9e67c787bb24b6d59230ecd24d8e8c1b6890ba3cd00bb6bb24bbb66c05ae13d97cb3c293c8f2ea0561a8489f08924f44b9a32220f48ee0be239a5485ee6fee96b81f622f4c52e55993b5a5d006ea4a2fc4ac924b978a768c55efc9b2a147ad866d5bb3af3699508084ae0984cb", 0x6f, 0x1e6, 0x0, 0x1, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x1, r2, &(0x7f0000000440)="dbc54f5dd0e7dc7e50503e7b733de4791585d1a2cbf993a87e19923239b4fa91f92b2fe98a6ba82163825a989807ac7cea1e4c8734fd34d881434ab42e97e782e6c951aab1f45bf265c1b8553763b6ce124b9e12051bd36fd1305ea04441914a77a56bf1ec36023c6799760e26dcd99f478e212f494cf45086111caa189b2cc71dac1ac555116ef256e890fbbbda7cc584f7b186cf05bfde4cacfff23ba8a1885b7249803b45fbe947e0a694", 0xac, 0x0, 0x0, 0x3, r0}])
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/ipc\x00')
setns(r3, 0x8000000)
r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x101000, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000600)={0x1e, 0x4, 0x5, 0x7fff, "7f807c0a2a36"})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006)
close_range(0xffffffffffffffff, r4, 0x2)
fremovexattr(r3, &(0x7f0000001680)=@known='user.incfs.metadata\x00')
ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0)
r6 = dup2(r4, r1)
r7 = socket$pptp(0x18, 0x1, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000016c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000017c0)=0xe8)
quotactl_fd$Q_SETINFO(r7, 0xffffffff80000600, r8, &(0x7f0000001800)={0xf8, 0x6, 0x1, 0xc})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000001840), 0x200100, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000001880), 0x4)
fcntl$setsig(r1, 0xa, 0x1)
openat$ppp(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000001900)=0x4)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f00000019c0)={0x48, 0x8, r0, 0x0, 0xd, 0x5f, &(0x7f0000001940)="ce8591b26ae0377b90f2d7561fd23cc0b94f68b487f94336115d7d187456afe1d02efddaa56945daace2db140d608053e24d8c6e9ec4e04974e198d82c4e797261ad5cf75ede5c92b5adb34288fee927cdc295bd437c55710f9fe6c4b9865e"})
write$cgroup_int(r0, &(0x7f0000001a40)=0xfc06, 0x12)
ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000001a80)={0x9})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001f40)={{0x1, 0x1, 0x18, r2}, './file0\x00'})

0s ago: executing program 5 (id=1945):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0)
read$FUSE(r1, &(0x7f0000000900)={0x2020}, 0x2020)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0)
syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000700)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x3fff}, @broadcast, @broadcast, @from_mac=@broadcast, {0x4, 0x2}, "", @value={0x7, 0x0, 0x0, 0x1, 0x5}, @value=@ver_80211n={0x0, 0xb, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, @a_msdu}, 0x1e)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYBLOB], 0x34}}, 0x20)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r10, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = openat$cgroup_procs(r11, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r12, &(0x7f0000000c40), 0x12)
unshare(0x2040400)

kernel console output (not intermixed with test programs):

T39] audit: type=1400 audit(1737017991.477:917): avc:  denied  { getopt } for  pid=9401 comm="syz.2.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  105.049588][ T9402] netlink: 'syz.2.960': attribute type 8 has an invalid length.
[  105.052627][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'.
[  105.100713][ T9402] kernel write not supported for file /asound/timers (pid: 9402 comm: syz.2.960)
[  105.119869][   T35] usb 5-1: device descriptor read/64, error -71
[  105.131593][ T9404] kernel write not supported for file /asound/timers (pid: 9404 comm: syz.2.961)
[  105.153872][ T9406] xt_hashlimit: max too large, truncated to 1048576
[  105.156338][ T9406] xt_bpf: check failed: parse error
[  105.162348][ T5916] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  105.240089][   T35] usb usb5-port1: attempt power cycle
[  105.298099][ T9415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.964'.
[  105.349200][ T9416] xt_hashlimit: size too large, truncated to 1048576
[  105.365125][   T39] audit: type=1400 audit(1737017991.797:918): avc:  denied  { setopt } for  pid=9419 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  105.533836][ T9425] netlink: 'syz.1.968': attribute type 10 has an invalid length.
[  105.537238][ T9425] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.540087][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.552343][ T9425] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.554999][ T9425] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.557718][ T9425] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.560318][ T9425] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.567092][ T9425] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  105.572536][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'.
[  105.575705][ T9425] bridge_slave_1: left allmulticast mode
[  105.577808][ T9425] bridge_slave_1: left promiscuous mode
[  105.580298][   T35] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  105.580425][ T9425] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.586436][ T9425] bridge_slave_0: left allmulticast mode
[  105.588553][ T9425] bridge_slave_0: left promiscuous mode
[  105.590952][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.600431][   T35] usb 5-1: device descriptor read/8, error -71
[  105.690685][ T9425] bond0: (slave bridge0): Releasing backup interface
[  105.839900][   T35] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  105.871503][   T35] usb 5-1: device descriptor read/8, error -71
[  105.933442][ T9424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.980539][   T35] usb usb5-port1: unable to enumerate USB device
[  106.435866][   T39] audit: type=1400 audit(1737017992.867:919): avc:  denied  { getopt } for  pid=9443 comm="syz.2.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  106.463434][   T39] audit: type=1400 audit(1737017992.897:920): avc:  denied  { map } for  pid=9446 comm="syz.2.975" path="socket:[25820]" dev="sockfs" ino=25820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  106.470665][   T39] audit: type=1400 audit(1737017992.897:921): avc:  denied  { read } for  pid=9446 comm="syz.2.975" path="socket:[25820]" dev="sockfs" ino=25820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  106.502125][   T39] audit: type=1326 audit(1737017992.937:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9455 comm="syz.2.977" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b07b85d29 code=0x0
[  106.538088][ T9458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.978'.
[  107.166116][   T39] audit: type=1400 audit(1737017993.597:923): avc:  denied  { ioctl } for  pid=9467 comm="syz.1.982" path="socket:[27150]" dev="sockfs" ino=27150 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  107.174987][ T9468] binder: 9467:9468 ioctl 40046205 0 returned -22
[  107.310327][ T9475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.388558][ T9483] SET target dimension over the limit!
[  107.393622][ T9483] overlayfs: workdir and upperdir must be separate subtrees
[  107.489654][ T9497] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.993'.
[  107.492868][ T9497] openvswitch: netlink: Unknown key attributes 20
[  107.610377][ T9501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9501 comm=syz.3.988
[  107.877110][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  107.967394][ T9490] warn_unsupported: 13 callbacks suppressed
[  107.967405][ T9490] kernel write not supported for file /asound/timers (pid: 9490 comm: syz.2.990)
[  108.253274][ T9528] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  108.319181][ T9532] netlink: 'syz.3.1005': attribute type 10 has an invalid length.
[  108.325391][ T9532] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  108.441566][ T9544] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.445341][ T9544] syzkaller0: MTU too low for tipc bearer
[  108.447058][ T9544] tipc: Disabling bearer <eth:syzkaller0>
[  108.451881][ T9544] netlink: 'syz.3.1008': attribute type 2 has an invalid length.
[  108.473718][ T9546] ptrace attach of "/syz-executor exec"[5907] was attempted by ""[9546]
[  108.613784][ T9559] xt_hashlimit: size too large, truncated to 1048576
[  108.632808][ T9554] loop2: detected capacity change from 0 to 7
[  108.637973][ T9554] Dev loop2: unable to read RDB block 7
[  108.641768][ T9554]  loop2: unable to read partition table
[  108.646661][ T9554] loop2: partition table beyond EOD, truncated
[  108.648552][ T9554] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  108.849826][ T1016] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  108.874836][ T9525] kernel write not supported for file /asound/timers (pid: 9525 comm: syz.2.1002)
[  108.894894][ T9566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1016'.
[  108.897505][ T9566] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  108.909312][ T9566] kernel write not supported for file /asound/timers (pid: 9566 comm: syz.2.1016)
[  108.960348][ T9568] kernel write not supported for file /asound/timers (pid: 9568 comm: syz.2.1017)
[  109.001030][ T1016] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  109.009805][ T1016] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.012909][ T1016] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  109.017192][ T1016] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  109.031026][ T1016] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  109.033684][ T1016] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  109.036000][ T1016] usb 5-1: Product: syz
[  109.037277][ T1016] usb 5-1: Manufacturer: syz
[  109.051921][ T1016] cdc_wdm 5-1:1.0: skipping garbage
[  109.053512][ T1016] cdc_wdm 5-1:1.0: skipping garbage
[  109.055072][ T1016] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  109.251805][ T5916] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  109.252007][ T5916] Bluetooth: hci3: SCO packet for unknown connection handle 200
[  109.255446][ T9556] futex_wake_op: syz.0.1013 tries to shift op by -1; fix this program
[  109.263841][ T5916] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  109.264545][ T9556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.270637][ T9556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.280750][ T6315] usb 5-1: USB disconnect, device number 19
[  109.302213][ T9582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=9582 comm=syz.0.1019
[  109.305816][ T9582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=9582 comm=syz.0.1019
[  109.309432][ T9582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9582 comm=syz.0.1019
[  109.314434][ T9582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=9582 comm=syz.0.1019
[  109.489323][ T9586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1021'.
[  109.785204][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'.
[  109.901896][ T9604] ptm ptm2: ldisc open failed (-12), clearing slot 2
[  109.927151][ T9570] kernel write not supported for file /asound/timers (pid: 9570 comm: syz.2.1018)
[  109.940841][ T9609] netlink: 'syz.0.1027': attribute type 1 has an invalid length.
[  109.979540][ T9613] dvmrp8: entered allmulticast mode
[  109.981685][ T9614] dvmrp8: left allmulticast mode
[  109.999000][ T9611] kernel write not supported for file /asound/timers (pid: 9611 comm: syz.2.1028)
[  110.015834][ T9616] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1030'.
[  110.025587][ T9617] kernel write not supported for file /asound/timers (pid: 9617 comm: syz.2.1030)
[  110.058601][ T9620] kernel write not supported for file /asound/timers (pid: 9620 comm: syz.2.1031)
[  110.076497][ T9622] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1032'.
[  110.095177][ T9622] Process accounting paused
[  110.104393][   T39] kauditd_printk_skb: 16 callbacks suppressed
[  110.104401][   T39] audit: type=1400 audit(1737017996.527:940): avc:  denied  { accept } for  pid=9623 comm="syz.0.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  110.302653][   T39] audit: type=1400 audit(1737017996.737:941): avc:  denied  { getopt } for  pid=9638 comm="syz.0.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  110.311919][ T9639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1039'.
[  110.315141][ T9639] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1039'.
[  110.318166][   T39] audit: type=1400 audit(1737017996.747:942): avc:  denied  { ioctl } for  pid=9638 comm="syz.0.1039" path="socket:[27309]" dev="sockfs" ino=27309 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  110.349903][ T1016] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  110.500054][ T1016] usb 7-1: Using ep0 maxpacket: 16
[  110.502817][ T1016] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.505990][ T1016] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.508807][ T1016] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  110.512578][ T1016] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  110.515236][ T1016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.518665][ T1016] usb 7-1: config 0 descriptor??
[  110.724145][ T9626] NILFS (nullb0): couldn't find nilfs on the device
[  110.761794][   T39] audit: type=1400 audit(1737017997.197:943): avc:  denied  { search } for  pid=5652 comm="dhcpcd" name="netdev:wlan3" dev="debugfs" ino=28861 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  110.791815][ T6315] IPVS: starting estimator thread 0...
[  110.791996][ T9673] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  110.880715][ T9674] IPVS: using max 38 ests per chain, 91200 per kthread
[  110.936836][ T9626] netlink: 'syz.2.1034': attribute type 1 has an invalid length.
[  110.941212][ T9626] xt_TCPMSS: Only works on TCP SYN packets
[  110.945201][ T1016] usbhid 7-1:0.0: can't add hid device: -71
[  110.947054][ T1016] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  110.955984][ T1016] usb 7-1: USB disconnect, device number 8
[  111.262306][ T9700] can_create: 23 callbacks suppressed
[  111.262318][ T9700] can: request_module (can-proto-0) failed.
[  111.634174][   T39] audit: type=1400 audit(1737017998.067:944): avc:  denied  { accept } for  pid=9724 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  111.659455][   T39] audit: type=1400 audit(1737017998.087:945): avc:  denied  { validate_trans } for  pid=9726 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  111.666026][   T39] audit: type=1400 audit(1737017998.087:946): avc:  denied  { setopt } for  pid=9726 comm="syz.0.1059" lport=53897 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  111.869818][ T3225] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  111.913543][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'.
