last executing test programs:

1m21.306602726s ago: executing program 0 (id=786):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={0x0, 0x0, r3, r4, 0x3, 0x300, 0x2, 0x802, {0xac7c, 0x1, 0x5, 0x69, 0xf4b, 0x2, 0x2, 0x800, 0x412f, 0xe154, 0xffff, 0x7, 0xffffffe0, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}})

1m21.290652644s ago: executing program 0 (id=788):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="000000000000850000ffb50000009500000000001e0c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r4, 0x25, 0x0, @void}, 0x10) (async)
syz_emit_ethernet(0x32, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x38, 0x24, 0x65, 0x0, 0x1, 0x21, 0x0, @loopback, @remote}, {{0x4e24, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x6, 0x6, "fc63f0", 0x76, "d42e3a"}}}}}}, 0x0) (async, rerun: 32)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
ioctl$sock_SIOCGSKNS(r5, 0x894c, 0x0)

1m21.213652727s ago: executing program 0 (id=790):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = dup(r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100001b5996abdcc712ce72576b5d284", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, <r6=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x313829, 0x2838310000000000})
r7 = dup3(r0, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x11, 0x0, 0x0})
openat$cgroup_ro(r2, &(0x7f0000000180)='memory.swap.events\x00', 0x0, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r9, @ANYBLOB="a3870687ffc262e840ab4658373f5820496667098d7f22b67c787eb15973fc3d25dafa4a8025b0857d1615c4288c0e843ec92b4f9a0cfb7bfcc2a0203207b79e239116120f84bacb355d5853a372a6f690bd7c09de11e891790a9ca048", @ANYBLOB="5e9b22db4a6b66f791819b60e41bffd26365151e4f7f7a78be"], 0x0)
r10 = syz_io_uring_setup(0x1e1e, &(0x7f0000000580)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=<r11=>0x0, &(0x7f0000000440)=<r12=>0x0)
syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c000300000000000200000000000000d09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
io_uring_enter(r10, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_COOKIE(r14, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1m21.092068518s ago: executing program 0 (id=793):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={0x0, 0x0, r3, r4, 0x3, 0x300, 0x2, 0x802, {0xac7c, 0x1, 0x5, 0x69, 0xf4b, 0x2, 0x2, 0x800, 0x412f, 0xe154, 0xffff, 0x7, 0xffffffe0, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}})

1m20.821906169s ago: executing program 0 (id=798):
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008"], 0x90}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0xd8, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0xc3, 0x4, 0x0, 0x1, [@generic="5343d5875f4232bdde3fbdb1c2576a96f03b4cbf1342afba292bd939d3d8fc6f0dac6ffe2b510050c075c61a39902fa300478ac10dcb7ea8f088926fe3a00a1c329fc08cd11b33521d762d4fc1a4a450e257cf9a795a940a8a5f7c0a54cabce3d69a9f35fa70d4dd9698863ccc24b6566266c873cf63ab305ac85aca1cfc1e36d5a5fe2b594425578ef27f68408f65891a6b9ec43ff438e832fae8690223c660bd603050454a5140a8ee77a6d9066bc1aa25d54c41e78cecfdaad81fa7aaf7"]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

1m20.063249417s ago: executing program 0 (id=804):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0xc4, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe}]}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}, @IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6846b}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xb13a}, @IFLA_PHYS_SWITCH_ID={0x1c, 0x24, "6e659a085d23ed38c322e526a2fd20c05aeb8af23f4d38db"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xa}}, './file0\x00'})

1m20.013274737s ago: executing program 32 (id=804):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0xc4, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_PORT_SELF={0x14, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe}]}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}, @IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6846b}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xb13a}, @IFLA_PHYS_SWITCH_ID={0x1c, 0x24, "6e659a085d23ed38c322e526a2fd20c05aeb8af23f4d38db"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xa}}, './file0\x00'})

11.623057947s ago: executing program 1 (id=1929):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
prctl$PR_MCE_KILL(0x21, 0x1, 0x0)
prctl$PR_MCE_KILL_GET(0x22)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e08004504005c000000000511907800000000000000004e244e200048907803000000000000004bd5ffa8e842cdd19b93b25d342579f7e63d2d1e5317517eb1fe94141226cc71e718e86db665dd4fbd49b20523893e8724968b868600ac13"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000080}, 0x4001)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

11.452273052s ago: executing program 1 (id=1932):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[@wr_drn={0x6e, 0x20, {0x6, 0x6}}, @wr_crn={0x46, 0x20, {0x0, 0xd}}, @uexit={0x0, 0x18, 0x7fff}, @wrmsr={0x1e, 0x20, {0xb6f, 0x6}}, @cpuid={0x14, 0x18, {0x2, 0x3887}}, @uexit={0x0, 0x18}, @wr_drn={0x6e, 0x20, {0x1, 0x154}}, @wr_drn={0x6e, 0x20, {0x0, 0x9}}, @rdmsr={0x32, 0x18, {0x819}}, @code={0xa, 0x6e, {"66baf80cb874d86085ef66bafc0c66b8f90066eff30f09430f01c266410f38815500c4627d327dbf0f01f866460f2c8312da0000660fc7b10050000064f2410f35c744240008000080c744240200800000c7442406000000000f011c24"}}, @in_dx={0x82, 0x20, {0x2383, 0x2}}, @cpuid={0x14, 0x18, {0xff, 0x7}}, @out_dx={0xaa, 0x28, {0x8e8e, 0x4, 0xfffffffffffffbff}}, @uexit={0x0, 0x18, 0x2}, @wr_crn={0x46, 0x20, {0x4, 0x2}}, @wrmsr={0x1e, 0x20, {0xa06, 0x1ff}}], 0x226})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="6766c7442400d592c62c6766c744240285c500006766c744240600000000670f01142466b800a000000f23c00f21f86635030009000f23f80f71e4fcb847008ee80f1c7a000f20e06635000002000f22e00f187c0b660fe9400df20f454a000f01c4", 0x62}], 0x1, 0x10, &(0x7f0000000140), 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)='A', 0x1})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000180)="d6", 0x1, <r5=>0x0})
r6 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0x0)
ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0xc, 0x0, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f4e1df82d00", [0x6, 0x9]})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000400)={r5})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000240)={r5, 0x7a, &(0x7f0000000180)=""/122})
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x98f909, 0x3, '\x00', @string=0x0}})