[  111.916324][ T9735] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  111.918959][ T9735] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  112.021051][ T3225] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  112.025069][ T3225] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  112.027897][ T3225] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  112.030573][ T3225] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.035040][ T9723] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  112.038706][ T3225] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  112.240918][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'.
[  112.248609][   T39] audit: type=1400 audit(1737017998.677:947): avc:  denied  { mount } for  pid=9722 comm="syz.2.1058" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  112.255131][   T39] audit: type=1400 audit(1737017998.677:948): avc:  denied  { mounton } for  pid=9722 comm="syz.2.1058" path="/343/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  112.280176][   T35] usb 7-1: USB disconnect, device number 9
[  112.427704][   T39] audit: type=1400 audit(1737017998.857:949): avc:  denied  { create } for  pid=9750 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  112.497721][ T9756] : entered promiscuous mode
[  112.526020][ T9758] netlink: 'syz.1.1070': attribute type 39 has an invalid length.
[  112.867900][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'.
[  112.870695][ T9773] netlink: 'syz.2.1073': attribute type 25 has an invalid length.
[  112.909827][ T5971] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  113.062127][ T9780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9780 comm=syz.1.1075
[  113.062268][ T9781] netlink: 'syz.1.1075': attribute type 1 has an invalid length.
[  113.069983][ T5971] usb 5-1: Using ep0 maxpacket: 8
[  113.072823][ T5971] usb 5-1: config 0 has no interfaces?
[  113.075167][ T5971] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  113.078012][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.082501][ T9780] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  113.085040][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'.
[  113.085054][ T5971] usb 5-1: config 0 descriptor??
[  113.090128][ T9052] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  113.097291][ T9781] 8021q: adding VLAN 0 to HW filter on device bond4
[  113.100582][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'.
[  113.103615][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'.
[  113.106672][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'.
[  113.201445][ T9055] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  113.288435][ T5916] Bluetooth: hci3: unexpected event for opcode 0x2010
[  113.489529][ T5971] usb 5-1: USB disconnect, device number 20
[  113.925681][ T9799] Can't find a SQUASHFS superblock on nullb0
[  114.142635][ T9805] cdrom: dropping to single frame dma
[  114.392617][ T9819] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  114.392879][ T9824] netlink: 'syz.0.1090': attribute type 25 has an invalid length.
[  114.403930][ T9822] bond0: (slave syz_tun): Releasing backup interface
[  114.455189][ T9822] bond0: (slave bond_slave_0): Releasing backup interface
[  114.482076][ T9826] i2c i2c-1: Invalid block write size 34
[  114.503120][ T9822] bond0: (slave bond_slave_1): Releasing backup interface
[  114.576463][ T9822] team0: Port device team_slave_0 removed
[  114.585332][ T9822] team0: Port device team_slave_1 removed
[  114.587314][ T9822] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.589459][ T9822] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.592293][ T9822] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.594520][ T9822] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.599176][ T9822] bond0: (slave macvlan0): Releasing backup interface
[  114.661110][ T9822] veth1_vlan: left allmulticast mode
[  114.717196][ T9822] bond4: (slave ip6gretap1): Removing an active aggregator
[  114.720333][ T9822] bond4: (slave ip6gretap1): Releasing backup interface
[  114.778104][ T9824] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  114.781926][ T9824] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  114.785434][ T9824] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  114.788940][ T9824] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  114.815122][ T9832] usb usb8: usbfs: process 9832 (syz.1.1092) did not claim interface 0 before use
[  114.875649][ T9834] unsupported nla_type 14345
[  115.098470][ T9840] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  115.156224][   T39] kauditd_printk_skb: 6 callbacks suppressed
[  115.156233][   T39] audit: type=1400 audit(1737018001.587:956): avc:  denied  { getopt } for  pid=9843 comm="syz.0.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  115.203249][   T39] audit: type=1400 audit(1737018001.637:957): avc:  denied  { mount } for  pid=9846 comm="syz.0.1097" name="/" dev="pstore" ino=6346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  115.253769][ T9853] cgroup2: Unknown parameter 'euid'
[  115.529919][ T5971] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  115.537549][ T9860] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  115.555471][ T9860] kvm: pic: non byte read
[  115.558012][ T9860] kvm: pic: non byte read
[  115.560525][ T9860] kvm: pic: non byte read
[  115.562779][ T9860] kvm: pic: non byte read
[  115.564919][ T9860] kvm: pic: level sensitive irq not supported
[  115.565288][ T9860] kvm: pic: non byte read
[  115.569121][ T9860] kvm: pic: level sensitive irq not supported
[  115.569384][ T9860] kvm: pic: non byte read
[  115.574732][ T9860] kvm: pic: level sensitive irq not supported
[  115.575159][ T9860] kvm: pic: non byte read
[  115.579313][ T9860] kvm: pic: level sensitive irq not supported
[  115.579570][ T9860] kvm: pic: non byte read
[  115.583967][ T9860] kvm: pic: non byte read
[  115.586373][ T9860] kvm: pic: non byte read
[  115.588499][ T9860] kvm: pic: level sensitive irq not supported
[  115.591894][ T9860] kvm: pic: level sensitive irq not supported
[  115.690197][ T5971] usb 6-1: Using ep0 maxpacket: 8
[  115.695737][ T5971] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  115.698787][ T5971] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  115.701735][ T5971] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  115.704577][ T5971] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  115.708231][ T5971] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  115.710908][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.823559][ T9871] batman_adv: batadv0: Adding interface: dummy0
[  115.825984][ T9871] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  115.833797][ T9871] batman_adv: batadv0: Interface activated: dummy0
[  115.840759][ T9871] program syz.2.1105 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  115.919848][ T5971] usb 6-1: GET_CAPABILITIES returned 0
[  115.921731][ T5971] usbtmc 6-1:16.0: can't read capabilities
[  116.056413][   T39] audit: type=1400 audit(1737018002.487:958): avc:  denied  { mount } for  pid=9894 comm="syz.3.1111" name="/" dev="gadgetfs" ino=3008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  116.063138][   T39] audit: type=1400 audit(1737018002.497:959): avc:  denied  { unmount } for  pid=9894 comm="syz.3.1111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  116.118991][    C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.121831][    C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.124807][    C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.128079][    C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.130648][    C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.132589][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.133201][    C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.135377][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.138019][    C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.140770][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.142800][    C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.142819][    C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.145014][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.147614][    C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.150697][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.152431][    C3] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.155092][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.160268][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.162207][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.164712][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.168495][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.169651][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.172034][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.174430][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.176772][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.179633][   T39] audit: type=1400 audit(1737018002.597:960): avc:  denied  { write } for  pid=5334 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.179694][    C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.181825][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.190899][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.192611][   T39] audit: type=1400 audit(1737018002.597:961): avc:  denied  { remove_name } for  pid=5334 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.192965][ T9853] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  116.194687][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.202582][   T39] audit: type=1400 audit(1737018002.597:962): avc:  denied  { rename } for  pid=5334 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  116.208020][ T9853] evm: overlay not supported
[  116.212936][   T39] audit: type=1400 audit(1737018002.597:963): avc:  denied  { add_name } for  pid=5334 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  116.212955][   T39] audit: type=1400 audit(1737018002.597:964): avc:  denied  { unlink } for  pid=5334 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  116.212971][   T39] audit: type=1400 audit(1737018002.597:965): avc:  denied  { create } for  pid=5334 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  116.213664][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.222504][ T5971] usb 6-1: USB disconnect, device number 7
[  116.229222][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.239684][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.242081][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.244333][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.246530][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.248771][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.251317][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.253607][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.255788][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.258027][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f8be0 returned -22
[  116.260803][ T9900] binder: 9899:9900 ioctl 4020ae46 7ffb0c8f88e0 returned -22
[  116.263525][ T9900] binder: 9899:9900 ioctl 8138ae83 7ffb0c8f8aa0 returned -22
[  116.923409][ T9940] __nla_validate_parse: 65 callbacks suppressed
[  116.923419][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1123'.
[  116.932084][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1123'.
[  117.342229][ T5916] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  117.345025][ T5916] Bluetooth: hci3: Injecting HCI hardware error event
[  117.348217][ T5916] Bluetooth: hci3: hardware error 0x00
[  117.675833][ T9938] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  117.963394][ T9967] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  118.280459][ T9986] fuse: Bad value for 'rootmode'
[  118.286826][ T9990] infiniband syz!: set active
[  118.351498][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'.
[  118.359515][ T9997] mac80211_hwsim hwsim3 syzkaller0: renamed from wlan1 (while UP)
[  118.373014][ T9999] program syz.0.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  118.378667][ T9998] ALSA: mixer_oss: invalid OSS volume '�'
[  118.403401][   T65] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  118.438430][T10008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1144'.
[  118.578942][T10011] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29972 sclass=netlink_xfrm_socket pid=10011 comm=syz.0.1145
[  118.737067][T10016] netlink: 'syz.0.1146': attribute type 3 has an invalid length.
[  118.739136][T10016] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1146'.
[  118.946535][T10023] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  119.285894][T10044] netlink: 'syz.3.1154': attribute type 21 has an invalid length.
[  119.288394][T10044] IPv6: NLM_F_CREATE should be specified when creating new route
[  119.612779][T10138] nfs: Bad value for 'source'
[  119.623096][T10143] loop2: detected capacity change from 0 to 7
[  119.625713][T10143] Dev loop2: unable to read RDB block 7
[  119.627793][T10143]  loop2: unable to read partition table
[  119.630405][T10143] loop2: partition table beyond EOD, truncated
[  119.632429][T10143] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  119.688386][T10153] netlink: 'syz.3.1167': attribute type 10 has an invalid length.
[  119.701840][T10151] erofs (device erofs): cannot find valid erofs superblock
[  119.711422][T10151] Bluetooth: (null): Invalid header checksum
[  119.793381][T10150] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.808036][T10153] syz_tun: entered promiscuous mode
[  119.813518][T10153] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  119.819915][ T5916] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  119.895491][T10151] syz.1.1168 (10151) used greatest stack depth: 19888 bytes left
[  119.952000][T10150] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.081882][T10150] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.113876][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1177'.
[  120.118235][T10180] vlan0: entered promiscuous mode
[  120.119678][T10180] erspan0: entered promiscuous mode
[  120.122706][T10180] erspan0: left promiscuous mode
[  120.214105][T10189] ebt_limit: overflow, try lower: 570423552/2483027968
[  120.242898][   T39] kauditd_printk_skb: 14 callbacks suppressed
[  120.242908][   T39] audit: type=1400 audit(1737018006.677:980): avc:  granted  { setsecparam } for  pid=10192 comm="syz.0.1180" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  120.324014][T10199] Debayer A: =================  START STATUS  =================
[  120.326247][T10199] Debayer A: Debayer Mean Window Size: 3
[  120.327879][T10199] Debayer A: ==================  END STATUS  ==================
[  120.333486][T10199] netlink: 'syz.0.1182': attribute type 10 has an invalid length.
[  120.335743][T10199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1182'.
[  120.376674][T10199] team0: Port device geneve0 added
[  120.444386][T10150] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.450139][T10150] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.455717][T10150] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.460806][T10205] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  120.462570][T10150] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.550643][   T39] audit: type=1400 audit(1737018006.977:981): avc:  denied  { mounton } for  pid=10209 comm="syz.0.1186" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  120.568597][   T39] audit: type=1400 audit(1737018006.997:982): avc:  denied  { create } for  pid=10211 comm="syz.2.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  120.574546][   T39] audit: type=1400 audit(1737018006.997:983): avc:  denied  { setopt } for  pid=10211 comm="syz.2.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  120.590007][ T1016] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  120.741065][ T1016] usb 6-1: Using ep0 maxpacket: 32
[  120.744400][ T1016] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  120.746886][ T1016] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  120.749225][ T1016] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  120.752118][ T1016] usb 6-1: config 1 has no interface number 0
[  120.753984][ T1016] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  120.757024][ T1016] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  120.760886][ T1016] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  120.763582][ T1016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.769502][ T1016] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  120.878165][   T39] audit: type=1400 audit(1737018007.307:984): avc:  denied  { getopt } for  pid=10224 comm="syz.0.1190" lport=44761 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  120.883670][T10226] erspan1: entered promiscuous mode
[  120.890280][T10227] netlink: 'syz.0.1190': attribute type 12 has an invalid length.
[  121.253565][    C3] hrtimer: interrupt took 26260 ns
[  121.321887][ T1016] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  121.380859][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1192'.
[  121.536297][ T5971] usb 6-1: USB disconnect, device number 8
[  121.538503][ T5971] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  121.614725][   T39] audit: type=1400 audit(1737018008.047:985): avc:  denied  { create } for  pid=10258 comm="syz.3.1194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  121.648486][   T39] audit: type=1400 audit(1737018008.077:986): avc:  denied  { connect } for  pid=10264 comm="syz.2.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  121.652914][T10267] SELinux: security_context_str_to_sid (�) failed with errno=-22
[  121.660233][   T39] audit: type=1400 audit(1737018008.097:987): avc:  denied  { read } for  pid=10264 comm="syz.2.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  121.765101][   T39] audit: type=1400 audit(1737018008.197:988): avc:  denied  { accept } for  pid=10272 comm="syz.0.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  122.009937][ T5971] usb 5-1: new low-speed USB device number 21 using dummy_hcd
[  122.065531][T10281] netlink: 456 bytes leftover after parsing attributes in process `syz.1.1200'.
[  122.069077][T10281] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1200'.
[  122.159972][ T5971] usb 5-1: Invalid ep0 maxpacket: 64
[  122.289840][ T5971] usb 5-1: new low-speed USB device number 22 using dummy_hcd
[  122.435189][T10290] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  122.437499][T10290] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  122.440737][ T5971] usb 5-1: Invalid ep0 maxpacket: 64
[  122.446022][ T5971] usb usb5-port1: attempt power cycle
[  122.448113][T10290] vhci_hcd vhci_hcd.0: Device attached
[  122.510697][T10295] vhci_hcd: connection closed
[  122.515996][ T9063] vhci_hcd: stop threads
[  122.519073][ T9063] vhci_hcd: release socket
[  122.526039][ T9063] vhci_hcd: disconnect device
[  122.612712][T10302] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  122.679429][T10314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10314 comm=syz.2.1210
[  122.686404][T10314] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1210'.
[  122.729940][T10320] tmpfs: Unknown parameter 'IrO'
[  122.774379][   T39] audit: type=1400 audit(1737018009.207:989): avc:  denied  { append } for  pid=10315 comm="syz.1.1209" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  122.811359][ T5971] usb 5-1: new low-speed USB device number 23 using dummy_hcd
[  122.832309][T10332] netlink: 'syz.3.1214': attribute type 19 has an invalid length.
[  122.837276][ T5971] usb 5-1: Invalid ep0 maxpacket: 64
[  122.941516][T10348] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1217'.
[  122.953924][T10348] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  122.959870][ T5971] usb 5-1: new low-speed USB device number 24 using dummy_hcd
[  122.986006][ T5971] usb 5-1: Invalid ep0 maxpacket: 64
[  122.989587][ T5971] usb usb5-port1: unable to enumerate USB device
[  123.243800][T10358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1220'.
[  123.871309][T10367] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1221'.
[  123.933889][T10374] syzkaller1: entered promiscuous mode
[  123.936002][T10374] syzkaller1: entered allmulticast mode
[  123.939303][T10374] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 4032
[  124.051312][T10384] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1227'.
[  124.059854][T10385] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1227'.
[  124.295555][T10402] IPv6: Can't replace route, no match found
[  124.394498][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'.
[  124.423179][ T5916] Bluetooth: hci2: hardware error 0x05
[  124.484861][ T5922] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  124.488457][ T5922] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  124.492167][ T5922] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  124.497651][ T5922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  124.503199][ T5922] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  124.506213][ T5922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  124.529997][T10414] syzkaller0: entered allmulticast mode
[  124.545390][T10418] syzkaller0: left allmulticast mode
[  124.614047][T10421] xt_hashlimit: size too large, truncated to 1048576
[  124.616111][T10422] xt_hashlimit: size too large, truncated to 1048576
[  124.618109][T10421] xt_hashlimit: max too large, truncated to 1048576
[  124.618508][T10422] xt_hashlimit: max too large, truncated to 1048576
[  124.644095][T10411] chnl_net:caif_netlink_parms(): no params data found
[  124.660437][T10426] QAT: Invalid ioctl -2110754303
[  124.707881][T10411] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.710808][T10411] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.713421][T10411] bridge_slave_0: entered allmulticast mode
[  124.716411][T10411] bridge_slave_0: entered promiscuous mode
[  124.719008][T10411] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.723746][T10411] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.726685][T10411] bridge_slave_1: entered allmulticast mode
[  124.728865][T10411] bridge_slave_1: entered promiscuous mode
[  124.753454][T10411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.757136][T10411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.892532][T10411] team0: Port device team_slave_0 added
[  124.894445][T10443] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1247'.
[  124.900582][T10411] team0: Port device team_slave_1 added
[  124.925710][T10411] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.927702][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.935679][T10411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.941334][T10411] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.943693][T10411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.952023][T10411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.968452][T10462] devtmpfs: Too few inodes for current use
[  125.014075][T10411] hsr_slave_0: entered promiscuous mode
[  125.060026][T10411] hsr_slave_1: entered promiscuous mode
[  125.149945][T10411] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.152539][T10411] Cannot create hsr debugfs directory
[  125.246722][T10411] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  125.251047][T10411] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  125.254751][T10411] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  125.258280][T10411] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  125.288679][T10411] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.292358][T10442] syz.0.1247 (10442): drop_caches: 1
[  125.298169][T10411] 8021q: adding VLAN 0 to HW filter on device team0
[  125.300487][ T6152] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  125.303939][ T9052] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.305933][ T9052] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.310666][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.312735][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.319959][T10466] netlink: 'syz.0.1252': attribute type 2 has an invalid length.
[  125.449437][   T39] kauditd_printk_skb: 7 callbacks suppressed
[  125.449447][   T39] audit: type=1400 audit(1737018011.877:997): avc:  denied  { name_connect } for  pid=10470 comm="syz.0.1253" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  125.461334][ T6152] usb 6-1: config 0 has an invalid interface number: 72 but max is 0
[  125.464039][ T6152] usb 6-1: config 0 has no interface number 0
[  125.465779][ T6152] usb 6-1: too many endpoints for config 0 interface 72 altsetting 199: 192, using maximum allowed: 30
[  125.468935][ T6152] usb 6-1: config 0 interface 72 altsetting 199 has 0 endpoint descriptors, different from the interface descriptor's value: 192
[  125.473554][ T6152] usb 6-1: config 0 interface 72 has no altsetting 0
[  125.475042][T10411] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.478117][ T6152] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  125.482650][ T6152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.485276][ T6152] usb 6-1: Product: syz
[  125.486480][ T6152] usb 6-1: Manufacturer: syz
[  125.487807][ T6152] usb 6-1: SerialNumber: syz
[  125.490084][ T6152] usb 6-1: config 0 descriptor??
[  125.498741][   T39] audit: type=1400 audit(1737018011.927:998): avc:  denied  { read } for  pid=10470 comm="syz.0.1253" laddr=172.20.20.170 lport=38527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  125.567357][   T39] audit: type=1400 audit(1737018011.997:999): avc:  denied  { audit_write } for  pid=10470 comm="syz.0.1253" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  125.572285][T10411] veth0_vlan: entered promiscuous mode
[  125.575229][   T39] audit: type=1107 audit(1737018011.997:1000): pid=10470 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='X�l�i�Q�M�O�I9���S�z�7��ݼ�u7�ß�b�&��������@v�`to�j�J�<��ؑ��᫗rN~��A��zk�
�E�#��H�x���o�����Uc0j���o>��^��Q��8F�;^+CJ"���ÜM��
[  125.575229][   T39] ��w-F���Ėˮ,����֎
����O��e�*Nt�Xgn�'
[  125.579244][T10411] veth1_vlan: entered promiscuous mode
[  125.600791][T10411] veth0_macvtap: entered promiscuous mode
[  125.603829][T10411] veth1_macvtap: entered promiscuous mode
[  125.609970][T10411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.612932][T10411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.615702][T10411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.618624][T10411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.622708][T10411] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.626983][T10411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.630791][T10411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.633536][T10411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.636322][T10411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.639660][T10411] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.643695][T10411] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.646138][T10411] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.648593][T10411] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.651129][T10411] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.689010][  T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.691720][  T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.693349][ T5921] usb 6-1: USB disconnect, device number 9
[  125.714171][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.716466][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.724650][   T39] audit: type=1400 audit(1737018012.157:1001): avc:  denied  { mounton } for  pid=10411 comm="syz-executor" path="/syzkaller.RDOVyP/syz-tmp" dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  125.731776][   T39] audit: type=1400 audit(1737018012.157:1002): avc:  denied  { mounton } for  pid=10411 comm="syz-executor" path="/syzkaller.RDOVyP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  125.739184][   T39] audit: type=1400 audit(1737018012.157:1003): avc:  denied  { mounton } for  pid=10411 comm="syz-executor" path="/syzkaller.RDOVyP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=33399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  125.747397][   T39] audit: type=1400 audit(1737018012.167:1004): avc:  denied  { mounton } for  pid=10411 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  125.858069][   T39] audit: type=1400 audit(1737018012.287:1005): avc:  denied  { name_bind } for  pid=10493 comm="syz.3.1255" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  126.049645][T10517] 9pnet: Could not find request transport: fd{�Y amF��۱G#���
[  126.049645][T10517] ���|�|���R�T
[  126.083355][T10522] ERROR: device name not specified.
[  126.403359][   T39] audit: type=1400 audit(1737018012.837:1006): avc:  denied  { connect } for  pid=10534 comm="syz.3.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  126.460137][ T5916] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  126.479586][T10543] binder: BINDER_SET_CONTEXT_MGR already set
[  126.482492][T10543] binder: 10539:10543 ioctl 40046207 0 returned -16
[  126.497731][T10545] gtp0: entered allmulticast mode
[  126.540009][ T5916] Bluetooth: hci1: command tx timeout
[  126.573157][T10551] netlink: 'syz.1.1268': attribute type 1 has an invalid length.
[  126.618301][T10555] fuse: Bad value for 'fd'
[  126.668734][T10551] bond5: entered allmulticast mode
[  126.671139][T10551] 8021q: adding VLAN 0 to HW filter on device bond5
[  126.678800][T10557] bond5: (slave ip6gretap2): making interface the new active one
[  126.681992][T10557] ip6gretap2: entered allmulticast mode
[  126.684590][T10557] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link
[  126.713608][T10564] usb usb8: usbfs: process 10564 (syz.1.1273) did not claim interface 0 before use
[  126.755687][T10573] (syz.1.1275,10573,3):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "grpquotaE" or missing value
[  126.759560][T10573] (syz.1.1275,10573,3):ocfs2_fill_super:1178 ERROR: status = -22
[  126.887708][T10584] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=10584 comm=syz.1.1280
[  127.690632][T10590] unknown channel width for channel at 909000KHz?
[  127.734553][T10601] __nla_validate_parse: 3 callbacks suppressed
[  127.734568][T10601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1284'.
[  127.743426][T10601] tipc: Invalid UDP bearer configuration
[  127.743456][T10601] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  127.776211][T10609] netlink: 'syz.3.1288': attribute type 2 has an invalid length.
[  127.779276][T10609] netlink: 'syz.3.1288': attribute type 1 has an invalid length.
[  127.783749][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'.
[  127.788244][T10609] netlink: 'syz.3.1288': attribute type 10 has an invalid length.
[  127.821096][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.825391][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.829280][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.836394][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.839213][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.842333][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.950906][T10621] SELinux: syz.4.1291 (10621) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  127.951685][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'.
[  127.956237][T10621] overlayfs: failed to resolve './file1': -2
[  128.005168][T10627] delete_channel: no stack
[  128.059060][T10634] pim6reg1: entered promiscuous mode
[  128.061625][T10634] pim6reg1: entered allmulticast mode
[  128.137053][T10637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1296'.
[  128.362358][T10645] bond0: (slave syz_tun): Releasing backup interface
[  128.560772][T10652] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1302'.
[  128.619847][ T5916] Bluetooth: hci1: command tx timeout
[  128.675942][T10666] netlink: 'syz.4.1306': attribute type 17 has an invalid length.
[  128.678825][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'.
[  128.682555][T10666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1306'.
[  128.783542][T10675] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1307'.