11.448425962s ago: executing program 1 (id=1933):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x917)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000011c0)={'batadv0\x00', <r3=>0x0})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002240)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}, {0x0, [0x30]}}, &(0x7f0000001240)=""/4096, 0x33, 0x1000, 0x1, 0xd2, 0x10000}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000023c0)={0xffffffffffffffff, 0x20, &(0x7f0000002380)={&(0x7f0000002300)=""/45, 0x2d, <r5=>0x0, &(0x7f0000002340)=""/13, 0xd}}, 0x10)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002400)={0xffffffffffffffff}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x16, 0x18, &(0x7f00000000c0)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5c6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x24, '\x00', r3, @flow_dissector, r4, 0x8, &(0x7f0000002280)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000022c0)={0x1, 0xd, 0x4, 0x3}, 0x10, r5, r6, 0x1, &(0x7f0000002440)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002480)=[{0x5, 0x4, 0x1}], 0x10, 0x8}, 0x94)
r8 = socket$unix(0x1, 0x5, 0x0)
writev(r1, &(0x7f0000004a40)=[{&(0x7f0000002580)="b09c20f24d8bdf521c6354f458dac85c3a37c26fd23c9999c91473964f6c87f783c765b3aa9c2dbc6bd322b0ebfa9f01cfdd088495f2ab0183dd0dbbcdac21de8b84fe69d0b991a612f3fbfcdbd58f654f5b0425ce49de7f18b2188bf33518e63ea018f57cb2a0a0b0b34393a924b2be9933aebe8d54d97021e7370ecca2c988df5b14f0927d7ee86694820fae763cd966baca4da4818dd46e32b4d466952d5f9723741be1732ad016dc814d621b272b755144a4e4cb15f8bcdbab541df64881e751520b73f87f2e5116b4491cec7f476592c6db8c93db391dc34ddd0cba3463f49c92fce1f63ac477441665b002dd47477c0d10e25f44af6e6211f2e45b64324a3c5d25626da96b7f90618ba398005d895d00c75faf79f9e666b71f4ace6bf791442baf24caa2c987daa969bd45f08f1a5c390562eb401519be0c5764180d77a976c34287a975d0a21b378aee75d8cad8e8f4fda4f7e4743073394781bfe1d4f8fe2dde54ef2fd38e2dc0ac28a9c4bc430f067eff0a473a340c9076733da5f5aadc4ce0cc49aabaa8734c8fa622d4865ca784ec012f4564c4c8ea91ba2b1a933909a25ddd9d65765d66a35843149339c5b5ce855047f1f8013d35b41ef8891c7e41494ec350dd8d6b21bb1ad98fb191d0dc19400d730b92091fd3ca999aaa5846712bbf9366f6bcf1ca0eb260043fda8a22888a419d7caadea17a1e3f129951f851a9671e3a54b6d5fee87b52c27e0f40532fb253adcc6b6e4bd5e58d3b339e7897c6eb8814323fbd61ac3c363fb4e467d3bb8bc67ceee8aa1cd8a9fce23c5625c85cb479efdcfc17422da2dba354877305f75bd086045f2d19a9594d42478867f9da4188844900d884679121491b1b0bba6e001bee89f9e702c41018b0a04784a8c3b01b2dc7b20d57bd7b70123e75d2b361e1d3784a2d97b62e1a3bc7015f0b5a1055a693d55757c0c4c66749906aee3e2e71a6bb1d7e2875f1978d5bfbd2daddab4a37f0e7a2ac45d1dfd8d0b6234f2dffd6a29dc1ff74a22f88bca31790ede5ccacbe8b5c72278b2e8140d674101311bfcf41213a65eea59e74478e63d6fdff3e69fe6b6e938660efdc3a673e0fa33cf68e3234321192805306719a446660935fa3abd3db1d812395f2d20d8299303e73527e644e50030b3fb8f76ba3a980facf9d820040652dc18188abda2a84d333d93f14bd9f4b5f283512fd3fd59fc3d02b5ac879f283f08ea44df14da0d0e567c13af1027e306690a4b1608c40ad60376a93cbbeb710d3906c8156083fbba4beae269c5b43e0711aae21937e8ae8eb95f5e98b4848ed49cf411c8f1492da47ff57b54d8a0705ca91074586481e88691c1c8360d58fababe922194052183ee2e05cab547f2b1cae3cbb441c7ec560ff9b0ecc204c576972c031d6ab912a733872d1cedb03f0203a121de8ac5b69ad1ab56e9c6da69798cb91fee289dbc8298bcb848eb1ef646fd1bc150dd4c483bc50ec8abade0fc19e324d9b2d95222c15437ad36c16b766e43c55ee2e8c7d66c90b5cfe06b975203f1a12bda0bc36452dcb0885103bffaa1f07a7e0c19b452c23d67d9af8796874754948a487d57c4f16f2f3837e0795e460cfc574328924ec1868ac534a4e24423b9213ccdaf11471a8801bc3300fb9a7612dab3a6964925f65840073271579585a239fbd89c5e805fdede3f1c56f8fa87506f3288e5fd79dfad42140e03a968be08a3122288fa1642943d71d3871eace76ae6ff93ac9e09a9de7a59178d81b3139736cb82b575bf49813607de1446b7aef20a1db6d9eacf035cd49c77861b15a47e0fed984323dc558ec492714588a25c00dbc288b3d84aea2063716bb7f999110b4a29beedd8ae7d3e950c32d579f0f354062d558d0acb31afa102691f872298d706bd72e05018e79daca2b4027f4da0ee5b987052e200d432d0972837ba992317ff7831a28d954d05fcc0bcd2cac7906f59d4e15221ae2afa952972e52e2b2668364b747400bbe1d57dbffd2ae9d744547d1cbc44694bdf1a34fb84630501ed423af34e5438f1732985e3f87e4b4c4b88358b1bac99b87c9cd183dba3f61139804ab401adcffa88262955c32e2b8c7f2702ee382b5d04fc561ad6ae8f628faa2071af14f42099c3e5b95cb2ed31cfca354218d4ca9e143df2e094908298d58c3be61be6b823086373425fe140269b724d8e7445fcd50c52e7508cc88eae735d0aa2fd669dd56c3908363e26a3baab5404d70e6b86ca3ebe66ff81ce379af0982f6723880e9fb20eb8cccde0295e893639f8d5483896fafa82f496798e7bf8ca69fe39b10e1f749990eb1982473df1863ed950458deac96a5bcea87eadded4bac5490cae3384f2f26297dbfaee5b8c7efbc719344c4a6d5c97a55e2b847cedc8f58047188fa8cc289fa2960f345db6f267b0370cf2a70b2edaf3356b9ef59290e0027e0863618b17abd5197444f24c2e25d79deca3fc918112fb5dfab5624f459053d09d5972679cfe024de7aa19d8a274e418356e2a26e203ecfbce0a72c77204211ab5334afde31c21fcfb997d1035eb7e7f01d421f2b5a59750538ab8e494156fb10d401327a090592413e72b95ee440a36a9f4977f3ab3615dbba866ce329ac059b3d13603bff47edd9614ef49e2a23d1e0d62dd930ee34534440b3ef307362781287c14fc79bf1565ebf220c809a62c86fd9958f9950d0246d17bd05f0cd058983e2e3c5807ff58017de8aec238c0e2ae89b90eb6a2936500fb7200e45375b93a098455220af93a5950aad22dcc249df0aa0a908cfef936dacdb9dd70cef1dff1d98a97f4012babb00826669601fab4f3d03a119c85bcc547fe927028a454715c01ed5fde76fed2e878e48ca6a3b2bd1014f6954181c1f996a0ecac072aed68327c7e5fad4077e7e56a1956be5fa79f4cb74eebc78ac4900da0e1aab6a070af702cd1deaa28df0b6a7e8f17280b970397ec6a450f7dcb6707b37676c5c66fe32f3ada9e6b64f410143afd78310384b3a52451f57406a0991f503eea7b85c8ce23c6207b4106513336847a96a14095ba6d7e0d7867d3da4bede48a758dd2aca38314c3059201db4b28fa8c172463d3eec41ef86cfacef781263918d946e19fe46abd196b0d7f6f61552a4a0b472e5c5af172a07f4fb50f8fb3e7dca39c97ca5e4f0eb97f3a2dea12b9120bbb53bfa842258fc443f24fdfc41a6dd70b115b4b075337653d040f1d88b0265a2eff246b7db5985c5abc761c4cfe7cf5c255ac3409d5afcdc2cde13457f8db0ea39e6edb14653523897e7843ad43845fbbf79e622597a028ca03635fde1442a32dc8ec881e8c2429735fcd142d061fe0de5cc86f77a0e15ed1d20d80094ea1cd5f294aaa78289d64f1706f51efde2ebdb4ea35249f68e86f4fe880389d84a8dd5f1056f447dff7f81320f6adb196c13d5f3ac6a056c7bd812528f82d0e5fc5002053c1dce34d87bc4240456338f6d1615a59cf343d9295550c2cef4dc5174b2852cbe92ebde1dd8abc79f0b4a3a560694d028d45dd836d879cf8feca657bb61894ad32b4514be857b314472030e424e25ab83408407053bc2c4bf1a7d142030ca933d23de9911c361bdfa7742e8422373e8264dda58749fd8e65a5b075ada94f239e7a3a24a3d0305ab1c7180f25b2a87f72904edcfdffcd179aaa13f3b579faf5bdf2535605d1c1c54fb02897dcb6c2cbd22d5dd4207983f7fa4e900ca5eaac87820f758f8ca786a053a3f726ba3b4dc47a06b2dce4a6ed0241e8573759f7857c1491d47156b7c436daad20364e764383ff90f67464a1d6a23bfff2083015d8656ad1da483321f290a2e46f34b1d63bd5e6b3b50c1e181617b744557763e459a25dde72d951f49ac902cd785d25462593e894a742841248dbc2db23eb381ff70a8da847b35b80e5ff60d33ab859f62ba66759e647661eedf9b4ff82593b704c16ce9c12cc6f78b0b6fb4372ce1a5aec438ac3c6a8a6ba87438b4f08c948ce3d7e5cdecfdf1837c93d336535645d7a4cebbb68d889236d5f7a789be9d111217e0c2f2ae2645cb243cf676a6e3e519c750c40f8f9b68d6b0ec5c46d48e8ce26d5b1f04dab137c7cc4307e069b8e79abbcf223b6095b2f5a6a548187fbfff1c8deec33551b280218206b8a85959acba9a37d0a76c76c217f81c79a2a8b3488e1a41c6077af82988e25266f402d081810e4252dda497b2991f3d49e22fdbdd68f355520913bdd9973199687092433a621a933e7827ddbc1c14473594b6b0cf6029545fadcdc874a7c2579c2608ccabc657f21d12dff0f60eca61ee79dd19a7d5a268f68443d23cf22612e4f1828793a9ccaa5d5f2d9b561b474dda639189a0932bda83cb981b8762166f1344ff2ae29b20b4ffb92bc434cafc4c23bfddaa11a661efa1e7fba14618b1073b198ccddf6038c3640376b52b818ee8fb10f4ba0316e35a8ee8ee29ac2c386ee7d389bcd0af5655826dde3325d69fb39e62e8c3927c8cf5b7c6ddabd3b6fa51c2ba99721a29a38417c72321917df2fbb059e895b04b69f516f6dcccd4de344d177c2c257eb5bad7639ce5bcffc1c861f74ff4cc2f2b4a86634a359d612b03257789549b7e92443bf6bd37e207486855b7ede407e3b2b9dbdd5bbf3c49385f81f107971a983499694e6f1514129112e6179c468cce084caea03ab662231637d58f356d29360b9300d432d405b4be53a1862949f9c6d844f287448dc3bb9fc8d87ab2e864dd03ed6963ce3fc05cacefd29dc683b2ace20cc98e8435607c4229f359576b624a7460c7653f4b710335f74c56333f2084e421a4ac25303cacb78cfd9d333dd560b2da1c07cb52799454a17122d7601d49b4873b236f6ad0b6a26972e9f1b82d9b374a48ab444e70e1a8aea1db8057ab85310a6676c5ee68edb6b9e972573dceae789c2e05a69145a285cb9193ec0ab808ec10dadc3e4e1c84cb04cf416008dc66ebfb6dc1c4dfe89207d14c3df74854b70c8008704770b8038a4e20fd114690c27eea8a8249d281544154d9239abadfa8b2755f71c9673e9df4e478da196cc80ddc4b9f8b44d169fc425381b8bf104b912961e50ae8f0ae9de557bb11196d835be06c826baf2249e0cfe6fd6c3162b8c407584d173196b3681f038cf9a5932e7804d529db6d742b6f47a3186d37711238ecdd574ba81288632948db3dd8bbd2c9518e7f04dac18658f40566602ebcde698b8c5de79fe7dadcabc4b5b5220243b9696887f54e339f9ab3ee8d32c69cc9d4fc26eb2fa6e6948892b0e9bb684d370bbdf56e6aed7b19ea7b9eb5fa661141e492d22a16f4d03d72daf3b2641ca8db685e429347ba7173f2247fa23129249b58f3e0b2339f6fb29f8d599306d769627e5b9098cf93690235f685ff7ae6a6f7db2c7401805f15a660888e6c5550c03994638ad9fc568566006655dbc8cfe69bf45763afeac1e13395ff68cb0a0c5a8eddd66557a341caf8f6053b0fa9f521513514bc49dd2beb6b813f51d804044bfaed5d70a6bc2c45a8457a051a2840316137c5b2756492d09741a71d334dda61a71ecbedb18a20aec746b7cace0586d281aa0d4316c4919d7c2620cd7f18499399e256f5f02b27604486cb7e617b39d4af26c533f60b2aafb0e1c3a647e59d29e73e35c48b2b7b18e9c980de061dfa88d11b2d62a2949a2928d177783ce8383b71f3bfaed9f6686d6592134b1689c53af18fef9a6502b28b27165c976894ea57c0d2a23c8cf7810f515b4d2e34145e82ee9488c2075ebdfc56b8efe0f756b7b4", 0x1000}, {&(0x7f0000003580)="5b79a811a5b82b2b1921585f08c825a53e66184a730a320536973cd0ac4d86efc52573caaa743a664ca6c25261129b5eded59f13f9ce8245263921ef86e4cf1f9e3e93afad3facd6197573bfe4f4ac63bde16f246be39d2af3e03494083f3e82653eba36fcccda9428d5f25d25f2d180b1f89a7acf4bac", 0x77}, {&(0x7f0000003600)="e873092d611690afc5e6db7d4c0d1e39b07b0257a13aa30c21c1dbc8638a5877070f674db3fbee0e647f561ef885db147f56b061d41b8d0f343e037c12115c1cdfd8cc5223aaac677c5620821dd6ded86ba416a4fd801d9679dd43491057c801388c09f45bf77690b3365125db04eac92f31b42cbdf98e6b33dd1698e30c37ea9c61958dac89f72cf4d9d7e6d157a4da5e67f999e742a2716e784f17931fdd7e3e013b70266739852189be652eb1a867c1616b044067a2f8c5e37d490194fa537d2cb5df6d2cf6ae6909162fc50844a01fc8e7611143211f9ea9560d", 0xdc}, {&(0x7f0000003700)="6ec533f87858373cb937f58b6b49f306bbb01a30fd97a1314f009b6991cc425f32e24dec03c936d8553a6472c651e7ae1cd20ac43f421e606ddab1525dbd9de6233efc", 0x43}, {&(0x7f0000003780)}, {&(0x7f00000037c0)="38676a204369a580b739709e12667153a1351797c515b929efe0fecf2dc2cc1730e3054a34dde062a3b159775f66c070f81ad247a3ea55f722fe3ef9fbf27049bdd922ca158fb9443a0c3b2fb98eee81bb62e633e9824bcf675818f2628185ba", 0x60}, {&(0x7f0000003840)="e019c21254e42533b0bb0f2b8bc61e02a85e49938c1299d9ec59961c99dadcdde12bdf35674479f3ca60c1cd3b38acb1d4c2c51a3c5219213da67cf3997ad534d89730c80eb1ff1b4a682f33556c665fce1ea5009a58d41d57d96cbdc93044618238e25c9ccecefb1e1e979d5404aa00bd717f8b428c5c68b7ed5cc7a519aa10a4f819e8228543608861a70c78683333f40b7720cf0c58ee945fe15cf31d87f1ff34d61259e222f1235273f25184a44a084a364ada15c079ae2178a42b899d01f12ceeeaac87", 0xc6}, {&(0x7f0000003940)="4fdeba6691ff2eb2e8a7bac9d5addfbb8ef0168657d4981f54c12406722456df339ffe910b98a286556e07c054a25aef2ba89d52011181deb8c596cb2518baed0def91b9f8eac8d8f175def22cb177565a6776a8e1e6a11f7f3c22fe31293ed76d762d96771d26ed39f4e06ef44e6d4fc2d751807289d28cd8ad8f4a6e0645de3735e82676906d17e4ce1a656f468dc7d45f5b282f434d3025c2805e02516e059a7cdd2c417f5bf5a116619b9d093f2286571cbedec2102e6f19e74ca4f760a91e8f558c8896f41238f36c664e3a23", 0xcf}, {&(0x7f0000003a40)="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", 0x1000}], 0x9)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004b40), r2)
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000004c00)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x38, r9, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x31}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0xc040)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000004d40)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004d00)={&(0x7f0000004c80)={0x64, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x22}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000004e40)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004e00)={&(0x7f0000004dc0)={0x34, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x40)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004f00)={0x0, <r10=>0x0}, &(0x7f0000004f40)=0xc)
newfstatat(0xffffffffffffff9c, &(0x7f0000004f80)='./file0\x00', &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x1000)
mount$overlay(0x0, &(0x7f0000004e80)='./file0\x00', &(0x7f0000004ec0), 0x20, &(0x7f0000005040)={[{@uuid_off}, {@nfs_export_off}, {@index_off}, {@userxattr}, {@volatile}, {@userxattr}, {@uuid_on}, {@nfs_export_on}, {@redirect_dir_off}, {@redirect_dir_follow}], [{@measure}, {@fowner_gt={'fowner>', r10}}, {@fowner_gt={'fowner>', r11}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@measure}]})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000005180)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r12, &(0x7f0000005240)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005200)={&(0x7f00000051c0)={0x28, r9, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010)
sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000005380)={&(0x7f0000005280)={0x10, 0x0, 0x0, 0x7000}, 0xc, &(0x7f0000005340)={&(0x7f00000052c0)={0x50, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_STATUS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24009000}, 0x80c1)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000053c0)={0x7, @output={0x1000, 0x1, {0x4, 0x1}, 0x6, 0x3}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005740)={r7, 0x0, 0x87, 0x7b, &(0x7f00000054c0)="8458eb6dbd8bc77e1776c1ec186f69f4ce348a16c4569edf5257ab7d272120a2f26cf7cbf7f0630d694edebd169b01df5b0d781a07fe90d8bbfabddc493ddd9a6ebc9018d8d317e10b8ed94effc48ecab84e394b38077e57743aed81308e4fcb7dab03c2de3efcf2244094a1f323fd7c2bdfbefe40a294b0584061463e957660cbb09095893c29", &(0x7f0000005580)=""/123, 0x3, 0x0, 0xff, 0x3, &(0x7f0000005600)="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", &(0x7f0000005700)="c306a4", 0x5, 0x0, 0x9}, 0x50)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000005800), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000005840)={'wpan1\x00', <r16=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(r14, &(0x7f0000005900)={&(0x7f00000057c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000058c0)={&(0x7f0000005880)={0x3c, r15, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}]}, 0x3c}}, 0x4)
ioctl$COMEDI_BUFCONFIG(r2, 0x8020640d, &(0x7f0000005940)={0x4, 0x401, 0x6, 0x5})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000005a80)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005a40)={&(0x7f00000059c0)={0x44, r9, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x8e}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x6d}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4d}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c800}, 0x44004)

11.373027787s ago: executing program 1 (id=1935):
mkdir(&(0x7f0000000400)='./file0\x00', 0x101)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@cache_loose}]}})
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff)
chdir(&(0x7f0000000280)='./file0\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$cont(0x20, r4, 0x0, 0x0)
ptrace(0x1f, r4)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000013983b7beddf81d7b000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000200000000000000797a3100000000100003800c0000080000034000000002140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

11.372738036s ago: executing program 3 (id=1936):
mkdir(&(0x7f0000000000)='./file0\x00', 0xd3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x7b8278d11ab1b4e)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x40)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x200542, 0x42)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
mknodat$loop(r0, &(0x7f00000002c0)='./file0\x00', 0x1, 0x1)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
read$FUSE(r2, &(0x7f0000001740)={0x2020}, 0x2020)
chdir(&(0x7f00000003c0)='./bus\x00')
unlink(&(0x7f0000000700)='./file0\x00')

11.312877066s ago: executing program 3 (id=1938):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)})

11.242858043s ago: executing program 3 (id=1939):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@gettfilter={0x4c, 0x2e, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {0x8, 0x5}, {0xa, 0x4}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x354f}, {0x8, 0xb, 0x4}]}, 0x4c}}, 0x2000) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0)
sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}})

11.24256295s ago: executing program 3 (id=1940):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = accept(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x80)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {<r4=>0xffffffffffffffff}}, './file0\x00'})
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x6000)
r6 = getuid()
mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0xa401, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@default_permissions}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xfffffffffffffffa}}, {@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}], [{@hash}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffc0}}, {@context={'context', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '-(&'}}, {@fowner_gt={'fowner>', r6}}, {@context={'context', 0x3d, 'staff_u'}}, {@permit_directio}]}})
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000))
symlinkat(&(0x7f0000000200)='./file0/file0\x00', r3, &(0x7f0000000240)='./file0\x00')

11.241263253s ago: executing program 1 (id=1941):
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg/2:0:0:0\x00', 0x100, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x8aa01, 0x118)
write$FUSE_NOTIFY_POLL(r1, &(0x7f0000002540)={0x18, 0x1, 0x0, {0x5}}, 0x18)
ioctl$BSG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000080))
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000700)="04", 0x1}], 0x1}}], 0x1, 0x24000045)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000020000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000))

11.179781297s ago: executing program 3 (id=1942):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x400, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000040)="8a2f7e6b", &(0x7f0000000180)=@tcp=r3, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x20008844)