[  128.819592][T10674] trusted_key: encrypted_key: insufficient parameters specified
[  129.229986][ T5976] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  129.391556][ T5976] usb 5-1: not running at top speed; connect to a high speed hub
[  129.395506][ T5976] usb 5-1: config 0 has an invalid interface number: 228 but max is 1
[  129.398599][ T5976] usb 5-1: config 0 has an invalid interface number: 147 but max is 1
[  129.401699][ T5976] usb 5-1: config 0 has an invalid interface number: 63 but max is 1
[  129.404691][ T5976] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  129.408135][ T5976] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  129.412095][ T5976] usb 5-1: config 0 has 3 interfaces, different from the descriptor's value: 2
[  129.415427][ T5976] usb 5-1: config 0 has no interface number 0
[  129.417579][ T5976] usb 5-1: config 0 has no interface number 1
[  129.419689][ T5976] usb 5-1: config 0 has no interface number 2
[  129.422389][ T5976] usb 5-1: config 0 interface 228 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  129.426289][ T5976] usb 5-1: config 0 interface 228 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  129.430386][ T5976] usb 5-1: config 0 interface 228 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  129.435123][ T5976] usb 5-1: too many endpoints for config 0 interface 147 altsetting 10: 117, using maximum allowed: 30
[  129.439095][ T5976] usb 5-1: config 0 interface 147 altsetting 10 has an endpoint descriptor with address 0x92, changing to 0x82
[  129.443416][ T5976] usb 5-1: config 0 interface 147 altsetting 10 endpoint 0x82 has invalid maxpacket 59066, setting to 64
[  129.447328][ T5976] usb 5-1: config 0 interface 147 altsetting 10 has a duplicate endpoint with address 0x1, skipping
[  129.451641][ T5976] usb 5-1: config 0 interface 147 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 117
[  129.456417][ T5976] usb 5-1: config 0 interface 63 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  129.461207][ T5976] usb 5-1: config 0 interface 228 has no altsetting 0
[  129.463688][ T5976] usb 5-1: config 0 interface 147 has no altsetting 0
[  129.466186][ T5976] usb 5-1: config 0 interface 63 has no altsetting 0
[  129.470580][ T5976] usb 5-1: New USB device found, idVendor=05c6, idProduct=9003, bcdDevice=a6.d6
[  129.473940][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.476846][ T5976] usb 5-1: Product: 秀⼦ሕ쎨훮঺ಜ鎓댶鸧慙艶葾봀ᖴ첄렳ړ⧪鎡烽缽᦮宥౼觗
[  129.481710][ T5976] usb 5-1: Manufacturer: Ѝ
[  129.483402][ T5976] usb 5-1: SerialNumber: 槴渏㑃쫷夷罈⣡⤫㼗䤳䁴䄡ྫ흯猨櫯㘍맿경豉剔锭瑛ꉐ盓枭ⱘ堛狄ﾶ朏质쏒䰢쯭ϻ睓䶺酵꜂맇㍃〲ພ滦䗔易殶貼탦襃巻盅삟僅娄護聢ⵒ毅荜䡪㾙惕Ｎ시蘐씼喼픶ㄩ鬏贵䴦쉇薢捧鮦靜칄칤쯢㸢⠗䕴掜㓆ﶖ
[  129.495799][ T5976] usb 5-1: config 0 descriptor??
[  129.498244][T10685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  129.624480][T10696] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  129.627034][T10696] overlayfs: missing 'lowerdir'
[  129.704099][T10700] misc userio: The device must be registered before sending interrupts
[  129.707101][T10685] misc userio: The device must be registered before sending interrupts
[  129.714067][ T5976] option 5-1:0.228: GSM modem (1-port) converter detected
[  129.720281][ T5976] option 5-1:0.147: GSM modem (1-port) converter detected
[  129.724723][ T5976] option 5-1:0.63: GSM modem (1-port) converter detected
[  129.730970][ T5976] usb 5-1: USB disconnect, device number 25
[  129.739422][ T5976] option 5-1:0.228: device disconnected
[  129.742012][ T5976] option 5-1:0.147: device disconnected
[  129.745204][ T5976] option 5-1:0.63: device disconnected
[  129.955438][T10710] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1319'.
[  129.997986][T10720] block nbd1: NBD_DISCONNECT
[  130.150675][T10726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1326'.
[  130.254127][T10738] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  130.463467][T10772] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  130.465486][T10772] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  130.468301][T10772] vhci_hcd vhci_hcd.0: Device attached
[  130.471677][T10754] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10)
[  130.473699][T10754] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  130.475997][T10754] vhci_hcd vhci_hcd.0: Device attached
[  130.487836][   T39] kauditd_printk_skb: 23 callbacks suppressed
[  130.487845][   T39] audit: type=1400 audit(1737018016.917:1030): avc:  denied  { write } for  pid=10777 comm="syz.0.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  130.545926][T10782] netlink: 'syz.1.1339': attribute type 9 has an invalid length.
[  130.654222][   T39] audit: type=1400 audit(1737018017.087:1031): avc:  denied  { accept } for  pid=10798 comm="syz.0.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  130.660449][   T39] audit: type=1400 audit(1737018017.097:1032): avc:  denied  { read } for  pid=10798 comm="syz.0.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  130.709976][ T5916] Bluetooth: hci1: command tx timeout
[  130.710088][    T9] usb 45-1: new high-speed USB device number 2 using vhci_hcd
[  131.235336][T10773] vhci_hcd: connection reset by peer
[  131.235493][T10775] vhci_hcd: connection closed
[  131.241177][ T9052] vhci_hcd: stop threads
[  131.244844][ T9052] vhci_hcd: release socket
[  131.246694][ T9052] vhci_hcd: disconnect device
[  131.248717][ T9052] vhci_hcd: stop threads
[  131.250673][ T9052] vhci_hcd: release socket
[  131.252857][ T9052] vhci_hcd: disconnect device
[  131.743940][T10828] netlink: 'syz.0.1352': attribute type 10 has an invalid length.
[  131.776507][T10830] tmpfs: Bad value for 'mpol'
[  131.801539][T10828] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  131.858961][T10834] vti0: entered allmulticast mode
[  131.890795][T10840] bridge0: entered allmulticast mode
[  132.022925][T10857] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.298381][T10875] netlink: 'syz.1.1367': attribute type 178 has an invalid length.
[  132.346740][T10889] openvswitch: netlink: Unknown key attributes 20
[  132.441407][T10904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.541768][ T1414] ieee802154 phy0 wpan0: encryption failed: -22
[  132.544373][ T1414] ieee802154 phy1 wpan1: encryption failed: -22
[  132.719217][ T5916] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  132.779903][ T5916] Bluetooth: hci1: command tx timeout
[  132.951821][T10950] netlink: 'syz.4.1378': attribute type 1 has an invalid length.
[  132.955282][T10950] __nla_validate_parse: 9 callbacks suppressed
[  132.955293][T10950] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1378'.
[  132.976863][T10958] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  132.979345][T10958] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  132.984065][T10958] netlink: 'syz.0.1379': attribute type 10 has an invalid length.
[  133.014523][T10960] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1380'.
[  133.017354][T10960] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1380'.
[  133.040857][T10957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.061952][   T39] audit: type=1400 audit(1737018019.497:1033): avc:  denied  { write } for  pid=10959 comm="syz.1.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  133.061955][T10960] ieee802154 phy0 wpan0: encryption failed: -22
[  133.076529][T10960] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1380'.
[  133.115519][T10966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1383'.
[  133.119130][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'.
[  133.156121][   T39] audit: type=1400 audit(1737018019.587:1034): avc:  denied  { bind } for  pid=10968 comm="syz.1.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  133.156640][T10969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1384'.
[  133.213500][T10971] cgroup: fork rejected by pids controller in /syz3
[  133.365322][T11120] 9pnet_fd: p9_fd_create_unix (11120): problem connecting socket: �q�Y�3aK: -111
[  133.422954][T11125] input: syz0 as /devices/virtual/input/input19
[  133.471987][T11125] netlink: 'syz.3.1393': attribute type 21 has an invalid length.
[  133.612255][T11142] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  133.617417][T11142] cramfs: wrong magic
[  133.634187][T11144] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  133.790262][T11154] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1402'.
[  133.802519][   T39] audit: type=1400 audit(1737018020.227:1035): avc:  denied  { write } for  pid=11156 comm="syz.1.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  133.855234][T11166] netlink: 'syz.1.1405': attribute type 1 has an invalid length.
[  133.858172][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'.
[  133.880270][T11162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.881430][T11154] netlink: 'syz.4.1402': attribute type 4 has an invalid length.
[  133.886494][T11154] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1402'.
[  133.903596][T11163] netlink: 'syz.4.1402': attribute type 4 has an invalid length.
[  134.388435][   T39] audit: type=1400 audit(1737018020.817:1036): avc:  denied  { wake_alarm } for  pid=11199 comm="syz.4.1416" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  134.420343][T11201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34576 sclass=netlink_route_socket pid=11201 comm=syz.3.1415
[  134.475109][T11200] syzkaller0: entered promiscuous mode
[  134.477346][T11200] syzkaller0: entered allmulticast mode
[  134.482180][ T9063] syzkaller0: tun_net_xmit 48
[  134.487065][T11200] syzkaller0: tun_chr_ioctl cmd 1074025677
[  134.489420][T11200] syzkaller0: Linktype set failed because interface is up
[  134.496147][   T39] audit: type=1400 audit(1737018020.927:1037): avc:  denied  { getopt } for  pid=11204 comm="syz.0.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  134.504613][T11205] fuse: Unknown parameter 'audit'
[  135.287897][T11213] netlink: 'syz.3.1419': attribute type 1 has an invalid length.
[  135.293803][   T39] audit: type=1400 audit(1737018021.727:1038): avc:  denied  { bind } for  pid=11211 comm="syz.3.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  135.822473][    T9] vhci_hcd: vhci_device speed not set
[  136.631928][T11219] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  136.634532][T11219] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  136.761115][T11218] /dev/sr0: Can't open blockdev
[  147.232456][T11208] tipc: Started in network mode
[  147.233953][T11208] tipc: Node identity ac1414aa, cluster identity 4711
[  147.236192][T11208] tipc: Enabled bearer <udp:s>, priority 10
[  147.238040][T11212] bridge_slave_0: default FDB implementation only supports local addresses
[  147.274002][   T39] audit: type=1400 audit(1737018033.707:1039): avc:  denied  { write } for  pid=11222 comm="syz.0.1421" name="file0" dev="tmpfs" ino=1718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  147.283086][   T39] audit: type=1400 audit(1737018033.707:1040): avc:  denied  { open } for  pid=11222 comm="syz.0.1421" path="/320/file0" dev="tmpfs" ino=1718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  147.296189][   T39] audit: type=1400 audit(1737018033.727:1041): avc:  denied  { getopt } for  pid=11224 comm="syz.1.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  147.374506][T11235] x_tables: duplicate underflow at hook 1
[  147.378149][T11234] syzkaller1: entered promiscuous mode
[  147.379872][T11234] syzkaller1: entered allmulticast mode
[  147.407422][T11242] sch_fq: defrate 0 ignored.
[  147.527482][T11249] sp0: Synchronizing with TNC
[  147.702767][T11256] snd_dummy snd_dummy.0: control 1:5:65266:syz1:134217728 is already present
[  147.715665][T11256] __nla_validate_parse: 5 callbacks suppressed
[  147.715675][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'.
[  147.719891][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1430'.
[  147.945598][   T39] audit: type=1400 audit(1737018034.377:1042): avc:  denied  { name_bind } for  pid=11264 comm="syz.4.1432" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  147.951603][   T39] audit: type=1400 audit(1737018034.377:1043): avc:  denied  { node_bind } for  pid=11264 comm="syz.4.1432" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  148.202329][T11281] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  148.299579][T11284] validate_nla: 1 callbacks suppressed
[  148.299589][T11284] netlink: 'syz.4.1439': attribute type 1 has an invalid length.
[  148.311525][T11284] 8021q: adding VLAN 0 to HW filter on device bond1
[  148.320793][   T39] audit: type=1326 audit(1737018034.757:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.3.1429" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7f585d29 code=0x7fc00000
[  148.322743][T11284] bond1: (slave gretap1): making interface the new active one
[  148.331658][T11284] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  148.336320][T11284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1439'.
[  148.349910][ T1016] tipc: Node number set to 2886997162
[  148.352622][   T39] audit: type=1400 audit(1737018034.787:1045): avc:  denied  { map } for  pid=11290 comm="syz.1.1441" path="pipe:[37575]" dev="pipefs" ino=37575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  148.386995][T11296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1442'.
[  148.396296][T11299] loop6: detected capacity change from 0 to 524287999
[  148.400678][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.403419][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.406389][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.409013][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.412537][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.415166][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.417479][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.420096][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.422413][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.424958][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.427213][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.429875][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.432291][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.434930][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.437317][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.439879][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.442083][T11299] ldm_validate_partition_table(): Disk read failed.
[  148.444065][    C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.446674][T11302] netlink: 'syz.3.1443': attribute type 9 has an invalid length.
[  148.446682][    C3] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.449016][T11302] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1443'.
[  148.451358][    C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  148.451373][    C2] Buffer I/O error on dev loop6, logical block 0, async page read
[  148.459230][T11299] Dev loop6: unable to read RDB block 0
[  148.466696][T11299]  loop6: unable to read partition table
[  148.468397][T11299] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  148.482070][ T5352] ldm_validate_partition_table(): Disk read failed.
[  148.484648][ T5352] Dev loop6: unable to read RDB block 0
[  148.486619][ T5352]  loop6: unable to read partition table
[  148.627297][T11342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1450'.
[  148.691946][T11354] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1459'.
[  148.757648][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'.
[  148.760195][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'.
[  148.763368][T11363] wg1: entered promiscuous mode
[  148.790687][T11369] xt_ipcomp: unknown flags 12
[  149.080431][  T830] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[  149.241025][  T830] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  149.243493][  T830] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  149.245806][  T830] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  149.248378][  T830] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  149.251620][  T830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  149.254605][  T830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  149.257342][  T830] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  149.263583][  T830] usb 6-1: string descriptor 0 read error: -22
[  149.265404][  T830] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  149.267918][  T830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.271341][  T830] usb 6-1: config 0 descriptor??