11.179274434s ago: executing program 3 (id=1943):
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xff, 0x8, 0x98b9, 0x7ff, 0x0, 0x100000000000004, 0x10000, 0x100, 0x100, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x40002, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x5, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffff8, 0x4, 0x40000e, 0x7, 0x0, 0x2000000e6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0x2, 0x7, 0x7, 0x3, 0x2, 0x8, 0xfff, 0x101, 0x4, 0x4, 0xab6, 0x4, 0x4, 0x1, 0x6, 0xb, 0x139790, 0x6, 0xe, 0x5, 0x400000000008061d, 0x10000003, 0x8, 0x6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x8c7, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x3, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]})
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r2 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

11.026896706s ago: executing program 33 (id=1943):
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xff, 0x8, 0x98b9, 0x7ff, 0x0, 0x100000000000004, 0x10000, 0x100, 0x100, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x40002, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x5, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffff8, 0x4, 0x40000e, 0x7, 0x0, 0x2000000e6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0x2, 0x7, 0x7, 0x3, 0x2, 0x8, 0xfff, 0x101, 0x4, 0x4, 0xab6, 0x4, 0x4, 0x1, 0x6, 0xb, 0x139790, 0x6, 0xe, 0x5, 0x400000000008061d, 0x10000003, 0x8, 0x6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x8c7, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x3, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]})
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r2 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

10.973210024s ago: executing program 1 (id=1946):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000120008002bbd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="000000110009000000"], 0x30}, 0x1, 0x0, 0x0, 0x20fac77a8b6a367c}, 0x0)

10.972658064s ago: executing program 34 (id=1946):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000120008002bbd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="000000110009000000"], 0x30}, 0x1, 0x0, 0x0, 0x20fac77a8b6a367c}, 0x0)

7.987023579s ago: executing program 6 (id=1953):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x800, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4)
sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
read$FUSE(r3, &(0x7f0000001640)={0x2020}, 0x2020)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x1}, {0x3}}, {{0x2, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x2}}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}], 0x38)
setresgid(0xee00, 0xee01, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00000143f4"], 0x30}}, 0x0)

7.843164429s ago: executing program 6 (id=1978):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000fe3a002968aa5a010a000000b3bb6e3c6421d784d4ed4bc0a7d5ca25b95118c2d9cd2bc6f1bfe215ada0a48e06fe9f7744b8300a8ed2fee787dd6cce9c2e853f63f193158f7134cd1daa6e04a3ee4742d46ee8f5c0687c6bf567f1efa39780c093d16ab29f3cb810568c7fa2ba7cec81570bf39f4cc7e2dbbec5b6e918aea0f4b305f2edc0a1d83923c878bbec96d670ef82ad1257022d18072925880f46ee7eeef4c45dda6017ecbc67ef6eca9e79678d163c420a2fbccaa4190309699aa8cde2ae3cc2967a3fa24d1203f75784"], 0x14}}, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg/1:0:0:0\x00', 0x2080, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000440)={0xf4, ""/244})
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000080))
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r3, 0x0)
connect$netrom(r3, &(0x7f0000000080)={{0x6, @bcast}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x11080000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r5, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x38}}, 0xc000)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000fe43428f4a4bd249b1057e1612139956a9c700767bd2c56d3635dfbd2671d14f2894af7dee09741943b1222613329f9e9f80c8bd97fef77e59855dfa019d75cecaa950ce1d0a051e6130d201ec0cffcd291aa9f791d4405175afa10162bf525a8730c08c0a4b3ea76ad4b3609c9c17391153859ac553c5360e000000b4fc91540d4f4fa9cb1966b5122d5c786d302df650cddb657820c0271a201647f9"])
ioctl$KVM_RUN(r6, 0xae80, 0x0)

6.072717322s ago: executing program 6 (id=1991):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r3=>0x0})
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r4, 0x0, 0xc8)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "d99c6bc318328bcab6680e4cf4bb4802"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5e}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x44}, 0x1, 0x0, 0x0, 0x10041}, 0x4)

6.014922238s ago: executing program 35 (id=1991):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r3=>0x0})
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r4, 0x0, 0xc8)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "d99c6bc318328bcab6680e4cf4bb4802"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5e}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x44}, 0x1, 0x0, 0x0, 0x10041}, 0x4)

3.070874432s ago: executing program 2 (id=2024):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, 0x0})

3.070456611s ago: executing program 2 (id=2025):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x3}, [@NHA_OIF={0x8}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x56, r2})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

2.341095175s ago: executing program 4 (id=2026):
r0 = syz_usb_connect(0x6, 0x36, &(0x7f00000004c0)=ANY=[], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0xe3, &(0x7f0000000040)=@string={0xe3, 0x3, "9596b52dc6453eb0cbae959031a144c64f8797131baab54554fe384bba61d304f454abb777aceeca6fa634cbe823c37930c54d8000d5f3842d1e1c733c5cbbf4f04bab73b930f7ed3811e4be8a2694084c70cfa1415db9e5b58039a103579f132abd9b4063a11468e4c710e49b580972fd84f7e9aba3f6d7f93c461b5dee7bf1842be355da5a1ef5ddc7941e1a64da8aa5f8fb435990b4079901ab2fceb953f6dee655d9c97113b88817079cb5008a4d769582fbfc9f39224df0eda546853a156bc168528cb8af526f05bbff4475d93b872d023f92795ad15706122216f9f92152"}}]})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba)
write$char_usb(r1, 0x0, 0x0)
syz_usb_disconnect(r0)

2.111093549s ago: executing program 7 (id=2031):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
poll(0x0, 0x0, 0xc6) (async)
poll(0x0, 0x0, 0xc6)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='V\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYRES64=r3], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000280)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r7, 0x0, &(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x7})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) (async)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1})
syz_io_uring_setup(0x1750, &(0x7f0000000040)={0x0, 0x3104, 0x20000, 0x2, 0xcc}, &(0x7f00000000c0), &(0x7f0000000180))
ioctl$IOMMU_DESTROY$ioas(r6, 0x3b80, &(0x7f00000001c0)={0x8, r7}) (async)
ioctl$IOMMU_DESTROY$ioas(r6, 0x3b80, &(0x7f00000001c0)={0x8, r7})

1.58202994s ago: executing program 4 (id=2032):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000180))
r4 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
ptrace(0x10, r3)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x5, 0x10001, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

1.512690479s ago: executing program 4 (id=2033):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="000428bd7000fedbdf2504000000ec0001802c0004001400010002004e20ffffffff00000000000000001400020002004e246401010100000000000000002c0004001400010002004e210a01010200000000000000001400020002004e24ffffffff0000000000000000380004001400010002004e247f00000100000007ff010000000000000000000000000001060000002c0004001400010002004e23e000000100000000000000001400020002004e210a01010100000000000000002c0004001400010002000009e000000240000000000000001400020002004e2300000000000000000000000045c5d33e02e8fe6906685e469a4d5c0cf3f9c5579cb2e5d4bb7f9ea9d15c6e039866d6af1bf25af971bcf522d3d4316c4b6c32c9e459ea13abedb023993a8360e8918c9613ebfcdd1a57231f6f688142082fbfec95a4575ab2d99d14c9384c0e0432c3760000d420abc70d953507031ee50e84d5ac525518d3ba62665f8609b6584723e864296f96b8a7640f2e187576db54765217fced5a146b81cc1a193af4c79bab4ef2e7527e8918990c697a69cadd9c164ff908e81a0ce919a85017f2829137d92dca654da3badeafb61e40ec7c683ad8c582ed899ad9289f1951855c08"], 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@local}]}, 0x28}], 0x1}, 0x0) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228aeea00fbc033117a070000000000000600000008003f"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41) (async, rerun: 64)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) (rerun: 64)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb23}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4090)

675.124485ms ago: executing program 4 (id=2035):
open(&(0x7f0000000000)='./file0\x00', 0x107bc3, 0x1c0) (async)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449) (async)
setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) (async)
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00')
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4525, 0x0, 0x3, 0x12f}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000640)=<r6=>0x0) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xffeffff6, 0x0, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f00000002c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/138, 0x8a}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}) (async)
io_uring_enter(r4, 0x22d2, 0x20, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c8, 0x8000002, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000}) (async)
r8 = socket$unix(0x1, 0x5, 0x0)
ppoll(&(0x7f0000000d40)=[{r8, 0x3a60}], 0x1, 0x0, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000020c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r9, @ANYBLOB="002c0004801300010062726f6164070073742d6c696e6b00001400078008000600d9fec8792d9a60ac2a6cc9afb334c01c40fefa16fb0a5ca1a11f7d5aed3cb09900"/78], 0xac}}, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
dup(0xffffffffffffffff) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) (async)
accept4(r10, 0x0, 0x0, 0x800)

674.628207ms ago: executing program 7 (id=2036):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r1, 0x71, 0x40000009, r2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
madvise(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x64)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)