[  149.273778][  T830] hub 6-1:0.0: bad descriptor, ignoring hub
[  149.275415][  T830] hub 6-1:0.0: probe with driver hub failed with error -5
[  149.278307][  T830] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input20
[  149.474422][   T39] audit: type=1400 audit(1737018035.907:1046): avc:  denied  { append } for  pid=11371 comm="syz.1.1464" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  149.481226][   T39] audit: type=1400 audit(1737018035.907:1047): avc:  denied  { ioctl } for  pid=11371 comm="syz.1.1464" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  149.540873][   T39] audit: type=1326 audit(1737018035.977:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11392 comm="syz.4.1471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5b985d29 code=0x7ffc0000
[  149.554648][T11396] IPv6: addrconf: prefix option has invalid lifetime
[  149.631423][ T5921] IPVS: starting estimator thread 0...
[  149.714058][T11405] virtio-fs: tag <(null)> not found
[  149.721461][ T5976] usb 6-1: USB disconnect, device number 10
[  149.738572][T11407] xt_l2tp: invalid flags combination: c
[  149.740129][T11402] IPVS: using max 38 ests per chain, 91200 per kthread
[  149.883577][T11412] could not allocate digest TFM handle hmac(crct10dif-pclmul)
[  149.916888][T11424] 9pnet_fd: Insufficient options for proto=fd
[  149.956489][T11427] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1478'.
[  150.148694][T11437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.202628][T11443] netlink: 'syz.3.1482': attribute type 3 has an invalid length.
[  150.205775][T11443] netlink: 'syz.3.1482': attribute type 1 has an invalid length.
[  150.208255][T11443] NCSI netlink: No device for ifindex 33022
[  150.245252][T11445] IPv6: sit2: Disabled Multicast RS
[  150.273751][T11449] netlink: 'syz.0.1485': attribute type 21 has an invalid length.
[  150.276095][T11449] netlink: 'syz.0.1485': attribute type 4 has an invalid length.
[  150.278325][T11449] netlink: 'syz.0.1485': attribute type 5 has an invalid length.
[  150.282681][T11449] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  150.285296][T11449] overlayfs: missing 'lowerdir'
[  150.391815][T11451] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.395097][T11451] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.528249][T11453] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  150.530165][T11453] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  150.531263][T11451] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.535316][T11451] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.551187][T11453] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  150.648110][T11486] netlink: 'syz.4.1494': attribute type 13 has an invalid length.
[  150.674243][T11451] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.677152][T11451] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.791087][T11451] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.793918][T11451] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.873943][T11508] erofs (device loop4): cannot find valid erofs superblock
[  150.984858][T11451] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  150.987388][T11451] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.033498][T11451] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  151.039821][T11451] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.048874][T11451] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  151.049229][T11514] could not allocate digest TFM handle cryptd(blake2b-160)
[  151.051924][T11451] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.063491][T11451] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  151.065876][T11451] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.103120][T11530] xt_hashlimit: size too large, truncated to 1048576
[  151.196451][T11536] Bluetooth: MGMT ver 1.23
[  151.736839][T11577] sp0: Synchronizing with TNC
[  151.760491][T11579] tipc: Enabled bearer <eth:wg2>, priority 10
[  151.916101][T11602] mkiss: ax0: crc mode is auto.
[  151.922953][T11602] sp0: Synchronizing with TNC
[  151.954812][T11605] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.218978][T11636] fuse: Bad value for 'fd'
[  152.223254][T11636] fuse: Bad value for 'fd'
[  152.225487][T11636] fuse: Bad value for 'fd'
[  152.226933][T11636] fuse: Bad value for 'fd'
[  152.228298][T11636] fuse: Bad value for 'fd'
[  152.229670][T11636] fuse: Bad value for 'fd'
[  152.233498][T11636] fuse: Bad value for 'fd'
[  152.234899][T11636] fuse: Bad value for 'fd'
[  152.283740][T11650] overlayfs: conflicting options: nfs_export=on,index=off
[  152.449506][   T39] kauditd_printk_skb: 52 callbacks suppressed
[  152.449522][   T39] audit: type=1400 audit(1737018038.877:1101): avc:  denied  { remove_name } for  pid=11678 comm="syz.1.1548" name="control" dev="9p" ino=40239607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  152.460811][   T39] audit: type=1400 audit(1737018038.877:1102): avc:  denied  { rmdir } for  pid=11678 comm="syz.1.1548" name="control" dev="9p" ino=40239607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  152.540447][ T5916] Bluetooth: hci1: command 0x0c1a tx timeout
[  152.594966][T11683] netlink: 'syz.4.1550': attribute type 10 has an invalid length.
[  152.606616][T11683] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  152.670338][T11690] openvswitch: netlink: Tunnel attr 222 out of range max 16
[  152.945135][ T5916] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  153.277551][T11714] loop6: detected capacity change from 0 to 524287999
[  153.281929][T11714] ldm_validate_partition_table(): Disk read failed.
[  153.285938][T11714] Dev loop6: unable to read RDB block 0
[  153.288518][T11714]  loop6: unable to read partition table
[  153.293225][T11714] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  153.477092][T11723] __nla_validate_parse: 9 callbacks suppressed
[  153.477102][T11723] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1563'.
[  153.482403][   T39] audit: type=1400 audit(1737018039.917:1103): avc:  denied  { ioctl } for  pid=11722 comm="syz.4.1563" path="socket:[39367]" dev="sockfs" ino=39367 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  153.498369][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'.
[  153.584575][   T39] audit: type=1400 audit(1737018040.017:1104): avc:  denied  { execute } for  pid=11731 comm="syz.0.1565" path="pipe:[38512]" dev="pipefs" ino=38512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  153.636328][   T39] audit: type=1400 audit(1737018040.067:1105): avc:  denied  { mount } for  pid=11741 comm="syz.4.1566" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  153.639942][T11742] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  153.645649][T11742] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  153.652047][T11742] overlay: filesystem on ./bus not supported as upperdir
[  153.652209][   T39] audit: type=1400 audit(1737018040.087:1106): avc:  denied  { mounton } for  pid=11741 comm="syz.4.1566" path="/111/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1
[  153.680024][   T39] audit: type=1400 audit(1737018040.117:1107): avc:  denied  { unmount } for  pid=10411 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  153.713123][   T39] audit: type=1326 audit(1737018040.147:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11755 comm="syz.4.1569" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d5b985d29 code=0x0
[  153.848775][T11768] gtp0: entered promiscuous mode
[  153.853151][T11768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=11768 comm=syz.1.1573
[  153.857854][T11768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=11768 comm=syz.1.1573
[  153.862617][T11768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=11768 comm=syz.1.1573
[  153.868214][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'.
[  153.993203][   T39] audit: type=1400 audit(1737018040.427:1109): avc:  denied  { write } for  pid=11779 comm="syz.3.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  153.995428][T11780] binder: 11779:11780 ioctl c0306201 20000080 returned -14
[  154.002391][   T39] audit: type=1400 audit(1737018040.437:1110): avc:  denied  { bind } for  pid=11779 comm="syz.3.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  154.031334][T11783] syz.3.1577[11783] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  154.031381][T11783] syz.3.1577[11783] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  154.034706][T11783] syz.3.1577[11783] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  154.042349][T11783] binder: 11782:11783 ioctl 40046205 0 returned -22
[  154.208068][T11795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1581'.
[  154.211775][T11795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11795 comm=syz.1.1581
[  154.216365][T11796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1581'.
[  154.216889][T11795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11795 comm=syz.1.1581
[  154.292017][T11802] "syz.1.1583" (11802) uses obsolete ecb(arc4) skcipher
[  154.374359][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1586'.
[  154.399582][T11818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1588'.
[  154.402466][T11819] netlink: 'syz.0.1587': attribute type 2 has an invalid length.
[  154.406989][T11819] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1587'.
[  154.620475][T11839] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  154.629896][ T5916] Bluetooth: hci1: command 0x0c1a tx timeout
[  155.462219][T11875] program syz.0.1600 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  155.559345][T11886] syz.0.1603: attempt to access beyond end of device
[  155.559345][T11886] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0
[  155.564414][T11886] EXT4-fs (nbd0): unable to read superblock
[  155.653520][T11890] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.656461][T11890] syzkaller0: mtu less than device minimum
[  155.817423][T11897] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  155.824660][T11897] xt_time: invalid argument - start or stop time greater than 23:59:59
[  155.832395][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'.
[  155.834978][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'.
[  156.672789][T11908] Invalid source name
[  156.700118][ T5916] Bluetooth: hci1: command 0x0c1a tx timeout
[  156.702621][T11911] netlink: 'syz.0.1613': attribute type 10 has an invalid length.
[  157.652744][T11930] ata1.00: invalid multi_count 128 ignored
[  157.802982][T11946] vlan3: entered promiscuous mode
[  157.805385][T11946] bond0: entered promiscuous mode
[  157.807381][T11946] bond_slave_0: entered promiscuous mode
[  157.809515][T11946] bond_slave_1: entered promiscuous mode
[  157.852191][T11946] bond0: left promiscuous mode
[  157.853670][T11946] bond_slave_0: left promiscuous mode
[  157.856550][T11946] bond_slave_1: left promiscuous mode
[  157.874205][   T39] kauditd_printk_skb: 2 callbacks suppressed
[  157.874214][   T39] audit: type=1400 audit(1737018044.307:1113): avc:  denied  { watch_mount } for  pid=11959 comm="syz.3.1630" path="/351" dev="tmpfs" ino=1912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  157.904358][T11963] bpf: Bad value for 'gid'
[  157.940313][   T39] audit: type=1800 audit(1737018044.367:1114): pid=11967 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1632" name="file1" dev="overlay" ino=1935 res=0 errno=0
[  157.942185][T11967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=11967 comm=syz.3.1632
[  158.020790][T11980] netlink: 'syz.3.1636': attribute type 1 has an invalid length.
[  158.065615][   T39] audit: type=1400 audit(1737018044.497:1115): avc:  denied  { setopt } for  pid=11976 comm="syz.1.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  158.083054][T11957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.149399][T11997] netlink: 'syz.1.1639': attribute type 2 has an invalid length.
[  158.213884][T11957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.234684][T12004] SELinux: syz.1.1641 (12004) set checkreqprot to 1. This is no longer supported.
[  158.234706][   T39] audit: type=1400 audit(1737018044.667:1116): avc:  denied  { setcheckreqprot } for  pid=12002 comm="syz.1.1641" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  158.361613][T11957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.374302][T12017] wlan1: mtu less than device minimum
[  158.503927][T11957] bond0: (slave netdevsim0): Releasing backup interface
[  158.546905][T11957] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.765499][T11957] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.783691][T11957] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.800774][T11957] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.815314][T11957] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.932565][T12042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.936157][ T5916] Bluetooth: hci1: unexpected event for opcode 0x0c7b
[  159.158787][T12052] __nla_validate_parse: 2 callbacks suppressed
[  159.158824][T12052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1653'.
[  159.163737][T12052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1653'.
[  159.337639][T12067] sch_tbf: burst 3936 is lower than device lo mtu (32783) !
[  159.449406][   T39] audit: type=1400 audit(1737018045.877:1117): avc:  denied  { remount } for  pid=12071 comm="syz.4.1658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  159.700152][   T56] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  159.834196][   T56] usb 9-1: device descriptor read/64, error -71
[  160.069887][   T56] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  160.204546][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'.
[  160.210221][   T56] usb 9-1: device descriptor read/64, error -71
[  160.251343][T12085] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1663'.
[  160.276542][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.278888][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.283092][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.286055][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.288287][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.291003][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.293263][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.296654][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.299624][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.301255][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1662'.
[  160.304927][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.307365][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.309728][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.312031][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.314336][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.316615][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.318932][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.321453][   T56] usb usb9-port1: attempt power cycle
[  160.323378][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.325806][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.328227][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.330690][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.333276][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.335574][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.337847][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.342432][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.345046][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.347770][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.350351][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.353237][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.356086][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.358602][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.361381][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.363733][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.366162][T12087] overlayfs: conflicting options: metacopy=off,verity=on
[  160.670185][   T56] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  160.693810][   T56] usb 9-1: device descriptor read/8, error -71
[  160.859969][ T1016] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  160.929870][   T56] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  160.952897][   T56] usb 9-1: device descriptor read/8, error -71
[  161.030110][ T1016] usb 6-1: Using ep0 maxpacket: 8
[  161.033250][ T1016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  161.036812][ T1016] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  161.039504][ T1016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.043483][ T1016] usb 6-1: config 0 descriptor??
[  161.070195][   T56] usb usb9-port1: unable to enumerate USB device
[  161.223751][   T39] audit: type=1400 audit(1737018047.657:1118): avc:  denied  { write } for  pid=12112 comm="syz.0.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  161.246938][ T1016] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  161.334313][T12128] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1674'.
[  161.336906][T12128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1674'.
[  161.373850][T12129] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.473563][  T830] usb 6-1: USB disconnect, device number 11
[  161.493185][T12134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1677'.
[  161.506982][T12134] syz.0.1677: attempt to access beyond end of device
[  161.506982][T12134] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0
[  161.514232][T12134] FAT-fs (nbd0): unable to read boot sector
[  161.551502][T12140] netlink: 'syz.0.1680': attribute type 1 has an invalid length.
[  161.596069][T12146] netlink: 'syz.1.1682': attribute type 1 has an invalid length.
[  161.599201][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'.
[  161.604096][T12146] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1682'.
[  161.881277][T12155] netlink: 'syz.1.1683': attribute type 3 has an invalid length.
[  161.883928][T12155] netlink: 'syz.1.1683': attribute type 2 has an invalid length.
[  161.891396][T12155] bridge0: entered promiscuous mode
[  161.893076][T12155] bridge0: entered allmulticast mode
[  162.192659][T12162] netlink: 'syz.3.1686': attribute type 3 has an invalid length.
[  162.271328][T12171] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  162.496842][T12185] openvswitch: netlink: EtherType 0 is less than min 600
[  162.593513][ T5916] Bluetooth: hci1: unexpected event for opcode 0x080d
[  162.600094][T12196] netlink: 'syz.4.1698': attribute type 29 has an invalid length.
[  162.604156][T12198] netlink: 'syz.4.1698': attribute type 29 has an invalid length.
[  162.645623][   T39] audit: type=1400 audit(1737018305.076:1119): avc:  denied  { shutdown } for  pid=12201 comm="syz.4.1699" lport=44047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  162.881703][T12208] netlink: 'syz.3.1700': attribute type 11 has an invalid length.
[  163.010976][T12212] input input22: cannot allocate more than FF_MAX_EFFECTS effects
[  163.033146][T12215] xt_hashlimit: size too large, truncated to 1048576
[  163.145002][   T39] audit: type=1326 audit(1737018305.576:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.4.1707" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d5b985d29 code=0x0
[  163.286690][T12235] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  163.294040][T12234] overlayfs: failed to decode file handle (len=1, type=0, flags=0, err=-22)
[  163.300064][   T39] audit: type=1400 audit(1737018305.726:1121): avc:  denied  { setattr } for  pid=12233 comm="syz.1.1710" name="video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  163.343546][T12240] bond0: Error: Cannot enslave bond to itself.
[  163.343552][   T39] audit: type=1400 audit(1737018305.776:1122): avc:  denied  { ioctl } for  pid=12239 comm="syz.3.1712" path="socket:[42451]" dev="sockfs" ino=42451 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  163.374858][T12244] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  163.499934][ T3225] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  163.659903][ T3225] usb 9-1: Using ep0 maxpacket: 16
[  163.664400][ T3225] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  163.667445][ T3225] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.670864][ T3225] usb 9-1: Product: syz
[  163.672123][ T3225] usb 9-1: Manufacturer: syz
[  163.673684][ T3225] usb 9-1: SerialNumber: syz
[  163.677668][ T3225] r8152-cfgselector 9-1: Unknown version 0x0000
[  163.679486][ T3225] r8152-cfgselector 9-1: config 0 descriptor??
[  163.959502][T12282] tmpfs: Bad value for 'mode'
[  163.963883][T12282] tmpfs: Bad value for 'mode'
[  164.177158][T12306] __nla_validate_parse: 16 callbacks suppressed
[  164.177169][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1730'.
[  164.989414][T12314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.993310][T12314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.229946][   T25] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  165.369813][   T25] usb 5-1: device descriptor read/64, error -71
[  165.609828][   T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  165.759830][   T25] usb 5-1: device descriptor read/64, error -71
[  165.880354][   T25] usb usb5-port1: attempt power cycle
[  166.164840][ T3225] r8152-cfgselector 9-1: Unknown version 0x0000
[  166.166867][ T3225] r8152-cfgselector 9-1: bad CDC descriptors
[  166.174053][ T3225] r8152-cfgselector 9-1: USB disconnect, device number 6
[  166.239946][   T25] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  166.270433][   T25] usb 5-1: device descriptor read/8, error -71
[  166.336499][T12327] "syz.1.1735" (12327) uses obsolete ecb(arc4) skcipher
[  166.453596][T12333] sch_tbf: burst 19872 is lower than device lo mtu (32783) !
[  166.510282][   T25] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  166.530378][   T25] usb 5-1: device descriptor read/8, error -71
[  166.619979][ T5916] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  166.623457][ T5916] Bluetooth: hci1: Injecting HCI hardware error event
[  166.627003][ T5916] Bluetooth: hci1: hardware error 0x00
[  166.632139][ T3225] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  166.639925][   T25] usb usb5-port1: unable to enumerate USB device
[  166.687341][T12336] openvswitch: netlink: Key type 29 is not supported
[  166.759895][ T3225] usb 9-1: device descriptor read/64, error -71
[  166.821801][T12339] batadv0: entered promiscuous mode
[  166.900215][T12339] team0: entered promiscuous mode
[  166.901767][T12339] team_slave_0: entered promiscuous mode
[  166.904175][T12339] team_slave_1: entered promiscuous mode
[  166.905903][T12339] geneve0: entered promiscuous mode
[  166.940184][T12339] hsr1: entered promiscuous mode
[  166.941754][T12339] hsr1: entered allmulticast mode
[  166.943278][T12339] batadv0: entered allmulticast mode
[  166.944915][T12339] team0: entered allmulticast mode
[  166.946491][T12339] team_slave_0: entered allmulticast mode
[  166.948229][T12339] team_slave_1: entered allmulticast mode
[  166.950341][T12339] geneve0: entered allmulticast mode
[  166.999903][ T3225] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  167.129863][ T3225] usb 9-1: device descriptor read/64, error -71
[  167.249910][ T3225] usb usb9-port1: attempt power cycle
[  167.259830][    C0] af_packet: tpacket_rcv: packet too big, clamped from 120 to 4294967272. macoff=96
[  167.589817][ T3225] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  167.610237][ T3225] usb 9-1: device descriptor read/8, error -71
[  167.849845][ T3225] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  167.870249][ T3225] usb 9-1: device descriptor read/8, error -71
[  167.981340][ T3225] usb usb9-port1: unable to enumerate USB device
[  168.249647][   T39] audit: type=1400 audit(1737018310.676:1123): avc:  denied  { read } for  pid=12361 comm="syz.1.1745" path="socket:[45155]" dev="sockfs" ino=45155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  168.367671][T12368] JFS: discard option not supported on device
[  168.372011][T12368] syz.1.1747: attempt to access beyond end of device
[  168.372011][T12368] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[  168.378079][T12368] syz.1.1747: attempt to access beyond end of device
[  168.378079][T12368] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0
[  168.387296][T12368] Mount JFS Failure: -5
[  168.489716][T12372] bridge: RTM_NEWNEIGH with invalid ether address
[  168.635619][   T39] audit: type=1400 audit(1737018311.066:1124): avc:  denied  { accept } for  pid=12373 comm="syz.1.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  168.700755][ T5916] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  168.705375][T12379] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1751'.
[  168.818669][T12385] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1754'.
[  169.381622][T12401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1758'.
[  169.384333][T12401] tipc: Started in network mode
[  169.385785][T12401] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  169.388643][T12401] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  169.395706][T12401] tipc: Enabled bearer <udp:s>, priority 10
[  169.462563][T12404] fuse: Unknown parameter 'group_id	'
[  169.551945][   T39] audit: type=1400 audit(1737018311.986:1125): avc:  denied  { map } for  pid=12405 comm="syz.4.1760" path="socket:[44200]" dev="sockfs" ino=44200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  169.557826][   T39] audit: type=1400 audit(1737018311.986:1126): avc:  denied  { read accept } for  pid=12405 comm="syz.4.1760" path="socket:[44200]" dev="sockfs" ino=44200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  169.800274][   T56] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  169.953575][   T56] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  169.956113][   T56] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.959224][   T56] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  169.962135][   T56] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.966408][   T56] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  169.969035][   T56] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  169.971444][   T56] usb 9-1: Product: syz
[  169.972684][   T56] usb 9-1: Manufacturer: syz
[  169.975965][   T56] cdc_wdm 9-1:1.0: skipping garbage
[  169.977525][   T56] cdc_wdm 9-1:1.0: skipping garbage
[  169.980924][   T56] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  169.982700][   T56] cdc_wdm 9-1:1.0: Unknown control protocol
[  170.189892][T12406] team0: Device ipvlan2 failed to register rx_handler
[  170.265551][T12428] openvswitch: netlink: Invalid VLAN frame
[  170.272046][   T65] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  170.278658][   T65] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  170.282745][   T39] audit: type=1400 audit(1737018312.716:1127): avc:  denied  { map } for  pid=12431 comm="syz.3.1770" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  170.289529][   T39] audit: type=1400 audit(1737018312.716:1128): avc:  denied  { execute } for  pid=12431 comm="syz.3.1770" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  170.289699][   T65] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  170.302666][   T65] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  170.305256][   T65] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  170.307436][   T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  170.312048][T12435] sp0: Synchronizing with TNC
[  170.349970][ T5976] usb 9-1: USB disconnect, device number 11
[  170.389891][   T56] tipc: Node number set to 1
[  170.499627][T12448] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.1773'.
[  170.502629][T12448] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  170.516664][T12448] netlink: 'syz.3.1773': attribute type 1 has an invalid length.
[  170.519001][T12448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  170.521158][T12448] IPv6: NLM_F_CREATE should be set when creating new route
[  170.543808][T12429] chnl_net:caif_netlink_parms(): no params data found
[  170.610915][T12429] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.613807][T12429] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.616351][T12429] bridge_slave_0: entered allmulticast mode
[  170.619723][T12429] bridge_slave_0: entered promiscuous mode
[  170.623828][T12429] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.626764][T12429] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.629705][T12429] bridge_slave_1: entered allmulticast mode
[  170.633850][T12429] bridge_slave_1: entered promiscuous mode
[  170.653121][T12429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.656789][T12429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.681089][T12429] team0: Port device team_slave_0 added
[  170.684176][T12429] team0: Port device team_slave_1 added
[  170.702592][T12429] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.704438][T12429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.711600][T12429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.716375][T12429] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.718212][T12429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.726175][T12429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.731259][T12456] syzkaller1: entered promiscuous mode
[  170.732937][T12456] syzkaller1: entered allmulticast mode
[  170.792129][T12429] hsr_slave_0: entered promiscuous mode
[  170.860053][T12429] hsr_slave_1: entered promiscuous mode
[  170.899903][T12429] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.901996][T12429] Cannot create hsr debugfs directory
[  170.972936][T12470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=12470 comm=syz.4.1778
[  171.081792][T12429] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  171.085457][T12429] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  171.089347][T12429] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  171.092820][T12429] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  171.106505][T12429] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.109338][T12429] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.112295][T12429] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.115127][T12429] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.149132][T12429] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.158111][ T9063] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.164110][ T9063] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.179391][T12429] 8021q: adding VLAN 0 to HW filter on device team0
[  171.188046][ T9063] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.190291][ T9063] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.197615][  T103] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.200423][  T103] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.299990][T12490] loop2: detected capacity change from 0 to 7
[  171.302944][T12490] Dev loop2: unable to read RDB block 7
[  171.305056][T12490]  loop2: unable to read partition table
[  171.307348][T12490] loop2: partition table beyond EOD, truncated
[  171.310044][T12490] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  171.315346][T12490] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1782'.
[  171.318930][T12490] openvswitch: netlink: Flow actions attr not present in new flow.
[  171.322986][T12429] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.382229][T12502] cgroup: noprefix used incorrectly
[  171.432285][T12429] veth0_vlan: entered promiscuous mode
[  171.437490][T12429] veth1_vlan: entered promiscuous mode
[  171.450094][T12429] veth0_macvtap: entered promiscuous mode
[  171.453778][T12429] veth1_macvtap: entered promiscuous mode
[  171.463176][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.466231][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.469103][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.472287][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.475166][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.478169][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.481951][T12429] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.489690][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.494948][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.497859][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.502011][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.504837][T12429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.507969][T12429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.511678][T12429] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.515881][T12429] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.518533][T12429] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.521243][T12429] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.523727][T12429] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.575165][ T9070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.580420][ T9070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.589991][ T9063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.592308][ T9063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.606656][   T39] audit: type=1400 audit(1737018314.036:1129): avc:  denied  { append } for  pid=12508 comm="syz.3.1786" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  171.893477][T12529] netlink: 'syz.3.1791': attribute type 2 has an invalid length.