611.654021ms ago: executing program 4 (id=2038):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='befs\x00', 0x200000, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000001480), r0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000180)={0xf0f03c, 0x4})
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="000127bd7000fddbdf010073797a3000000000140002006e69636666300000000000000000000005000400020000000900030073797a30000000000900030073797a32000000000900030073797a310000000014000200697036746e6c300000000000000000000900010073797a31000000000900010073797a31000000000900010600797a3200000000"], 0x98}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000001740)={0x10a0, 0x26, 0x4, 0x70bd2a, 0x25dfdbfb, {0x1a}, [@typed={0x8, 0x6b, 0x0, 0x0, @pid=r4}, @generic="4c76e0c96bed670d1f2c904bbeab7c8ba196a6b80fd258aa755abe860cda7696f62efe0f33489f3c98a8634361cdefaf46fc11579430ae6cd4c9468c64baebe863b6bb737e7a1d1cec9967a8798972ae7eb49fae0ecaecc6877ae46ff01b69ec1fa773b8203b967e4dab3489206839b2264780398088d00a81948388def8e5f9", @generic="2d28942723ace3a280328ab317c3b857a5f2bbebb375a7cb63df959fb8a27ec8f488a92259a62740b8995230fba4f7f27de54756440b7b6f9b772be553788f774d0a84400ce449e1081d96751e56cd299b7fa30a0d7a80bed981b285707e244c9f42f4434c2144ef52dad6e3a58aa08893af04bc4d89f00107427a82ae18da2e8653ebb51c4f32cd8ada084775a4367981a16ce8504ce28be170cdf01fc39cd2584961386eebb8452fd6fa4bd95759ed69dcde3e989341f787e7d4474089c2287bc0553fe89ead74064f2bd4ea9ebf254ec9f1176ee38b600bfdb1baa4a67ba71634dd1d80169cbc009eba7f3560e11498d003e59931a224dccb282c409b1b77528861b040c195c048042a4234aa9ba3b0e15ab496ff7ca18b7bf7c119d7191839c5301537a70f78983c88dc026bc0fdb765fea29384ac8c84eb7eba52f022e0a882592d1094504825a49e402020af91c78dd62858d885a42129310da856bf8aed516a6759e85eb5423dc88ed3dfd270945ce7bd25db61a52d70ab0b393620de0ae641703d4a21d7cdcf36b4a3cd713192c8773d800709e4df70364d71f68af0850eb8045f803341904c98f65a2a90557e64e15c90d607523e7917f1512d1d126d24fd270bd81833df596ded6b94a300cab99d4262a677b29ee968ab20607f88913c30ff369a74d71eb77a3d5c3a4d34b6e88d8892dbd423c8da155175645ef048e16f3f7d4194e585aabbd7733cad730c8336cd850a08222502ef12a5eb650e212bfe77a02f66251b15eda540ce77c72704b1f69db18b7e69b4a674fcaade781ef2fc7cef3fb935aded2531e09a705b60315364aea417d8271d8a970a2e4cddba5bb5fad43c7a06d6abdc48d060ad657da93d1ddc01b4c294d8dd803051a8c7f83e7e40644c1b1a3f7fa0a6b030289ec4513c857bb9babd4ff8b48a2d3244bf3b17098322cae8120176e555a43e2025702819c67edf3e0dc343d108757e76309773a82d7dd4c6592c155dbd7bf1b6b0c272e04ab1fcd91f765adb1b0645c32953b56fb9929474018ca731dd5057d9012afd25814b19265547eca89901f90ca67d1821fb744b2004fac226eea9ce51c8cc261f08d3bf391bcd5af1fb613565283361c31f6c337e0e7150d6d9b16510b4d713436d5a2c8f7122ccd0924cbc758efc0521310d396e8b1d2333dcd4ddbe774922d795ae92639501d51a65ccfb11c3e4c2e29326436560dd515fbe42a5d2fdbe140f4bf951de0682cd6df61fe979e72aadbf74c5ec7a4dfe1cb4dfecf04f5f2cf6e012c510d9a006bd3af397d211d1211e7f4d1acb01df62ed39d5abddc40c4d123f625ca86e093b32838eab63c90e77da9073afdc94814a8bd1a4e747ef0b8c7e31cd08df79f3c9d82097f39cd0c09704e21d95d3d3a7efad0f7ee9787655f2cbf3efc09b795472c3f4a2d4db475f10e30185017e5ab7a2dfe202c3924e8b0a5f75b1d27b9d5e7e11b4771cc7e1bfecc94e2be0ebf219753a475c9004362fe1d0a325c5e3e51cf8dafcf73a30eda1f108127907ce03ae299c0a2ccc99f02c77898db30de25c36653375a94033cd0658b96155d74277e93fbdac8da2796e1d471b90679d2e658a62cd6305aaa8b4f328bd8bb07b5f76f91b6f72adc497b1a0ebdba45c26506be301a490b089ca696d512973d0517e46868e2bef1b8d082e710374822ef132a428fcec844304f7ba7e67020c139ed6af45b5187a53ef59c946b7b5f76d75639e2959280c02f58f0ee7490bbf951a24fab8736a7fd1c81b3a9412d48a5ed64f90229fa4373cb12e37b26cfb4e15b9a9ae7aca571898e0f400b78729a980653f8b1dfb73e757813ac2e5feb28cf38698d4ca74dccf3068d277a331cc140027ba0b697450564da2542e89e4518a35ba3ae571c429b74c4e1432189f16895d932e244a9ad1360b25d93f6e45988501fe2de656f98c211f7892fb9a2d77c13514115e444331b90ec207a1a27f0a3afc9a1c3dd7db39a6156aba5d8c066b2ae6dc0bd198c6ec01bf693a25ada60c0db19594db88073581658e4842b38f29be2162b514485ba890bb179fcb1234e508a9725792817a5cabc6e9d6f47993764e05647cdc3112220e9a3d6840f3f4762abc59efb09d450d08f8f344ef3ade2a1d84a6f3c50076ae5d16a4d9ed5bb29221a42ad82ff210d87ae219753a85c4ac5daabe28b3eaad4de6c3fcaa027892179d585dfac0d6a9cd18cf9e70454e64308095d2ff8c9ea29473c2cc39930fa814eaaad3fb61fb1683cf3fc619a92054d8414bd1348e5734b8cb8c28967342fba19c8adbede6c62a7cd4f99d73654acdba4a577d9b8c6468ad033ee65951e8637ca3a220072bd37f8a8e4912f8378372233000df7f3835b2d730e146585c4e9419e532b5e0b9fa34d018ce585a679c3733c01a93f2cb41bc7cdec1985c4e9a6df17e9664da9e54050835323586bd132ec44ca6d7d8e2f44ede62556f9dc91c361f26c964da76f8a185d0d332ef092ccf99d2510dc4d2b242d6be91c35cb2406351fa6f03ec7a532b65c9eb1ed24bf0d035c013d6ce012cde941c7ed9d3f4a188d1bffc816d6d680228a1d51cc5f0ba2d898412bcfb2319feb6cf0d5fac588f5a23c59ab9cdb8000821663bde07cda6e33272c0fa631e01a04ebf816dfdcb161ca3eefbf480ae58af4c51ac80294efb6ba52101c9660be23a11d356335f5964fd5aadd0f05165004037dd6c115efd83b4787cca5c2c709f24d6d8309d40821cd4fd59eb3ac5f0fd5e69247ff57870fc651d767861da2b53cc6adb3ea898c9ad35bd35be487a49c4cdde9c575394f67b122f2693a8c31fe185be16f83ad7283c1d68c0e7c214afbd2df5f3cd10cc29d087610503d436733ce4a2443a0d589daf38dc4a68e5e94dd9e7c33b4dd90610416a22735d241835d6fbbc21e08aeae57fd5d9de326a68507b89895b0554cd4d8718d7d624795d9f808b10c3df3d5db9e4315746de016d99682706afc2524ee737b978a76c8e7ece2fae66370a15cb62803804d69d9929562eda1a30d8f7a88390c37a4eac23a86a5ba695104e5683a1e01309fe7efb8a3db5af52e072c779aebd947eef80d07cf00795b4faa9a5a46da5979e224fc6bd288722f3169f4a4761d7f416482a1fc81c25b529f54c1668ba6c9d01a7526547a155d0a06479b10de397687f15b35ad5dfb271d11c82b0a57c5af7b6d1479ad3979f6c140729f1715b9b5f4e68a067fb4961955ed73a256d1bbee96c93bbe38e30a80cfd719d9575f4d5e3f9f7de5bb12b0956c685d3a928a07e33e8b9d838c26c3adf31ef576747fd1343227fb60a4d5d9f59ebdfcaa31ee983a73fa13bffef5640065be3f5cf4689887d04a854a3d41fdc3ee698721f058f4b88b4e7ab5808d1f995785256dd60bc33b5f917ad6b9a5534c2f6980aaceb490b618277d01991106d84486a2d13463ecf6a981bba7a1ea43b6b7f60401e1f0809e05918a84e897df929fbf0d8b1734b51d80a5f1cb3e4bec8d5e274839c155e7d7be2113cabce21cc7107d5767664632611bf0271b97129db66a4f698d90b71e1f116500504c0d620ea4e3d2de1ae2831d373812d740b73bb754545a569748d3098b83aa26558f8a8cbb9ddccb2966980db60e4f4950ee1fd13e83b19365e232a9219b74058a475f9e7f31dd867a0a3b3ad5a7b629b57a4f2f8f62a292e8f841b7c040a41caba0a8b954db8ef96cdee71e4ac427671722c3be24b96f14d6cf6c265c86c8e3df0ae079f7a3372783047f96efc120cc38edecdb6b759dd40c2df920c942b8215bc15debe1efcedd7f97361e238a7f02eb8119c7e4728a88acd2b6f27b1761c281487cc411a42b38e0656c28188c6a7271cb82c60600605a413f38355aea7f846091398e206bb6b2c20a621f8ca8e34e5162ac86182552bfa1745772f0f3dfefcf626d92e4716bd1287c9055fe0972182f5c76cd4e4f8e3d24e54c0cff6c347eb9c9296af8be48fedca4b8146e0e3596b827daed1c106f3356d03068283b34a3c3663b29e7761ec2619f58baaa7cc12153856e7ca0475ce7ee4fb9b6a7ea1163533f71006001f1b9a892ae36ae4a4713c141c9fe96c87de5cb18bd8de78672604a21a393854e82b674242d9bb5da7c84069fa05ce254ddd9a19ae7ae227d54acf2fc8bdffa50ec0243ed623b48b4a36cf725b6fca9de89f0bc17d1aa08374a6e084f917f7623cf7ee1456a974cf0519f148f0c6b2d98d62b81e51df7669341faff9164da4b2b6e3656047a97d6d5b13939c3ed68f7b106757752b08a46f9aa8c5f583ae10ccaf697238e6af0f4bcab81ca03192588f8735dd1b91aa5f7889e5aaffeef067c4bda9561d9f2cca2f13772ca9646878240f81a54b48c764571d8f288c4eefb5a7387c58999415c585f56cbc6511ca5695103af897fae7a1faadd1d2ec5841360831567da615ce0febac1521a9ee6c564ba6899028b9c29ca4870ac935bce859c6383a75c5326739c26dfd35e69f2d21736d1f898a6dd4f2739d006cb562e2f8ecfdb57e3ecd5bd45e8970a27322c1b329ce3c50a9595327bfcd14f1d9fef0bc838d7f6cfa3362c7e3f9e5190cbfdb638d548a64e5d7bc72e15e430a9f4f9040e64b0692ff17bfdc8975f7ad8ec7cc05fe8ff7a645f3533da8ef71cfa87bfdf48c69e861cad70e414b5fc861d79101f5397439379ea80d618567f2cca46d73ac9b42163b34dd1233251fb001622c4e516ec962bd4aa1f5db722859813f42476f33903ba14b6d4091f28b02a55254af710bd332949d10c4250383f262e23f40126c5322c2c19d59c7381c2fc69a582d252fec04a5d166e5c4d33297b1b43f9df83ada9354dbaaffa380fef28c47e38ea960ba6da779ccb4eaec0da93399983ea5836094387f16177bbf85b338c39c2de66eba7c9979d937da7574bfa4998429c2d34569c67a8cc337cc300a290d79e75c4361ea31f8d311db2e09fd883345f72f4cb9bbcda7bf921919a99eac05a41eb58ec4e6204079fae7b1d34527754cc67113bfb4357c69a8df87dfbee42b18459bdd2b74aadee47891b5f2404c5aef89633231634e8d471cdd679f593abd6a204c3afdfb358c14547b6744cfaa17b0d00008512fc305f41e623785bbf6bf15d2c3809ae7b1cc5411b02c9b51f82801657c2075466b7b4d1f0fefbca093947497cf9aa1303d536bfcd2511dc62fb48bc0f1e3d8432145fe3114d74a5e41161db7c208bb7fdf9ca30e56c00f267eda369836e2dc12063c8e913ae058c90e4463eed3b6bd582c3367b7122890589f9004d23618c43722af48e822868b95689206da74685cd5917f3d2968bfd6fa3fe6f5d3ae957ed7af645f0cd4482c3fe42861676a9d6b43463a7bb206b71915540fe79d0ab3434224ee9c4e58712275b9493600f03f500f5d8fcf9167ad9cd098e21cd4c8285d986fde41ab5b8b9a0b4c0c365217b7bc96482549b9fe3caba9f88a4dab0798408ffa4d4cf1ddf15ef15d71e3b5cf90fff775b65931c751a9556471bc0a5e2c69fcb288db955d0ff4fc288a2af79ef05aace41489afa577e188440007213311b0dc651b669e22f1021f285b03dc2ebb45968dc33ad9a33c31cb9e845e8ceb52445ccb4cdd3500e2c3b479d38aa7a40a1571b01600b395bdd2bbab4d85755b26d8801ac98d2ef02e5856f2f7bd2a01221d6a0889940cbb551d3d4aa830fe154ffcb1b13c7fe0a966b1634122759f33680226507c194af9e1f15fd87c6607eacb31a4c25c51f7718c6a51d9f03cce0bc42fddbbfd2677", @nested={0x4, 0x37}]}, 0x10a0}}, 0x0)
sendmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@isdn={0x22, 0x6, 0x7, 0x6, 0xd}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001640)="4c3b2606532b9de9704ba8c410f533934015753f86e15a454084721065c1233110893b0b150ba1ffcbd9d37f0f979b09e0af1d4562da21bacd41100494875bcce2d5a4fe89a5513e8fe697c075bf68766ecae4938691d406d460486d5bca77ee1a1087f5fd7e9f001b4538f3d0ff3765b059c6db89fcb283d5595205c282c02f484bb327c31c90d963da2a869923f327bd8c5fd218f5a81d491ac400b411fe241a0c7e3c788e6e9ce0273f64fbe8565636e2c57c60b4ab6b27f4c6ef79de55ccb3c1a217d34fa6c24262ad614d650650a7bd14503ca6764a056947ff9372401d74ee1ff10a299ba33ea62d6079a70e3e39322593f6b8", 0xf6}, {&(0x7f0000000100)="8e4ef5a6ca0b1dbd091505ea917b38bd93f97aabbc1d2f502984390b0e25c3ba86924208", 0x24}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000002c0)="74877e6d20ab211e43bf7f0289aee4c9769625eb4e05274c6264c78eddcf0aa3496bf3d50601564984eec92696d1db6dc86aa47de1cae1909436590237", 0x3d}], 0x4, &(0x7f0000000340)=[{0x60, 0x114, 0x0, "e99cb3f077fd1f8a358bbab63ebe5b65629611f8038cb0f262eea6c305a097f4c5f993481c121ba6176b7c936de4a8df8a7be045c1aaea3c9620316c2370b2a66aea2aeccdabc0439e056b05c1adc8"}], 0x60}}], 0x1, 0x8004)

611.486986ms ago: executing program 2 (id=2039):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) (fail_nth: 1)

610.183832ms ago: executing program 7 (id=2040):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0xb, 0x1f, 0x86, &(0x7f0000000880)="17f1681e32769af00706e5de04d408f2a5340bb9fd6c66c27f10f26b55c32fe9815f239be2fdc272d74b019dd31b31b25df6e8cddaf3a6520e6ae529e239300edd4de5cdc17c4bb1c6b1400adfea571b9e11ead04ca95b964020d7e3000b2112af8a33596fc2f7b306d0e796c4a294f75f6212e060448cffaa95c5abf43bc5f75b0ef96adb0898ab5ab8e321acd7a0c9b8512694e64ec225b233bb4306c1ef1433616de036612fb53449558c806d896094bccc6fd8b8551a17aa14920dc45c36ab1ae893715185a4eae9b348c4c8dacbf9a514028f0d0804a76e6dc8b1a768d14119707d65f074987d3209b5586a2466d6047e8ac4ffe17ceb2d220cec663050fc798b3116bad6d0d702d604bcbe69781e7d79225a59c6915539076b63f6e2e1c5d9e9ae5ec2aa31c8ef9bbf68aed1afbe4fb40f4cda0943c6bf9b188fe451161d24bcd6e367bd76751a00569798c74b19baec878f09a38d838448a043a6c5f4cdeb7ceda7f1eebd63bb762ad03a9e525bc2bbefe70967f5e3d1a42cabaeb436fe9086c91da3b0e1d146f2e57dd33c6cf1cccc6972eeb105f68337141ac2fa86e20ab8cf5ed73a3957ce0ef391a46f23277e6c3bdb2f1c6201bbc0991410345dbc502ae4e6df914cced14a247fc1b3385170b4319e7a1001305d9138b2599e0060addff011194f135fe853708e8c0fe8d4154ed3f65583dd497d8bdf273328fff522dd6de265d9087c62a31961f3973fea1e8bb243565d66c082882cdb189dc676eebda8f30c616d6b8d708ee84c36cd80d479d7cfb74b587e1c203ed4d62b0c42cb05eb0104d99336ce1a10ddbf9dd4f4e37d0af86ee4ea5650cca4d44e50df3d82d91efd29faab9468624d754b986a29d9a57a590db46ece5526cbee00231fb17e5e9dedaa7c3e41e46e7848dc60122ce65d60bcc3f5bf4cb670d51eaee11ab9d79a8de5bda078b7378d17fe72dd9897ccdb0578ba6e7a5a2eb10efeb3b61ead5ad8dbfed3e22333e852843ca80794c0cf318b2872df3be1937d3f5f45b90e474adb903a36266bba137e3d0f532357528642c63ed33f02471a2b59327da1434a41f68434250bb7279f090c4cb194bdbcc291b625387ff0b390f5b0ddbe294359d2b2fd04c8fa485074cb4df4b5e3966c8af04db5fb1009dcd9562136511e78e7f051dec74450c98b88d278a9f83c0210c055caebe380c5c058db06770d0f994d801493c5ce3ebbec2c5488633ec66f5cb6a43378c3bb4fe49bd4c643582c5e431287043c033f7d5d69158e79bfafe26f658eaa78f6ed43fedcfdfe5c99f37e36e9bd40c8793a6bda4c0d076de6f9fbd4a55e2996894b23fd00d8d0bec467aa8414b982f66678d135d05982489d0512e0684abfe566c9c6f4d715fd32f1de062446984e2ed954b081d478fa129cb1abdb13b34d7fec3b1ceef228990009da05"})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x800)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0xa, 0x20, 0x1c8, &(0x7f0000000480)})

609.211931ms ago: executing program 4 (id=2041):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x8000)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000540)={0x8}) (async)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000540)={0x8})
socket$can_raw(0x1d, 0x3, 0x1) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7, 0xd, 0xcca})
close(r1)
close_range(r0, r0, 0x2) (async)
close_range(r0, r0, 0x2)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0))
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x38, 0x7c01)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000280)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r3=>0x0], 0x40000012})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r3], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x7f})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000240)) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000240))
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x6, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_io_uring_setup(0x400110, &(0x7f0000000400)={0x0, 0x11, 0x20080, 0x3, 0x104}, &(0x7f00000004c0), &(0x7f00000003c0)) (async)
r4 = syz_io_uring_setup(0x400110, &(0x7f0000000400)={0x0, 0x11, 0x20080, 0x3, 0x104}, &(0x7f00000004c0)=<r5=>0x0, &(0x7f00000003c0))
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r4], 0x400000000000005f) (async)
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r4], 0x400000000000005f)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94)
ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000080)={0x68, 0x17, 0x3, 0x2, "13146d686d0d79eedf2bfcc84900"})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r4, 0x3c86, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000380)={&(0x7f0000000300)="83635d116c6cc586bc97389cd80dffdfc25d69e4be83aef8679f63d16e767dc83d8ea886b236c97bcd02c84d87cd439650c475af56291a28c1749f334da9bc047c2da1749181eecd72ef26fa638fe45c63", 0x51})
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async)
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000600)={&(0x7f0000000480)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], 0x4})
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000005c0))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1})

472.132199ms ago: executing program 7 (id=2043):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x29e103, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x2, 0x6}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x7})
ioctl(r1, 0x8b32, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa10001, 0x1, '\x00', @p_u8=0x0}})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000280)="da1a0f38f15c00ba2000ed642e0f01c5360f01df0fc701dfdfad000f00d0baf80c0f98dbe1efbafc0c66ed64660f3809fe0f01c3", 0x34}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000080)=ANY=[])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

469.590883ms ago: executing program 2 (id=2044):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"})
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

382.402972ms ago: executing program 7 (id=2046):
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x80186803, &(0x7f0000000100))
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0xa0042, 0x101, 0xd}, 0x18)

382.218155ms ago: executing program 2 (id=2047):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4}}}]}, 0x38}}, 0x20000000)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x0, 0xffffffffffffffff, 0x6}}]}, {0x4, 0x3f}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20018804}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x16c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x140, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x4446, 0x7, 0x101, 0xc, 0x11, 0x3, 0x2}}, @TCA_RED_MAX_P={0x8, 0x3, 0xa0000000}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x200}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x10}, @TCA_RED_FLAGS={0xc, 0x4, {0xf, 0xf}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x16c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}}}, 0x24}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$alg(0x26, 0x5, 0x0)
r9 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x400, 0xfffffffc, 0x2d0}, &(0x7f00000006c0)=<r10=>0x0, &(0x7f00000000c0)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r9, 0x100847c0, 0x0, 0x1, 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f30375c7442400a69b4f33c7442402d3000000c7442406000000000f011424c0c00f0f6758580f01ca660f38817700c4c2459d78ad", 0x4e}], 0x1, 0xc, 0x0, 0x0)
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000480)="4a23dfad57e0bfc4f854eeda6abe5d5e713a97c9dacee7ff8f882ca486e8457f5b44895641360d8b661f6c62281f95236498ff56e62999fc9fe23154529789dd8ac4444832bc3c57d26b6407d131fb7338f0aeb7baf28d0c37e77e2fcd60de5a5359246fced99ac965b266fd0b15684088a01ce4510c021acb27f4f4abf9c13bbf1e2f9a65f13c88c3bfd84ecec2216f06d720ee5e8444cc507b5963518d4bc14102eae0ede4722ec61a759d4aaf3e218fc57093e2acc95936ea19a34e4a6c9f40ac1ed341781034b90aed6bf98c3946b91a63aaf9892a493096b64cc0692084f851b8b64609752ef73fb2fd7a92aa90545a3e21a9c3c2b3bf")
ioctl$KVM_RUN(r13, 0xae80, 0x0)

379.0997ms ago: executing program 7 (id=2048):
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'veth1_macvtap\x00', {}, 0x3a0f})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x4, 0x8, 0x301, 0x0, 0x0, {0x68477c80cc53f03f, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x4000010)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x11096000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x400, 0x70bd28, 0x0, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4080)
r2 = inotify_init1(0x80800)
fadvise64(r2, 0x5, 0x3, 0x4)
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000240)={r0, 0x4, 0x3, "3542ab9457e9c71d9c962dd221185c55dc4229367c8078caa9512d4014d30336df"})
syz_usb_connect(0x1, 0x154, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0xb0, 0xe, 0x71, 0x10, 0x6cb, 0x10, 0xe0e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x142, 0x1, 0x8, 0x1, 0xa0, 0x3, [{{0x9, 0x4, 0x2f, 0x4, 0x2, 0xfb, 0xee, 0xcf, 0x3, [@hid_hid={0x9, 0x21, 0x6, 0x4d, 0x1, {0x22, 0xaaa}}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x1, 0x81, [@generic={0xf8, 0xf, "3901cd83b2b3456aa4c6304a2a1858eb5c570c1c055b0453e8efb859a834066c4a62d800d58854604129f82c0cf54fa7b9bbb4e420296dace739381a5052520635637ea4fc35729b980a5ffaa7bf7a37808a247ff9b7038723f9cc70152f736f886ea31fae589cfad1dd59d655a513a1998aced45fcbf969d54520bc061477ce40ba4f661843c28347317142ca885777aaeb8f658bd8dec206b511dcb8b8ded3058a01fc17754570e60f488315fbb6b93fa53a6789421272dc0a50d39b220752b93c5e601d1877ae1de8115f0caa83fc25f970282fce19a2697b678364b808aa461f38f3055c370fd127ab566bf8eae058384415ded9"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xe}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x0, 0x10, 0x0, [@generic={0x16, 0x1, "7091f9f8204e478519ca244d86143c34a0d4cf47"}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x8, 0xd1, 0x2, 0x10, 0x16}, 0x10, &(0x7f0000000440)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x7f, 0x5, 0x7f, 0x7}]}, 0x4, [{0x1d, &(0x7f0000000480)=@string={0x1d, 0x3, "7c0135794133c99ef64b7a0eee464d39ecb294a0847f7b97d41285"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x4001}}]})
close_range(r2, r2, 0x2)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000600)={0x0, 0x4, 0x3}, 0x10)
r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000640))
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000680)=@req={0x800, 0x7, 0x7, 0x8}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x148, r6, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xaf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "af9e69c23d61f55f277ad76b4faf66278e6118cb2bf3a93e198d9b5f7098103c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x373}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "2dd434cee463d369b64110cdb699157743d9df51267d7dba46a7f7febaaa693d"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc0}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x20000010)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000940)={{0x1, 0x1, 0x18, <r7=>r3, {0x4}}, './file0\x00'})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000980)=0x2, 0x4)
setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f00000009c0)=0xfffffff7, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000a00)=0x85dc, 0x4)
r8 = memfd_secret(0x0)
ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r2)
ioctl$SIOCX25SCALLUSERDATA(r7, 0x89e5, &(0x7f0000000a40)={0x43, "6b0b832745b20bdd16331322cdf325e6ae40d7e805b5ffdc9c9c48288785e595ea73b42e160b6924cecd9b8944ae44a5bf64a781c6dbf1d8f2b7ffe889b887be5d939ba45b09e741d745d61834947edfb51770050975d9be387ef30ac4e372d9a1b9f5a20aed0130714cd99fef5be64347a0a4ccff7d717bf4447443f280084e"})
r9 = signalfd(r4, &(0x7f0000000b00)={[0x73b7]}, 0x8)
getsockname$packet(r8, &(0x7f0000000b40)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b80)=0x14)
ioctl$VIDIOC_S_AUDIO(r8, 0x40345622, &(0x7f0000000bc0)={0x8, "e39b7600d4feba313e7d856b2a7ee60c90420c9115f00b60dec5784be40e4945"})
r11 = accept$unix(r9, 0x0, &(0x7f0000000c00))
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000000c40)={0x2, 'macvtap0\x00', {0x7}, 0x8000})
setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000c80)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, r10}, 0xc)

262.65941ms ago: executing program 5 (id=2050):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000e57ffffe49ae9e15300086c168f1f839f58e049d29291bf000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYRES8=r3], 0x5c}, 0x1, 0xf000}, 0xc0)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
sendto$rxrpc(r5, &(0x7f0000000000)="3e859c2c0e997c00d503ecb9fcee6f74858555dc1ba4ea4559bc57809f8688ae34aaa7b7c3f14afb4062", 0x2a, 0x10, &(0x7f0000000100)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0xffff, @remote}}, 0x24)

262.138674ms ago: executing program 5 (id=2051):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa86dd60"], 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000300100007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4) (async)
sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0}) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x2c, r7, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8020}, 0x200000c0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r8=>0x0}) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x30, r11, 0x5, 0x70bd2c, 0x0, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r9)
sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x14029020}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x78, r12, 0x400, 0x70bd25, 0x1, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb25e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040881}, 0x4000010) (async)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000250001002e01202244358be009"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000110)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7e9fa9cc", @ANYRES16=r7, @ANYBLOB="20002bbd7000fcdbdf256c00000008000300", @ANYRES32=r8, @ANYBLOB="0800a000050000000800270003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc080)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000005000b00000000000800110009000066"], 0x3c}}, 0x0)

212.094348ms ago: executing program 5 (id=2052):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x802)
readv(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/165, 0xa5}], 0x1)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x111000) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000940)="85e16e757d5281161b49d8324147a73bf340364e6d2eed29190ae009208354b5d7ca1c9fd6d8d3ba7205ad5d946a6425b04ffb01da6de0496c531fbf9e7dfe580af8ec0e0bda92f47bcbacbca119d14c8581f41bef188108ba92b6a6d9cd23adc4890bff093996cbea09a8edc9f39550c5b90df96366aa8621cb85a17d758ec12ffab614b4106661e71b33026f1e3b1217c871c44e94499d70a8c266d0658a984225576d522e791d71f7c222cbd1f2bc3d563812ba4b662939a9d5fd3009973d61a2a0608fc75a527bb408808afcc9775771691b24e41cf5a19f067f4ca189470a7a44f4cdb47173052fdfd851eae50a3590d469059b61b8824d7205127eec39180d6d8781006de88340e378a5fcdbd56babab919125529371d7ee100796cb2f899b99f18a5cd4a637e168a94b9999234e252b0c7c151bdb1c0deb57d2036aa33af9e07086674644f4b4ba82c14ce413de8a29edd7510d101f9094242741c2cfc2cc569bdcc06b6a8f1172d93683d6f2289a811c9e9119ec3aefbde7e8875f5b9b80487308c1e6496711d312bd20ba5a91300b400921f64bde6ccbbc12c1ac5687306f91d2d1e78ab6725ede4bd17db5f44910b41edb493519c9832ee84091f03c47c84c22879485efd44385e44ccaf34f3fb154d13e12c47381cbe6c0c89856db22aa277d355e193ca478e885ce637f3678047cc38cd170fa03a2dffd59b9afbc5e", 0x202) (async)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[0x0, 0x0, <r4=>0x0, <r5=>0x0]}) (async)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000280)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r8=>0x0], 0x40000012})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000300)={r8, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, <r9=>0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xc0c0c0c0}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0, 0x0], 0x7}) (async)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000c80)={r5})
r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r12=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r11, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, <r13=>0x0], &(0x7f0000000200), 0x4, r12}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r14=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r14], &(0x7f0000000200), &(0x7f0000000580)=[r13], &(0x7f0000000040)})
r15 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
read$rfkill(r15, &(0x7f0000000080), 0xffffff1c) (async)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r15, 0xc05064a7, &(0x7f0000000700)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000006c0), &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0x0, r14}) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000b00)={&(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000a80)=[0x0, <r16=>0x0, 0x0], &(0x7f0000000ac0)=[0x0], 0xa, 0x3, 0x1}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000c40)={0x600, 0x5, &(0x7f0000000340)=[r4, r8, r9, r10, 0x0], &(0x7f0000000400)=[0x4, 0x17], &(0x7f0000000b80)=[r13, 0x0, 0x0, r16, 0x0], &(0x7f0000000bc0)=[0x101, 0x4, 0x0, 0x2, 0x81, 0x100, 0x8, 0x6, 0x1, 0x4], 0x0, 0xffffffff00000000}) (async, rerun: 64)
socket$unix(0x1, 0x1, 0x0) (async, rerun: 64)
ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000003c0)={0xa, 0x2, 0x2})

211.87711ms ago: executing program 5 (id=2053):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x18, 0x1cb, &(0x7f0000000480)})

133.179889ms ago: executing program 5 (id=2054):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) (fail_nth: 2)

971.387µs ago: executing program 5 (id=2055):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r6, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x814) (async)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r9, 0xffffffffffffffff, 0x0) (async)
write$tun(r3, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc4c85512, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (rerun: 64)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r10=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r10}}], 0x20, 0x2400e044}, 0x0) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r10, 0x8000, 0x8}, &(0x7f0000000040)=0x8) (rerun: 32)

0s ago: executing program 2 (id=2056):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'sit0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280080007003b070000050006"], 0x4c}}, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r7, 0x0, 0x2000, 0x1000000, 0x0, 0x10}])
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffffb}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000000)

kernel console output (not intermixed with test programs):