[  172.024787][   T39] audit: type=1400 audit(1737018314.456:1130): avc:  denied  { append } for  pid=12538 comm="syz.3.1794" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  172.031601][   T39] audit: type=1326 audit(1737018314.466:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.3.1794" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e7f585d29 code=0x0
[  172.054666][   T39] audit: type=1400 audit(1737018314.486:1132): avc:  denied  { getopt } for  pid=12542 comm="syz.5.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  172.379979][   T65] Bluetooth: hci3: command tx timeout
[  172.380839][  T830] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  172.402775][T12567] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1803'.
[  172.531252][  T830] usb 6-1: config 0 has an invalid interface number: 223 but max is 0
[  172.531343][T12569] kvm: pic: non byte write
[  172.533666][  T830] usb 6-1: config 0 has no interface number 0
[  172.540638][  T830] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=4e.28
[  172.543416][  T830] usb 6-1: New USB device strings: Mfr=61, Product=2, SerialNumber=3
[  172.545839][  T830] usb 6-1: Product: syz
[  172.547134][  T830] usb 6-1: Manufacturer: syz
[  172.548614][  T830] usb 6-1: SerialNumber: syz
[  172.553751][  T830] usb 6-1: config 0 descriptor??
[  172.558738][  T830] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.223/input/input23
[  172.758225][ T5337] bcm5974 6-1:0.223: could not read from device
[  172.802328][  T830] usb 6-1: USB disconnect, device number 12
[  173.053440][T12592] kvm: kvm [12591]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000
[  173.070491][T12592] kvm: kvm [12591]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111
[  173.077796][T12592] kvm: kvm [12591]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000
[  173.176817][T12615] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1814'.
[  173.179730][T12615] tipc: Invalid UDP bearer configuration
[  173.179907][T12615] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  173.184563][T12615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=12615 comm=syz.4.1814
[  173.369415][T12626] netlink: 'syz.4.1818': attribute type 4 has an invalid length.
[  173.376677][T12626] netlink: 'syz.4.1818': attribute type 4 has an invalid length.
[  173.514117][T12636] overlayfs: failed to verify upper root origin
[  173.580319][T12639] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1823'.
[  173.637562][   T39] kauditd_printk_skb: 1 callbacks suppressed
[  173.637577][   T39] audit: type=1800 audit(1737018316.066:1134): pid=12641 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1824" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0
[  173.641448][T12641] netlink: 'syz.3.1824': attribute type 11 has an invalid length.
[  173.660787][   T39] audit: type=1400 audit(1737018316.096:1135): avc:  denied  { map } for  pid=12640 comm="syz.3.1824" path="/dev/swradio6" dev="devtmpfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  173.684184][T12646] dlm: plock device version mismatch: kernel (1.2.0), user (2.2149711876.0)
[  174.242515][T12691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.244788][T12691] IPv6: NLM_F_CREATE should be set when creating new route
[  174.246917][T12691] IPv6: NLM_F_CREATE should be set when creating new route
[  174.353593][ T9070] Bluetooth: hci4: Frame reassembly failed (-84)
[  174.459851][ T5916] Bluetooth: hci3: command tx timeout
[  174.478103][T12706] syz.4.1844 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  174.608571][T12712] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1846'.
[  174.624040][   T39] audit: type=1400 audit(1737018317.056:1136): avc:  denied  { unmount } for  pid=10411 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  175.003779][T12733] xt_hashlimit: size too large, truncated to 1048576
[  175.419608][T12737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1853'.
[  175.476152][T12739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1853'.
[  175.794875][T12753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48502 sclass=netlink_route_socket pid=12753 comm=syz.3.1858
[  175.832962][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1859'.
[  175.835618][T12756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1859'.
[  175.838503][T12756] netlink: 'syz.3.1859': attribute type 7 has an invalid length.
[  175.929537][T12765] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1861'.
[  175.976419][   T39] audit: type=1400 audit(1737018318.406:1137): avc:  denied  { append } for  pid=12768 comm="syz.3.1862" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  176.079310][T12777] xt_ecn: cannot match TCP bits for non-tcp packets
[  176.101288][T12775] netlink: 18 bytes leftover after parsing attributes in process `syz.4.1865'.
[  176.180435][T12779] netlink: 'syz.3.1867': attribute type 21 has an invalid length.
[  176.206663][T12786] netlink: 'syz.4.1869': attribute type 2 has an invalid length.
[  176.209034][T12786] netlink: 'syz.4.1869': attribute type 11 has an invalid length.
[  176.211586][T12786] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1869'.
[  176.391334][   T39] audit: type=1400 audit(1737018318.826:1138): avc:  denied  { map } for  pid=12795 comm="syz.4.1873" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  176.391945][ T5916] Bluetooth: hci4: command 0x1003 tx timeout
[  176.399345][   T65] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  176.400632][   T39] audit: type=1400 audit(1737018318.826:1139): avc:  denied  { execute } for  pid=12795 comm="syz.4.1873" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  176.406806][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'.
[  176.417481][T12797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1874'.
[  176.514252][   T39] audit: type=1400 audit(1737018318.946:1140): avc:  denied  { accept } for  pid=12810 comm="syz.3.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  176.549859][   T65] Bluetooth: hci3: command tx timeout
[  176.626106][   T39] audit: type=1326 audit(1737018319.056:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12834 comm="syz.3.1887" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e7f585d29 code=0x0
[  176.728814][T12841] input: syz0 as /devices/virtual/input/input24
[  176.853628][T12850] netlink: zone id is out of range
[  176.855366][T12850] netlink: zone id is out of range
[  176.857127][T12850] netlink: zone id is out of range
[  176.858839][T12850] netlink: zone id is out of range
[  176.860931][T12850] netlink: zone id is out of range
[  176.862633][T12850] netlink: zone id is out of range
[  176.864343][T12850] netlink: zone id is out of range
[  176.865990][T12850] netlink: zone id is out of range
[  176.867650][T12850] netlink: zone id is out of range
[  176.869349][T12850] netlink: zone id is out of range
[  176.873009][T12850] tmpfs: User quota block hardlimit too large.
[  176.929021][T12856] xfrm1: entered promiscuous mode
[  176.930793][T12856] xfrm1: entered allmulticast mode
[  176.954714][T12855] netlink: 'syz.4.1892': attribute type 4 has an invalid length.
[  176.963223][T12855] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms
[  176.968580][   T39] audit: type=1400 audit(1737018319.396:1142): avc:  denied  { append } for  pid=12864 comm="syz.1.1894" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  176.975479][T12855] bond2: entered promiscuous mode
[  176.976995][T12855] bond2: entered allmulticast mode
[  176.978626][T12855] 8021q: adding VLAN 0 to HW filter on device bond2
[  176.988484][T12865] hsr0: entered allmulticast mode
[  176.990385][T12865] hsr_slave_0: entered allmulticast mode
[  176.994880][T12865] hsr_slave_1: entered allmulticast mode
[  177.009880][T12865] hsr_slave_0: left promiscuous mode
[  177.050233][T12865] hsr_slave_1: left promiscuous mode
[  177.190934][T12865] hsr0 (unregistering): left allmulticast mode
[  177.572993][T12898] @: renamed from vlan0 (while UP)
[  177.594834][   T39] audit: type=1400 audit(1737018320.072:1143): avc:  denied  { connect } for  pid=12897 comm="syz.5.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  177.610581][ T3225] usb 9-1: new full-speed USB device number 12 using dummy_hcd
[  177.724858][T12915] ptm ptm1: ldisc open failed (-12), clearing slot 1
[  177.737494][T12919] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  177.740008][T12919] overlayfs: missing 'lowerdir'
[  177.771298][ T3225] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  177.773953][ T3225] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  177.776868][ T3225] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  177.779410][ T3225] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  177.784992][ T3225] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 179, setting to 64
[  177.785062][T12919] loop2: detected capacity change from 0 to 7
[  177.789163][ T3225] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  177.792604][ T3225] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  177.792662][T12919] Dev loop2: unable to read RDB block 7
[  177.794871][ T3225] usb 9-1: Product: syz
[  177.794880][ T3225] usb 9-1: Manufacturer: syz
[  177.799107][T12919]  loop2: unable to read partition table
[  177.800279][T12883] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  177.801137][T12919] loop2: partition table beyond EOD, truncated
[  177.803442][ T3225] cdc_wdm 9-1:1.0: skipping garbage
[  177.804572][T12919] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  177.806095][ T3225] cdc_wdm 9-1:1.0: skipping garbage
[  177.810927][ T3225] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  177.812706][ T3225] cdc_wdm 9-1:1.0: Unknown control protocol
[  177.836514][T12922] GUP no longer grows the stack in syz.3.1912 (12922): 20004000-2000a000 (20002000)
[  177.839608][T12922] CPU: 2 UID: 0 PID: 12922 Comm: syz.3.1912 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  177.842696][T12922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  177.845988][T12922] Call Trace:
[  177.847269][T12922]  <TASK>
[  177.848131][T12922]  dump_stack_lvl+0x16c/0x1f0
[  177.849584][T12922]  gup_vma_lookup+0x1d2/0x220
[  177.850961][T12922]  __get_user_pages+0x236/0x3b50
[  177.852387][T12922]  ? find_held_lock+0x2d/0x110
[  177.853777][T12922]  ? mtree_load+0x30a/0xa40
[  177.855137][T12922]  ? __pfx_lock_release+0x10/0x10
[  177.856589][T12922]  ? __pfx___get_user_pages+0x10/0x10
[  177.858142][T12922]  get_user_pages_remote+0x25e/0xb30
[  177.859663][T12922]  ? __pfx_get_user_pages_remote+0x10/0x10
[  177.861355][T12922]  __access_remote_vm+0x235/0x7a0
[  177.862806][T12922]  ? __pfx___access_remote_vm+0x10/0x10
[  177.864395][T12922]  ? lock_acquire+0x2f/0xb0
[  177.865730][T12922]  ? proc_pid_cmdline_read+0x25c/0x900
[  177.867297][T12922]  proc_pid_cmdline_read+0x4f5/0x900
[  177.868824][T12922]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  177.870504][T12922]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  177.872183][T12922]  vfs_readv+0x6bf/0x890
[  177.873422][T12922]  ? __pfx___lock_acquire+0x10/0x10
[  177.874953][T12922]  ? __pfx_vfs_readv+0x10/0x10
[  177.876335][T12922]  ? __fget_files+0x1fc/0x3a0
[  177.877699][T12922]  ? __pfx_lock_release+0x10/0x10
[  177.879152][T12922]  ? __fget_files+0x206/0x3a0
[  177.880529][T12922]  ? do_preadv+0x1b1/0x270
[  177.881814][T12922]  do_preadv+0x1b1/0x270
[  177.883033][T12922]  ? __pfx_do_preadv+0x10/0x10
[  177.884414][T12922]  ? rcu_is_watching+0x12/0xc0
[  177.885836][T12922]  do_syscall_64+0xcd/0x250
[  177.887164][T12922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.888861][T12922] RIP: 0033:0x7f6e7f585d29
[  177.890142][T12922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.896694][T12922] RSP: 002b:00007f6e7d3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  177.899069][T12922] RAX: ffffffffffffffda RBX: 00007f6e7f775fa0 RCX: 00007f6e7f585d29
[  177.901340][T12922] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005
[  177.903576][T12922] RBP: 00007f6e7f601b08 R08: 0000000000000000 R09: 0000000000000000
[  177.905891][T12922] R10: 0000000000000500 R11: 0000000000000246 R12: 0000000000000000
[  177.908140][T12922] R13: 0000000000000000 R14: 00007f6e7f775fa0 R15: 00007fffec0b3608
[  177.910410][T12922]  </TASK>
[  177.939108][T12932] x_tables: duplicate underflow at hook 2
[  177.955971][T12932] syz.3.1914: attempt to access beyond end of device
[  177.955971][T12932] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  178.014151][T12937] binder: 12936:12937 ioctl c0306201 200003c0 returned -14
[  178.015743][   T56] usb 9-1: USB disconnect, device number 12
[  178.020522][T12937] binder_alloc: 12936: binder_install_single_page failed to insert page at offset 0 with -14
[  178.086450][T12939] No such timeout policy "syz1"
[  178.320233][   T30] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  178.450027][   T30] usb 10-1: device descriptor read/64, error -71
[  178.610007][T12959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28391 sclass=netlink_route_socket pid=12959 comm=syz.4.1925
[  178.631821][   T65] Bluetooth: hci3: command tx timeout
[  178.635484][T12963] mkiss: ax0: crc mode is auto.
[  178.690010][   T30] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  178.802848][T12969] fuse: Unknown parameter ''
[  178.806038][T12969] dns_resolver: Unsupported content type (24)
[  178.819824][   T30] usb 10-1: device descriptor read/64, error -71
[  178.843785][   T65] Bluetooth: hci4: sending frame failed (-49)
[  178.846435][T12974] Bluetooth: Short BCSP packet
[  178.847760][ T5916] Bluetooth: hci4: Opcode 0x1003 failed: -49
[  178.909142][T12972] ip6tnl2: entered promiscuous mode
[  178.930048][   T30] usb usb10-port1: attempt power cycle
[  179.021006][T12986] /dev/sg0: Can't lookup blockdev
[  179.022911][T12986] xt_l2tp: v2 tid > 0xffff: 150994944
[  179.271283][   T30] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  179.290459][   T30] usb 10-1: device descriptor read/8, error -71
[  179.417749][T12997] No control pipe specified
[  179.529825][   T30] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  179.550373][   T30] usb 10-1: device descriptor read/8, error -71
[  179.670212][   T30] usb usb10-port1: unable to enumerate USB device
[  180.699984][ T5916] Bluetooth: hci3: command tx timeout
[  181.173273][T13021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.173775][ T9052] ------------[ cut here ]------------
[  181.178232][ T9052] WARNING: CPU: 3 PID: 9052 at net/mac80211/sta_info.c:737 sta_info_insert_rcu+0x24a/0x1b70
[  181.182358][ T9052] Modules linked in:
[  181.183938][ T9052] CPU: 3 UID: 0 PID: 9052 Comm: kworker/u32:12 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  181.187228][   T39] kauditd_printk_skb: 46 callbacks suppressed
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  181.187237][   T39] audit: type=1400 audit(1737018323.672:1190): avc:  denied  { write } for  pid=5849 comm="syz-executor" path="pipe:[2807]" dev="pipefs" ino=2807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  181.188715][ T9052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  181.188725][ T9052] Workqueue: events_unbound cfg80211_wiphy_work
[  181.188746][ T9052] RIP: 0010:sta_info_insert_rcu+0x24a/0x1b70
[  181.205367][ T9052] Code: 0f b7 83 ae 20 00 00 31 ff 44 31 e0 0f b7 c0 09 d0 89 c6 89 44 24 08 e8 e4 49 fd f6 8b 44 24 08 85 c0 75 7f e8 d7 4e fd f6 90 <0f> 0b 90 c7 44 24 14 ea ff ff ff e8 c6 4e fd f6 48 8b 34 24 4c 89
[  181.211512][ T9052] RSP: 0018:ffffc90003987ab0 EFLAGS: 00010293
[  181.213897][ T9052] RAX: 0000000000000000 RBX: ffff88804d628d80 RCX: ffffffff8a9cd65b
[  181.216884][ T9052] RDX: ffff888023a24880 RSI: ffffffff8a9cd5c9 RDI: 0000000000000001
[  181.219922][ T9052] RBP: ffffffff905f7cb4 R08: 0000000000000001 R09: 0000000000000000
[  181.223107][ T9052] R10: 0000000000000001 R11: 0000000000000005 R12: 000000000000ffff
[  181.226141][ T9052] R13: ffff88805b778048 R14: 00000000ffffffff R15: ffff888029838e40
[  181.226318][T13015] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  181.229154][ T9052] FS:  0000000000000000(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000
[  181.234272][ T9052] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  181.236793][ T9052] CR2: 0000001b2bd20000 CR3: 000000002c33e000 CR4: 0000000000352ef0
[  181.239879][ T9052] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  181.241264][T13015] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  181.242912][ T9052] DR3: 00000000fee0000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  181.247658][ T9052] Call Trace:
[  181.248970][ T9052]  <TASK>
[  181.250252][ T9052]  ? __warn+0xea/0x3c0
[  181.251837][ T9052]  ? sta_info_insert_rcu+0x24a/0x1b70
[  181.253933][ T9052]  ? report_bug+0x3c0/0x580
[  181.255733][ T9052]  ? handle_bug+0x54/0xa0
[  181.257492][ T9052]  ? exc_invalid_op+0x17/0x50
[  181.259409][ T9052]  ? asm_exc_invalid_op+0x1a/0x20
[  181.261513][ T9052]  ? sta_info_insert_rcu+0x2db/0x1b70
[  181.263610][ T9052]  ? sta_info_insert_rcu+0x249/0x1b70
[  181.265703][ T9052]  ? sta_info_insert_rcu+0x24a/0x1b70
[  181.267790][ T9052]  ? rate_control_rate_init+0x3c9/0x720
[  181.270028][ T9052]  ieee80211_ocb_work+0x30c/0x650
[  181.271997][ T9052]  ? mark_held_locks+0x9f/0xe0
[  181.273929][ T9052]  ? __pfx_ieee80211_ocb_work+0x10/0x10
[  181.276084][ T9052]  ? lockdep_hardirqs_on+0x7c/0x110
[  181.278116][ T9052]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  181.280510][ T9052]  ieee80211_iface_work+0x8ad/0xf00
[  181.282549][ T9052]  cfg80211_wiphy_work+0x3de/0x560
[  181.284555][ T9052]  process_one_work+0x9c5/0x1ba0
[  181.286496][ T9052]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  181.289241][ T9052]  ? __pfx_process_one_work+0x10/0x10
[  181.290978][ T9052]  ? rcu_is_watching+0x12/0xc0
[  181.292751][ T9052]  ? assign_work+0x1a0/0x250
[  181.294150][ T9052]  worker_thread+0x6c8/0xf00
[  181.295586][ T9052]  ? __pfx_worker_thread+0x10/0x10
[  181.297228][ T9052]  kthread+0x2c1/0x3a0
[  181.298470][ T9052]  ? _raw_spin_unlock_irq+0x23/0x50
[  181.300097][ T9052]  ? __pfx_kthread+0x10/0x10
[  181.301628][ T9052]  ret_from_fork+0x45/0x80
[  181.303461][ T9052]  ? __pfx_kthread+0x10/0x10
[  181.305099][ T9052]  ret_from_fork_asm+0x1a/0x30
[  181.306623][ T9052]  </TASK>
[  181.307567][ T9052] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  181.309780][ T9052] CPU: 3 UID: 0 PID: 9052 Comm: kworker/u32:12 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  181.313356][ T9052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  181.316655][ T9052] Workqueue: events_unbound cfg80211_wiphy_work
[  181.318573][ T9052] Call Trace:
[  181.319598][ T9052]  <TASK>
[  181.320541][ T9052]  dump_stack_lvl+0x3d/0x1f0
[  181.322177][ T9052]  panic+0x71d/0x800
[  181.323796][ T9052]  ? __pfx_panic+0x10/0x10
[  181.325405][ T9052]  ? show_trace_log_lvl+0x29d/0x3d0
[  181.326979][ T9052]  ? check_panic_on_warn+0x1f/0xb0
[  181.328583][ T9052]  ? sta_info_insert_rcu+0x24a/0x1b70
[  181.330199][ T9052]  check_panic_on_warn+0xab/0xb0
[  181.331763][ T9052]  __warn+0xf6/0x3c0
[  181.332977][ T9052]  ? sta_info_insert_rcu+0x24a/0x1b70
[  181.334574][ T9052]  report_bug+0x3c0/0x580
[  181.335917][ T9052]  handle_bug+0x54/0xa0
[  181.337246][ T9052]  exc_invalid_op+0x17/0x50
[  181.338862][ T9052]  asm_exc_invalid_op+0x1a/0x20
[  181.340323][ T9052] RIP: 0010:sta_info_insert_rcu+0x24a/0x1b70
[  181.342552][ T9052] Code: 0f b7 83 ae 20 00 00 31 ff 44 31 e0 0f b7 c0 09 d0 89 c6 89 44 24 08 e8 e4 49 fd f6 8b 44 24 08 85 c0 75 7f e8 d7 4e fd f6 90 <0f> 0b 90 c7 44 24 14 ea ff ff ff e8 c6 4e fd f6 48 8b 34 24 4c 89
[  181.348949][ T9052] RSP: 0018:ffffc90003987ab0 EFLAGS: 00010293
[  181.350746][ T9052] RAX: 0000000000000000 RBX: ffff88804d628d80 RCX: ffffffff8a9cd65b
[  181.353163][ T9052] RDX: ffff888023a24880 RSI: ffffffff8a9cd5c9 RDI: 0000000000000001
[  181.355544][ T9052] RBP: ffffffff905f7cb4 R08: 0000000000000001 R09: 0000000000000000
[  181.358031][ T9052] R10: 0000000000000001 R11: 0000000000000005 R12: 000000000000ffff
[  181.360409][ T9052] R13: ffff88805b778048 R14: 00000000ffffffff R15: ffff888029838e40
[  181.363297][ T9052]  ? sta_info_insert_rcu+0x2db/0x1b70
[  181.365283][ T9052]  ? sta_info_insert_rcu+0x249/0x1b70
[  181.366860][ T9052]  ? rate_control_rate_init+0x3c9/0x720
[  181.368472][ T9052]  ieee80211_ocb_work+0x30c/0x650
[  181.369932][ T9052]  ? mark_held_locks+0x9f/0xe0
[  181.371326][ T9052]  ? __pfx_ieee80211_ocb_work+0x10/0x10
[  181.372942][ T9052]  ? lockdep_hardirqs_on+0x7c/0x110
[  181.374452][ T9052]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  181.376142][ T9052]  ieee80211_iface_work+0x8ad/0xf00
[  181.377653][ T9052]  cfg80211_wiphy_work+0x3de/0x560
[  181.379134][ T9052]  process_one_work+0x9c5/0x1ba0
[  181.380592][ T9052]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  181.382211][ T9052]  ? __pfx_process_one_work+0x10/0x10
[  181.383762][ T9052]  ? rcu_is_watching+0x12/0xc0
[  181.385165][ T9052]  ? assign_work+0x1a0/0x250
[  181.386512][ T9052]  worker_thread+0x6c8/0xf00
[  181.387858][ T9052]  ? __pfx_worker_thread+0x10/0x10
[  181.389346][ T9052]  kthread+0x2c1/0x3a0
[  181.390534][ T9052]  ? _raw_spin_unlock_irq+0x23/0x50
[  181.392039][ T9052]  ? __pfx_kthread+0x10/0x10
[  181.393389][ T9052]  ret_from_fork+0x45/0x80
[  181.394685][ T9052]  ? __pfx_kthread+0x10/0x10
[  181.396047][ T9052]  ret_from_fork_asm+0x1a/0x30
[  181.397464][ T9052]  </TASK>
[  181.398961][ T9052] Kernel Offset: disabled
[  181.400291][ T9052] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:01:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000046 RBX=1ffff92000798f56 RCX=00000000efb8c7a7 RDX=0000000000000001
RSI=ffffffff8b6cdce0 RDI=ffffffff8bd1ef20 RBP=0000000000000200 RSP=ffffc90003cc7aa8
R8 =0000000000000000 R9 =fffffbfff2dca798 R10=ffffffff96e53cc7 R11=0000000000000002
R12=0000000000000000 R13=ffffffff8e1bb900 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8176db93 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f6a63fc7f98 CR3=000000005ef64000 CR4=00352ef0
DR0=0000000000040403 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0b7d3930 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d5ba02a9a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d5ba02aa7
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d5ba02aa1
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d5ba02ab5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d5ba02b3b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d5ba02c19
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000046 RBX=1ffff92000858ee3 RCX=00000000296071e3 RDX=0000000000000001
RSI=ffffffff8b6cdce0 RDI=ffffffff8bd1ef20 RBP=0000000000000200 RSP=ffffc900042c7710
R8 =0000000000000000 R9 =fffffbfff2dca798 R10=ffffffff96e53cc7 R11=0000000000000003
R12=0000000000000000 R13=ffffffff8e1bb840 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8176db9c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f96bcaa7d60 CR3=000000000df7e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000000d8 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96bbf4b6a3 00007f96bbf4b6a3
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd52a1c60 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556af38a93 000055556af36b60
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556af284f1 000055556af280b0
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00160806081838ee 0073636f72702e70 756f72676301ffff ffffffffffffe508
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0120a09080100002 0160c62410003180 0401000018080606 01669a000ca40031
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003000400040800 0880040100001608 06081838ee007363 6f72702e70756f72
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 676301ffffffffff ffffffe508088003 0004000280808408 00000401c7100008
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1638f207fe100000 0401c71000060131 9200317a79732f70 756f7267632f2e01
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=00000000001f53e3 RBX=0000000000000002 RCX=ffffffff8b2a17c9 RDX=0000000000000000
RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1ef20 RBP=ffffed1003ad4000 RSP=ffffc90000197e08
R8 =0000000000000001 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000
R12=0000000000000002 R13=ffff88801d6a0000 R14=ffffffff905f4990 R15=0000000000000000
RIP=ffffffff8b2a2baf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=0000000022c48000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef877ac50 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff654e02a9a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff654e02aa7
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff654e02aa1
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff654e02ab5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff654e02b3b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff654e02c19
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff851c0de5 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc90003987418
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007
R12=0000000000000000 R13=0000000000000032 R14=ffffffff851c0d80 R15=0000000000000000
RIP=ffffffff851c0e0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000001b2bd20000 CR3=000000002c33e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000fee0000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0b7d3ba0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d5ba02a9a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d5ba02aa7
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d5ba02aa1
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d5ba02ab5
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d5ba02b3b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d5ba02c19
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000