: 28 bytes leftover after parsing attributes in process `syz.2.991'.
[  133.739597][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.999'.
[  133.797616][ T9376] fuse: Bad value for 'fd'
[  133.897367][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'.
[  133.905168][ T9385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1004'.
[  134.135064][ T9394] vlan2: entered allmulticast mode
[  134.137427][ T9394] bond0: entered allmulticast mode
[  134.139652][ T9394] bond_slave_0: entered allmulticast mode
[  134.143016][ T9394] bond_slave_1: entered allmulticast mode
[  134.482155][ T9416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.486159][ T9416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.556103][ T9419] vxlan0: entered promiscuous mode
[  134.558175][ T9419] vxlan0: entered allmulticast mode
[  134.560915][ T1147] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.568074][ T1147] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  134.571583][ T1147] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  134.575625][ T1147] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.711814][  T837] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  134.874881][  T837] usb 7-1: Using ep0 maxpacket: 32
[  134.880427][  T837] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.884564][  T837] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  134.892001][  T837] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  134.897806][  T837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.901144][  T837] usb 7-1: Product: syz
[  134.908762][  T837] usb 7-1: Manufacturer: syz
[  134.911161][  T837] usb 7-1: SerialNumber: syz
[  135.129571][  T837] usb 7-1: 0:2 : does not exist
[  135.144924][ T9433] overlay: Unknown parameter 'permit_directio'
[  135.146652][  T837] usb 7-1: USB disconnect, device number 15
[  135.170181][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.290176][   T40] kauditd_printk_skb: 29 callbacks suppressed
[  135.290188][   T40] audit: type=1400 audit(2000000067.699:915): avc:  denied  { bind } for  pid=9434 comm="syz.3.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  135.301129][   T40] audit: type=1400 audit(2000000067.699:916): avc:  denied  { node_bind } for  pid=9434 comm="syz.3.1020" saddr=172.30.0.4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  135.310274][   T40] audit: type=1400 audit(2000000067.709:917): avc:  denied  { create } for  pid=9438 comm="syz.1.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  135.317867][   T40] audit: type=1400 audit(2000000067.719:918): avc:  denied  { connect } for  pid=9438 comm="syz.1.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  135.325603][   T40] audit: type=1400 audit(2000000067.719:919): avc:  denied  { write } for  pid=9438 comm="syz.1.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  135.334997][   T40] audit: type=1400 audit(2000000067.719:920): avc:  denied  { read } for  pid=9438 comm="syz.1.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  135.423206][   T40] audit: type=1400 audit(2000000067.839:921): avc:  denied  { open } for  pid=9449 comm="syz.3.1024" path="/dev/ptyqb" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  135.433515][   T40] audit: type=1400 audit(2000000067.839:922): avc:  denied  { listen } for  pid=9449 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  135.451117][   T40] audit: type=1400 audit(2000000067.859:923): avc:  denied  { accept } for  pid=9449 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  135.505178][   T40] audit: type=1400 audit(2000000067.919:924): avc:  denied  { ioctl } for  pid=9449 comm="syz.3.1024" path="/dev/ptyqb" dev="devtmpfs" ino=137 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  135.587745][ T9457] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96
[  135.650983][ T9459] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.779561][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1029'.
[  135.859364][ T9472] ptrace attach of ""[9479] was attempted by "/syz-executor exec"[9472]
[  135.862910][ T9471] ptrace attach of ""[9479] was attempted by "/syz-executor exec"[9471]
[  135.870114][ T9482] ptrace attach of "/syz-executor exec"[5951] was attempted by "/syz-executor exec"[9482]
[  135.928739][ T9488] netlink: 'syz.2.1037': attribute type 1 has an invalid length.
[  135.956610][ T9488] 8021q: adding VLAN 0 to HW filter on device bond6
[  135.969247][ T9488] bond6: (slave wlan0): Enslaving as an active interface with a down link
[  136.002356][ T9497] netlink: 'syz.4.1039': attribute type 10 has an invalid length.
[  136.002439][ T9498] netlink: 'syz.4.1039': attribute type 10 has an invalid length.
[  136.005633][ T9497] netlink: 'syz.4.1039': attribute type 10 has an invalid length.
[  136.014177][ T9497] netlink: 'syz.4.1039': attribute type 10 has an invalid length.
[  136.017511][ T9497] netlink: 'syz.4.1039': attribute type 10 has an invalid length.
[  136.019833][ T9497] netlink: 'syz.4.1039': attribute type 10 has an invalid length.
[  136.022254][ T9498] netlink: 'syz.4.1039': attribute type 10 has an invalid length.
[  136.022448][ T9497] netlink: 'syz.4.1039': attribute type 10 has an invalid length.
[  136.086618][ T9502] Mount JFS Failure: -5
[  136.088543][ T9502] jfs_mount failed w/return code = -5
[  136.132029][ T9508] IPv6: Can't replace route, no match found
[  136.219964][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'.
[  136.417033][ T9535] 8021q: adding VLAN 0 to HW filter on device team0
[  136.423501][ T9535] bond0: (slave team0): Enslaving as an active interface with an up link
[  136.815582][ T9563] /dev/nullb0: Can't open blockdev
[  136.834231][ T9565] unknown channel width for channel at 909000KHz?
[  137.097471][ T9579] tmpfs: Unknown parameter '�BdC0x00000000ffffffff'
[  137.174298][ T9602] libceph: resolve '
[  137.174298][ T9602] -&���f�Y�ǝ�a���2i�
[  137.174298][ T9602] .���?��&�*��&' (ret=-3): failed
[  137.284408][ T9608] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.329931][ T9613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9613 comm=syz.3.1072
[  137.357447][ T9608] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.366478][ T9617] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  137.367117][ T9617] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  137.443200][ T9623] binder: 9622:9623 ioctl c00c620f 200000000000 returned -22
[  137.574599][ T9626] binder: 9625:9626 ioctl c0306201 200000000640 returned -14
[  137.665997][ T9635] syz.4.1079 (9635) used greatest stack depth: 17768 bytes left
[  137.747497][ T9641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.804213][ T9645] can0: slcan on ttyS3.
[  137.833969][ T9644] kvm: pic: single mode not supported
[  137.942072][ T9648] can0 (unregistered): slcan off ttyS3.
[  138.073297][ T9665] sctp: [Deprecated]: syz.1.1089 (pid 9665) Use of int in maxseg socket option.
[  138.073297][ T9665] Use struct sctp_assoc_value instead
[  138.076324][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  138.084268][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  138.124898][ T9669] binder: BINDER_SET_CONTEXT_MGR already set
[  138.127205][ T9669] binder: 9668:9669 ioctl 4018620d 200000000040 returned -16
[  138.240142][ T9682] __nla_validate_parse: 7 callbacks suppressed
[  138.240159][ T9682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1094'.
[  138.347892][ T9690] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  138.387672][ T9694] IPv6: NLM_F_CREATE should be specified when creating new route
[  138.401967][ T9694] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  138.483190][ T9703] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1101'.
[  138.492483][ T9702] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1101'.
[  138.556992][ T9710] /dev/nullb0: Can't open blockdev
[  138.560783][ T9710] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1103'.
[  138.828764][ T9732] validate_nla: 124 callbacks suppressed
[  138.828777][ T9732] netlink: 'syz.2.1110': attribute type 4 has an invalid length.
[  138.891100][ T9735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9735 comm=syz.2.1110
[  139.005227][ T9737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1112'.
[  139.010977][ T9737] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  139.224793][ T9749] comedi comedi3: comedi_config --init_data is deprecated
[  139.321710][ T5997] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  139.431028][ T9757] vim2m vim2m.0: vidioc_s_fmt queue busy
[  139.482940][ T5997] usb 7-1: config 0 has an invalid interface number: 39 but max is 0
[  139.485664][ T5997] usb 7-1: config 0 has no interface number 0
[  139.487619][ T5997] usb 7-1: config 0 interface 39 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  139.491357][ T5997] usb 7-1: config 0 interface 39 altsetting 0 endpoint 0xE has invalid maxpacket 64065, setting to 64
[  139.496002][ T5997] usb 7-1: config 0 interface 39 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  139.501222][ T5997] usb 7-1: config 0 interface 39 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  139.505808][ T5997] usb 7-1: config 0 interface 39 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[  139.509259][ T5997] usb 7-1: config 0 interface 39 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  139.514494][ T5997] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  139.517876][ T5997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.530988][ T5997] usb 7-1: config 0 descriptor??
[  139.533428][ T9747] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  139.537080][ T9747] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  139.543963][ T5997] ldusb 7-1:0.39: LD USB Device #0 now attached to major 180 minor 0
[  139.747738][ T5997] usb 7-1: USB disconnect, device number 16
[  139.756429][ T5997] ldusb 7-1:0.39: LD USB Device #0 now disconnected
[  139.867298][   T53] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  139.873900][   T53] hid-generic 0000:0000:0000.0008: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  140.402061][ T9769] cgroup: fork rejected by pids controller in /syz1
[  140.464091][ T9813] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1127'.
[  140.495893][   T40] kauditd_printk_skb: 43 callbacks suppressed
[  140.495907][   T40] audit: type=1400 audit(2000000072.899:968): avc:  denied  { read } for  pid=9812 comm="syz.4.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  140.534949][   T40] audit: type=1400 audit(2000000072.949:969): avc:  denied  { setopt } for  pid=9818 comm="syz.4.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  140.585524][ T9824] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1129'.
[  140.589091][ T9824] netlink: 'syz.4.1129': attribute type 19 has an invalid length.
[  140.592515][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'.
[  140.597024][ T9824] netlink: 'syz.4.1129': attribute type 19 has an invalid length.
[  140.599950][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'.
[  141.016579][   T40] audit: type=1400 audit(2000000073.429:970): avc:  denied  { getopt } for  pid=9862 comm="syz.3.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  141.070370][   T40] audit: type=1400 audit(2000000073.479:971): avc:  denied  { write } for  pid=9860 comm="syz.1.1133" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  141.072860][ T9861] netlink: 'syz.1.1133': attribute type 1 has an invalid length.
[  141.084601][ T9861] netlink: 'syz.1.1133': attribute type 3 has an invalid length.
[  141.087509][ T9861] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1133'.
[  141.090606][ T9861] NCSI netlink: No device for ifindex 0
[  141.184435][ T9867] netlink: 'syz.3.1135': attribute type 63 has an invalid length.
[  141.199660][ T9867] kvm: user requested TSC rate below hardware speed
[  141.317801][ T9874] netlink: 'syz.3.1138': attribute type 21 has an invalid length.
[  141.320341][ T9874] netlink: 'syz.3.1138': attribute type 6 has an invalid length.
[  141.450269][ T9881] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  141.454926][ T9881] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  141.503081][ T9881] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  141.730953][   T40] audit: type=1326 audit(2000000074.139:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.4.1142" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77c818eec9 code=0x0
[  141.785382][   T40] audit: type=1400 audit(2000000074.199:973): avc:  denied  { getopt } for  pid=9886 comm="syz.4.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  141.786046][ T9888] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  141.803648][ T9888] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  141.809261][ T9888] 9p: Unknown access argument 18446744073709551615: -34
[  141.930176][   T40] audit: type=1400 audit(2000000074.339:974): avc:  denied  { recv } for  pid=5937 comm="syz-executor" saddr=127.0.0.1 src=59036 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  141.948349][ T9891] netlink: 'syz.1.1143': attribute type 1 has an invalid length.
[  141.974208][   T40] audit: type=1400 audit(2000000074.389:975): avc:  denied  { recv } for  pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59036 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  141.975089][ T9891] 8021q: adding VLAN 0 to HW filter on device bond2
[  142.017366][ T9891] veth3: entered promiscuous mode
[  142.023607][ T9891] bond2: (slave veth3): Enslaving as an active interface with a down link
[  142.074234][ T9894] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  142.206288][   T40] audit: type=1400 audit(2000000074.619:976): avc:  denied  { mount } for  pid=9899 comm="syz.1.1147" name="/" dev="ramfs" ino=38162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  142.221321][ T9901] input: syz0 as /devices/virtual/input/input16
[  142.225718][ T9904] openvswitch: netlink: Invalid VLAN frame
[  142.228438][   T40] audit: type=1400 audit(2000000074.649:977): avc:  denied  { read } for  pid=5340 comm="acpid" name="event4" dev="devtmpfs" ino=3207 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  142.542845][ T5355] Dev loop6: unable to read RDB block 1
[  142.545500][ T5355]  loop6: unable to read partition table
[  142.548227][ T5355] loop6: partition table beyond EOD, truncated
[  142.552256][  T838] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[  142.723902][  T838] usb 6-1: unable to get BOS descriptor or descriptor too short
[  142.728816][  T838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  142.734149][  T838] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  142.738367][  T838] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[  142.742541][  T838] usb 6-1: string descriptor 0 read error: -22
[  142.746400][  T838] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  142.751161][  T838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.766624][ T9907] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  142.975243][ T9907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.979109][ T9907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.985181][  T838] cdc_ncm 6-1:1.0: bind() failure
[  142.994988][  T838] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  142.998457][  T838] cdc_ncm 6-1:1.1: bind() failure
[  143.004959][  T838] usb 6-1: USB disconnect, device number 13
[  143.041556][   T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  143.207914][   T34] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  143.210788][   T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  143.213681][   T34] usb 9-1: Product: syz
[  143.215629][   T34] usb 9-1: Manufacturer: syz
[  143.217469][   T34] usb 9-1: SerialNumber: syz
[  143.221624][   T34] usb 9-1: config 0 descriptor??
[  143.225736][   T34] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  143.228486][   T34] dvb-usb: bulk message failed: -22 (2/0)
[  143.234580][   T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  143.238874][   T34] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  143.242986][   T34] usb 9-1: media controller created
[  143.253116][   T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  143.426833][ T9946] dvb-usb: bulk message failed: -22 (4/0)
[  143.429957][ T9946] cxusb: i2c read failed
[  143.432246][ T9946] netlink: 'syz.4.1157': attribute type 10 has an invalid length.
[  143.446047][ T9946] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  143.454439][ T9946] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  143.460436][   T34] cxusb: set interface failed
[  143.462354][   T34] dvb-usb: bulk message failed: -22 (1/0)
[  143.492655][   T34] DVB: Unable to find symbol mt352_attach()
[  143.495234][   T34] dvb-usb: bulk message failed: -22 (5/0)
[  143.497667][   T34] zl10353_read_register: readreg error (reg=127, ret==-121)
[  143.500247][   T34] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  143.562649][   T34] rc_core: IR keymap rc-dvico-mce not found
[  143.565398][   T34] Registered IR keymap rc-empty
[  143.569059][   T34] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0
[  143.575492][   T34] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input17
[  143.583355][   T34] dvb-usb: schedule remote query interval to 100 msecs.
[  143.587753][   T34] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  143.595003][   T34] usb 9-1: USB disconnect, device number 2
[  143.649198][   T34] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  143.649432][ T9965] __nla_validate_parse: 5 callbacks suppressed
[  143.649443][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'.
[  143.714954][ T9968] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  143.833096][ T9972] netlink: 'syz.2.1163': attribute type 1 has an invalid length.
[  143.835938][ T9972] netlink: 'syz.2.1163': attribute type 4 has an invalid length.
[  143.838381][ T9972] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.1163'.
[  143.991714][  T838] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  144.081612][ T5990] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  144.151704][  T838] usb 6-1: Using ep0 maxpacket: 8
[  144.157708][  T838] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.163397][  T838] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.167755][  T838] usb 6-1: config 0 interface 0 has no altsetting 0
[  144.171151][  T838] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  144.178517][  T838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.186254][  T838] usb 6-1: config 0 descriptor??
[  144.199019][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'.
[  144.231709][ T5990] usb 7-1: Using ep0 maxpacket: 32
[  144.239134][ T5990] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.243177][ T5990] usb 7-1: config 0 has no interfaces?
[  144.248403][ T5990] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  144.251350][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.253857][ T5990] usb 7-1: Product: syz
[  144.255210][ T5990] usb 7-1: Manufacturer: syz
[  144.256902][ T5990] usb 7-1: SerialNumber: syz
[  144.260042][ T5990] usb 7-1: config 0 descriptor??
[  144.595833][  T838] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  144.598930][  T838] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  144.601993][  T838] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  144.604986][  T838] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  144.608118][  T838] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0
[  144.612334][  T838] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  144.797125][  T838] usb 6-1: USB disconnect, device number 14
[  145.373743][ T9991] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1170'.
[  145.597867][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1178'.
[  145.655103][T10020] netlink: 'syz.4.1178': attribute type 3 has an invalid length.
[  145.658775][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1178'.
[  145.722529][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  145.789545][   T40] kauditd_printk_skb: 11 callbacks suppressed
[  145.789560][   T40] audit: type=1400 audit(2000000078.199:989): avc:  denied  { create } for  pid=10028 comm="syz.3.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  145.829803][   T40] audit: type=1400 audit(2000000078.239:990): avc:  denied  { create } for  pid=10033 comm="syz.3.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  145.833071][T10034] overlayfs: missing 'workdir'
[  145.844985][T10034] overlayfs: missing 'lowerdir'
[  145.851171][   T40] audit: type=1400 audit(2000000078.259:991): avc:  denied  { read write } for  pid=10033 comm="syz.3.1181" name="nvram" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  145.872574][   T40] audit: type=1400 audit(2000000078.259:992): avc:  denied  { open } for  pid=10033 comm="syz.3.1181" path="/dev/nvram" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  146.233875][   T40] audit: type=1400 audit(2000000078.649:993): avc:  denied  { name_bind } for  pid=10057 comm="syz.4.1190" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  146.368042][T10064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7440 sclass=netlink_route_socket pid=10064 comm=syz.3.1191
[  146.445519][   T40] audit: type=1400 audit(2000000078.859:994): avc:  denied  { write } for  pid=10081 comm="syz.4.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  146.533717][   T40] audit: type=1400 audit(2000000078.949:995): avc:  denied  { create } for  pid=10081 comm="syz.4.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  146.616893][   T40] audit: type=1400 audit(2000000079.029:996): avc:  denied  { listen } for  pid=10095 comm="syz.4.1203" lport=53398 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  146.626817][   T40] audit: type=1400 audit(2000000079.049:997): avc:  denied  { accept } for  pid=10095 comm="syz.4.1203" lport=53398 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  146.635744][   T40] audit: type=1400 audit(2000000079.049:998): avc:  denied  { write } for  pid=10095 comm="syz.4.1203" lport=53398 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  146.639149][T10092] netfs: Couldn't get user pages (rc=-14)
[  146.895508][ T5990] usb 7-1: USB disconnect, device number 17
[  147.261837][   T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  147.412829][   T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.416053][   T24] usb 9-1: config 0 has no interfaces?
[  147.417956][   T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  147.421658][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.426680][   T24] usb 9-1: config 0 descriptor??
[  147.772298][ T8278] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  147.792514][T10140] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  147.795762][T10140] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  147.863649][T10140] netlink: 'syz.3.1217': attribute type 10 has an invalid length.
[  147.870746][T10140] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  147.873882][T10140] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  147.881191][T10140] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  147.927308][T10153] cgroup: Unknown subsys name 'cpuset'
[  148.544210][T10158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.548959][T10158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.772519][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'.
[  148.776959][T10162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1224'.
[  148.780850][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'.
[  148.785938][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'.
[  148.796344][ T1187] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.799301][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'.
[  148.800639][ T1187] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.800681][ T1187] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.804869][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'.
[  148.817077][ T1187] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.930153][T10180] overlayfs: conflicting lowerdir path
[  149.103226][T10190] bridge_slave_0: entered promiscuous mode
[  149.106439][T10189] bridge_slave_0: left promiscuous mode
[  149.156705][T10192] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1235'.
[  149.448914][T10205] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1239'.
[  149.509247][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'.
[  149.516830][T10210] macvlan2: entered allmulticast mode
[  149.518689][T10210] veth1_vlan: entered allmulticast mode
[  149.549419][T10212] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1240'.
[  149.615706][T10214] netlink: 'syz.2.1242': attribute type 11 has an invalid length.
[  149.632247][T10214] syzkaller0: entered promiscuous mode
[  149.634978][T10214] syzkaller0: entered allmulticast mode
[  149.923241][T10221] openvswitch: netlink: Message has 8 unknown bytes.
[  149.930067][T10225] netlink: 'syz.1.1245': attribute type 1 has an invalid length.
[  149.956675][T10225] 8021q: adding VLAN 0 to HW filter on device bond3
[  149.986386][T10225] bond3: (slave ip6gretap1): making interface the new active one
[  149.992158][T10225] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  150.014594][   T24] usb 9-1: USB disconnect, device number 3
[  150.371867][T10251] kvm: MONITOR instruction emulated as NOP!
[  150.481573][    T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  150.503836][T10257] /dev/nullb0: Can't open blockdev
[  150.661569][    T9] usb 9-1: Using ep0 maxpacket: 32
[  150.664324][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 211, changing to 11
[  150.668090][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42952, setting to 1024
[  150.672498][    T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  150.679581][    T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  150.683627][    T9] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  150.685962][T10265] overlayfs: upper fs does not support file handles, falling back to index=off.
[  150.686736][    T9] usb 9-1: Product: syz
[  150.693743][    T9] usb 9-1: Manufacturer: syz
[  150.695881][    T9] usb 9-1: SerialNumber: syz
[  150.700828][T10249] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  150.707333][    T9] input: appletouch as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/input/input18
[  150.717614][    C0] appletouch 9-1:1.0: atp_complete: usb_submit_urb failed with result -1
[  150.737840][    C2] appletouch 9-1:1.0: atp_complete: usb_submit_urb failed with result -1
[  150.913235][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.916767][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.984796][    C1] appletouch 9-1:1.0: atp_complete: usb_submit_urb failed with result -1
[  151.035037][    T9] usb 9-1: USB disconnect, device number 4
[  151.065222][    T9] appletouch 9-1:1.0: input: appletouch disconnected
[  151.179763][   T40] kauditd_printk_skb: 15 callbacks suppressed
[  151.179786][   T40] audit: type=1400 audit(2000000083.589:1014): avc:  denied  { getattr } for  pid=10289 comm="syz.4.1266" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  151.195559][   T40] audit: type=1400 audit(2000000083.599:1015): avc:  denied  { ioctl } for  pid=10289 comm="syz.4.1266" path="socket:[40163]" dev="sockfs" ino=40163 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  151.228166][   T40] audit: type=1400 audit(2000000083.639:1016): avc:  denied  { ioctl } for  pid=10291 comm="syz.4.1267" path="socket:[38678]" dev="sockfs" ino=38678 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  151.444712][T10314] 9pnet_virtio: no channels available for device syz
[  151.481339][T10316] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  151.486085][T10316] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock
[  151.489473][T10316] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  151.493004][T10316] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock
[  151.572143][T10323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=10323 comm=syz.4.1279
[  151.633427][T10324] bridge_slave_1: left allmulticast mode
[  151.635442][T10324] bridge_slave_1: left promiscuous mode
[  151.637546][T10324] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.643880][T10324] bridge_slave_0: left allmulticast mode
[  151.646046][T10324] bridge_slave_0: left promiscuous mode
[  151.649283][T10324] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.892895][T10356] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  151.948515][T10364] erspan0: entered promiscuous mode
[  151.969179][T10360] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c0189379, magic 93 != 6b]
[  151.976705][   T40] audit: type=1400 audit(2000000340.382:1017): avc:  denied  { ioctl } for  pid=10358 comm="syz.3.1285" path="/301/file0/file0" dev="fuse" ino=0 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  152.000080][T10369] [U] v�3��f��"S��/��4:�XTz�W�t��lW��=
[  152.008479][T10369] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=122 sclass=netlink_tcpdiag_socket pid=10369 comm=syz.1.1287
[  152.139829][   T40] audit: type=1326 audit(2000000340.552:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.4.1294" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77c818eec9 code=0x0
[  152.154127][   T40] audit: type=1400 audit(2000000340.572:1019): avc:  denied  { read } for  pid=10384 comm="syz.3.1292" lport=44688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  152.163419][T10392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  152.166545][T10392] IPv6: NLM_F_CREATE should be set when creating new route
[  152.169814][T10392] IPv6: NLM_F_CREATE should be set when creating new route
[  152.711645][   T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  152.871751][   T24] usb 7-1: Using ep0 maxpacket: 16
[  152.879277][   T24] usb 7-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  152.883954][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.887372][   T24] usb 7-1: Product: syz
[  152.889541][   T24] usb 7-1: Manufacturer: syz
[  152.892280][   T24] usb 7-1: SerialNumber: syz
[  152.898473][   T24] usb 7-1: config 0 descriptor??
[  153.093106][   T40] audit: type=1400 audit(2000000341.512:1020): avc:  denied  { mount } for  pid=10415 comm="syz.1.1301" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  153.103820][   T40] audit: type=1400 audit(2000000341.512:1021): avc:  denied  { map } for  pid=10415 comm="syz.1.1301" path="socket:[39368]" dev="sockfs" ino=39368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  153.111064][   T24] hub 7-1:0.0: bad descriptor, ignoring hub
[  153.115465][   T40] audit: type=1400 audit(2000000341.512:1022): avc:  denied  { read accept } for  pid=10415 comm="syz.1.1301" path="socket:[39368]" dev="sockfs" ino=39368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  153.118805][   T24] hub 7-1:0.0: probe with driver hub failed with error -5
[  153.132958][   T40] audit: type=1400 audit(2000000341.552:1023): avc:  denied  { unmount } for  pid=5961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  153.135843][   T24] usb-storage 7-1:0.0: USB Mass Storage device detected
[  153.156119][   T24] usb-storage 7-1:0.0: Quirks match for vid 054c pid 002e: 1
[  153.246509][T10429] netlink: 'syz.1.1305': attribute type 2 has an invalid length.
[  153.249888][T10429] nbd: must specify a device to reconfigure
[  153.284101][   T24] usb 7-1: USB disconnect, device number 18
[  153.540764][T10452] netlink: 'syz.3.1312': attribute type 2 has an invalid length.
[  153.630604][T10461] misc userio: Invalid payload size
[  153.879166][T10492] binder: BINDER_SET_CONTEXT_MGR already set
[  153.883004][T10492] binder: 10491:10492 ioctl 4018620d 200000000040 returned -16
[  153.884430][T10494] binder: 10493:10494 ioctl c0306201 200000000640 returned -22
[  154.058258][T10502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6672 sclass=netlink_route_socket pid=10502 comm=syz.2.1328
[  154.067416][T10502] __nla_validate_parse: 9 callbacks suppressed
[  154.067467][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'.
[  154.111050][   T29] Process accounting resumed
[  154.130929][T10504] Process accounting resumed
[  154.508352][T10536] e1000e 0000:00:02.0 eth1: NIC Link is Down
[  155.109449][T10601] vcan1: entered allmulticast mode
[  155.129119][T10603] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1358'.
[  155.148774][T10609] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  155.189641][T10615] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1361'.
[  155.193976][T10615] openvswitch: netlink: Flow key attr not present in new flow.
[  155.207893][T10617] tmpfs: User quota inode hardlimit too large.
[  155.283760][T10624] program syz.4.1365 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  155.288535][T10624] overlay: Unknown parameter 'smackfsroot'
[  155.290734][T10622] overlay: ./file0 is not a directory
[  155.294218][T10622] overlay: ./file0 is not a directory
[  155.298041][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1364'.
[  155.307999][T10622] overlay: ./file0 is not a directory
[  155.320121][T10622] overlay: ./file0 is not a directory
[  155.327540][T10622] overlay: ./file0 is not a directory
[  155.410978][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.415706][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.426713][T10632] fuse: Bad value for 'fd'
[  155.484935][T10640] netem: incorrect ge model size
[  155.487096][T10640] netem: change failed
[  155.722700][ T5990] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  155.753620][T10660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10660 comm=syz.3.1377
[  155.758628][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'.
[  155.762535][T10660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1377'.
[  155.899584][ T5990] usb 9-1: Using ep0 maxpacket: 16
[  155.903128][ T5990] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  155.906883][ T5990] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  155.910622][ T5990] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  155.921540][ T5990] usb 9-1: config 1 interface 0 has no altsetting 0
[  155.935976][ T5990] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  155.939774][ T5990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.943265][ T5990] usb 9-1: Product: syz
[  155.944779][ T5990] usb 9-1: Manufacturer: syz
[  155.946800][ T5990] usb 9-1: SerialNumber: syz
[  156.162900][ T5990] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  156.363262][   T40] kauditd_printk_skb: 19 callbacks suppressed
[  156.363279][   T40] audit: type=1400 audit(2000000344.782:1043): avc:  denied  { read write } for  pid=10637 comm="syz.4.1370" name="lp0" dev="devtmpfs" ino=3244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  156.382131][   T40] audit: type=1400 audit(2000000344.802:1044): avc:  denied  { open } for  pid=10637 comm="syz.4.1370" path="/dev/usb/lp0" dev="devtmpfs" ino=3244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  156.393596][ T5990] usb 9-1: USB disconnect, device number 5
[  156.428063][   T40] audit: type=1400 audit(2000000344.842:1045): avc:  denied  { setattr } for  pid=10682 comm="syz.1.1384" path="socket:[39715]" dev="sockfs" ino=39715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  156.563235][   T40] audit: type=1400 audit(2000000344.982:1046): avc:  denied  { create } for  pid=10686 comm="syz.3.1386" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  156.575683][T10694] netlink: 'syz.1.1387': attribute type 2 has an invalid length.
[  156.578712][T10694] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1387'.
[  156.583387][T10694] nbd: must specify a device to reconfigure
[  156.589489][T10690] "syz.1.1387" (10690) uses obsolete ecb(arc4) skcipher
[  156.599850][T10638] usblp0: removed
[  156.618527][   T40] audit: type=1400 audit(2000000345.032:1047): avc:  denied  { unlink } for  pid=5952 comm="syz-executor" name="file0" dev="tmpfs" ino=1816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  156.647679][T10699] overlayfs: failed to resolve './file2': -2
[  156.648111][   T40] audit: type=1400 audit(2000000345.062:1048): avc:  denied  { listen } for  pid=10696 comm="syz.2.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  156.658527][   T40] audit: type=1400 audit(2000000345.062:1049): avc:  denied  { accept } for  pid=10696 comm="syz.2.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  156.666620][T10701] netlink: 'syz.1.1390': attribute type 1 has an invalid length.
[  156.701412][T10701] bond4: (slave geneve2): making interface the new active one
[  156.705829][T10701] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  156.709396][ T9932] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  156.714142][ T9931] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  156.719377][ T9931] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  156.727140][ T9931] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  156.765331][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1394'.
[  156.799503][T10710] netlink: 'syz.1.1394': attribute type 1 has an invalid length.
[  157.131575][ T8278] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  157.203161][   T40] audit: type=1400 audit(2000000345.622:1050): avc:  denied  { watch watch_with_perm } for  pid=10735 comm="syz.4.1402" path="/184/bus" dev="tmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  157.311682][ T8278] usb 6-1: Using ep0 maxpacket: 16
[  157.323157][ T8278] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  157.327202][ T8278] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  157.341873][ T8278] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  157.349104][ T8278] usb 6-1: config 1 interface 0 has no altsetting 0
[  157.354928][ T8278] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  157.358872][ T8278] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.364345][ T8278] usb 6-1: Product: syz
[  157.366140][ T8278] usb 6-1: Manufacturer: syz
[  157.367569][ T8278] usb 6-1: SerialNumber: syz
[  157.578114][ T8278] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  157.606855][   T40] audit: type=1400 audit(2000000346.022:1051): avc:  denied  { listen } for  pid=10765 comm="syz.4.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  157.717530][   T40] audit: type=1400 audit(2000000346.132:1052): avc:  denied  { nlmsg_write } for  pid=10777 comm="syz.4.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  157.778103][ T8278] usb 6-1: USB disconnect, device number 15
[  157.857433][T10791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1417'.
[  157.937557][T10801] input: syz1 as /devices/virtual/input/input20
[  158.030186][T10720] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  158.036049][T10719] usblp0: removed
[  159.058604][T10833] [U] 
[  159.126502][T10838] pimreg: entered allmulticast mode
[  159.187630][T10839] pimreg: left allmulticast mode
[  159.417445][T10857] kAFS: unparsable volume name
[  159.450671][T10860] netlink: 'syz.3.1439': attribute type 12 has an invalid length.
[  159.453370][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1439'.
[  159.465177][ T9932] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.465176][T10860] netlink: 'syz.3.1439': attribute type 12 has an invalid length.
[  159.469579][ T9932] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.472829][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1439'.
[  159.476217][ T9932] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.483055][ T9932] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.672969][T10876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1443'.
[  159.713797][T10880] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1445'.
[  159.781237][T10884] netlink: 'syz.2.1447': attribute type 22 has an invalid length.
[  159.784864][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1447'.
[  159.853425][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'.
[  159.859421][T10884] netlink: 'syz.2.1447': attribute type 22 has an invalid length.
[  159.862400][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1447'.
[  159.866572][T10889] kvm: kvm [10882]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x5
[  159.889488][T10889] kvm: kvm [10882]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x5
[  159.894617][T10889] kvm: kvm [10882]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x5
[  159.911404][T10897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1451'.
[  159.921208][T10889] kvm_intel: kvm [10882]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x5
[  160.591792][  T838] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  160.711716][   T29] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  160.767651][  T838] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  160.771848][  T838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.775247][  T838] usb 9-1: Product: syz
[  160.777247][  T838] usb 9-1: Manufacturer: syz
[  160.779371][  T838] usb 9-1: SerialNumber: syz
[  160.789898][  T838] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  160.824174][ T8278] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  160.879551][   T29] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  160.884004][   T29] usb 7-1: config 0 has no interface number 0
[  160.886839][   T29] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  160.891222][   T29] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  160.896017][   T29] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  160.901302][   T29] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[  160.905711][   T29] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  160.910301][   T29] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  160.914449][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.922282][   T29] usb 7-1: config 0 descriptor??
[  160.928112][T10932] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  160.939710][   T29] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  161.025607][    T9] usb 9-1: USB disconnect, device number 6
[  161.039385][T10936] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10936 comm=syz.3.1464
[  161.047918][T10936] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20004
[  161.095686][T10938] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.099611][T10938] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.190077][T10938] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.191297][  T837] usb 7-1: USB disconnect, device number 19
[  161.192038][    C2] ldusb 7-1:0.55: usb_submit_urb failed (-19)
[  161.192080][T10932] ldusb 7-1:0.55: Couldn't submit interrupt_out_urb -19
[  161.202574][  T837] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  161.204843][T10938] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.296591][T10938] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.300063][T10938] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.365647][T10938] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.369738][T10938] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.445555][ T1147] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  161.448671][ T1147] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.462246][ T9932] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  161.465688][ T9932] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.476546][ T9931] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  161.480180][ T9931] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.491624][ T1147] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  161.495633][ T1147] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.660220][   T40] kauditd_printk_skb: 9 callbacks suppressed
[  161.660232][   T40] audit: type=1400 audit(2000000350.072:1062): avc:  denied  { read } for  pid=10951 comm="syz.1.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  161.806852][T10960] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  161.809899][T10960] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  161.907889][ T8278] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  161.913344][ T8278] ath9k_htc: Failed to initialize the device
[  161.919575][    T9] usb 9-1: ath9k_htc: USB layer deinitialized
[  162.090482][T10976] program syz.4.1476 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  162.692620][T10994] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1481'.
[  162.730138][   T40] audit: type=1400 audit(2000000351.142:1063): avc:  denied  { ioctl } for  pid=10998 comm="syz.1.1482" path="/dev/nullb0" dev="devtmpfs" ino=706 ioctlcmd=0x127d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  162.786857][   T40] audit: type=1400 audit(2000000351.202:1064): avc:  denied  { ioctl } for  pid=10998 comm="syz.1.1482" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  162.803941][   T40] audit: type=1400 audit(2000000351.202:1065): avc:  denied  { map } for  pid=10986 comm="syz.2.1479" path="socket:[44946]" dev="sockfs" ino=44946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  162.944024][   T40] audit: type=1400 audit(2000000351.362:1066): avc:  denied  { execmod } for  pid=11015 comm="syz.3.1486" path="/370/file0" dev="tmpfs" ino=1992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  163.038024][T11027] fuse: Bad value for 'fd'
[  163.074776][   T40] audit: type=1400 audit(2000000351.492:1067): avc:  denied  { write } for  pid=11029 comm="syz.3.1491" path="socket:[45037]" dev="sockfs" ino=45037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  163.088695][   T40] audit: type=1400 audit(2000000351.502:1068): avc:  denied  { read } for  pid=11029 comm="syz.3.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  163.156351][T11034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=11034 comm=syz.2.1492
[  163.163095][T11034] program syz.2.1492 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  163.193397][   T40] audit: type=1400 audit(2000000351.612:1069): avc:  denied  { mounton } for  pid=11040 comm="syz.1.1494" path="/syzcgroup/unified/syz1" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  163.195137][T11041] /dev/nullb0: Can't open blockdev
[  163.205361][T11041] program syz.1.1494 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  163.351644][T11049] Invalid logical block size (-3)
[  163.516640][   T40] audit: type=1400 audit(2000000351.932:1070): avc:  denied  { getopt } for  pid=11053 comm="syz.2.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  163.523962][   T40] audit: type=1400 audit(2000000351.932:1071): avc:  denied  { audit_write } for  pid=11053 comm="syz.2.1499" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  163.555978][T11056] bridge_slave_0: default FDB implementation only supports local addresses
[  163.578707][T11056] netlink: 'syz.2.1500': attribute type 2 has an invalid length.
[  163.581798][T11056] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1500'.
[  163.586755][T11056] nbd: must specify a device to reconfigure
[  163.928100][T11068] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  163.984922][T11082] program syz.2.1509 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  164.296962][T11122] trusted_key: encrypted_key: keylen parameter is missing
[  164.308910][T11123] netlink: 'syz.1.1522': attribute type 3 has an invalid length.
[  164.314406][T11123] netlink: 'syz.1.1522': attribute type 3 has an invalid length.
[  164.378881][T11126] 9pnet_fd: Insufficient options for proto=fd
[  164.386755][T11126] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  164.467618][T11129] IPv6: sit2: Disabled Multicast RS
[  164.470832][T11129] sit2: entered allmulticast mode
[  165.011689][ T5990] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  165.065237][T11149] __nla_validate_parse: 1 callbacks suppressed
[  165.065257][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1530'.
[  165.162315][ T5990] usb 7-1: Using ep0 maxpacket: 8
[  165.166179][ T5990] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.170755][ T5990] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.177161][ T5990] usb 7-1: config 0 interface 0 has no altsetting 0
[  165.180546][ T5990] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  165.184501][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.190025][ T5990] usb 7-1: config 0 descriptor??
[  165.265674][T11166] cgroup: subsys name conflicts with all
[  165.273840][T11166] TCP: TCP_TX_DELAY enabled
[  165.705908][T11174] fuse: Bad value for 'user_id'
[  165.707798][T11174] fuse: Bad value for 'user_id'
[  165.710587][T11174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1538'.
[  165.768261][T11175] ubi31: attaching mtd0
[  165.777637][T11175] ubi31: scanning is finished
[  165.779661][T11175] ubi31: empty MTD device detected
[  165.840752][    T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!!
[  165.856995][T11178] openvswitch: netlink: Message has 24 unknown bytes.
[  165.859318][T11178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.873191][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  165.884268][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1539'.
[  165.935448][T11175] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  165.937819][T11175] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  165.940087][T11175] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  165.950375][T11175] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  165.953947][T11175] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  165.956271][T11175] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  165.959455][T11175] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3158888378
[  165.962846][T11175] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  165.967867][T11179] ubi31: background thread "ubi_bgt31d" started, PID 11179
[  166.089887][ T5990] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  166.122834][T11185] netlink: 'syz.3.1542': attribute type 3 has an invalid length.
[  166.125695][T11185] netlink: 'syz.3.1542': attribute type 3 has an invalid length.
[  166.128292][T11185] netlink: 'syz.3.1542': attribute type 3 has an invalid length.
[  166.131904][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  166.136803][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  166.140430][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  166.145079][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  166.148010][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  166.150753][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  166.181698][T11185] netlink: 'syz.3.1542': attribute type 3 has an invalid length.
[  166.184713][T11185] netlink: 'syz.3.1542': attribute type 3 has an invalid length.
[  166.191717][T11185] netlink: 'syz.3.1542': attribute type 3 has an invalid length.
[  166.202094][T11185] netlink: 'syz.3.1542': attribute type 3 has an invalid length.
[  166.317522][ T5990] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  166.322307][ T5990] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  166.324898][ T5990] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  166.327394][ T5990] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  166.330167][ T5990] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  166.343811][T11195] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1544'.
[  166.410122][ T5990] usb 7-1: USB disconnect, device number 20
[  166.521350][T11220] fuse: Bad value for 'fd'
[  166.526136][T11220] overlay: ./file0 is not a directory
[  166.536310][T11220] fuseblk: Bad value for 'user_id'
[  166.538536][T11220] fuseblk: Bad value for 'user_id'
[  166.604413][T11228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1557'.
[  166.632184][T11230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62233 sclass=netlink_route_socket pid=11230 comm=syz.4.1558
[  166.659961][T11226] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  166.703843][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'.
[  166.706903][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1559'.
[  166.737647][T11240] overlayfs: missing 'workdir'
[  166.745333][T11240] fuse: Unknown parameter 'f`w�$?��3���B��W�*�bO)�q�� '
[  166.803200][   T40] kauditd_printk_skb: 8 callbacks suppressed
[  166.803218][   T40] audit: type=1400 audit(2000000355.222:1080): avc:  denied  { map } for  pid=11236 comm="syz.4.1559" path="socket:[50902]" dev="sockfs" ino=50902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  166.820111][   T40] audit: type=1400 audit(2000000355.222:1081): avc:  denied  { read } for  pid=11236 comm="syz.4.1559" path="socket:[50902]" dev="sockfs" ino=50902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  166.835150][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'.
[  167.007608][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1572'.
[  167.010995][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1572'.
[  167.078558][T11278] overlay: Unknown parameter 'discard'
[  167.703941][T11306] tmpfs: Unknown parameter 'usrquota��@'
[  167.967799][T11317] dns_resolver: Unsupported content type (234)
[  168.056801][   T40] audit: type=1400 audit(2000000356.472:1082): avc:  denied  { bind } for  pid=11326 comm="syz.3.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  168.107221][T11333] overlayfs: workdir and upperdir must be separate subtrees
[  168.110918][T11338] nfs: Unknown parameter '{'
[  168.120658][T11338] nfs: Unknown parameter '{'
[  168.122304][T11333] overlayfs: conflicting lowerdir path
[  168.164148][   T40] audit: type=1400 audit(2000000356.582:1083): avc:  denied  { listen } for  pid=11341 comm="syz.4.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  168.448104][T11364] ptrace attach of "/syz-executor exec"[5961] was attempted by "/syz-executor exec"[11364]
[  168.587111][   T40] audit: type=1400 audit(2000000357.002:1084): avc:  denied  { accept } for  pid=11369 comm="syz.2.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  168.917319][T11411] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input21
[  169.258009][   T40] audit: type=1400 audit(2000000357.672:1085): avc:  denied  { setopt } for  pid=11437 comm="syz.3.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  169.306841][T11442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  169.517814][T11460] program syz.1.1626 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  169.568566][T11468] validate_nla: 34 callbacks suppressed
[  169.568578][T11468] netlink: 'syz.2.1628': attribute type 64 has an invalid length.
[  169.573720][T11468] netlink: 'syz.2.1628': attribute type 4 has an invalid length.
[  169.609033][   T40] audit: type=1400 audit(2000000358.022:1086): avc:  denied  { bind } for  pid=11459 comm="syz.1.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  169.637562][T11476] SELinux:  truncated policydb string identifier
[  169.638177][   T40] audit: type=1400 audit(2000000358.052:1087): avc:  denied  { load_policy } for  pid=11469 comm="syz.4.1629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  169.639653][T11476] SELinux: failed to load policy
[  169.711317][   T40] audit: type=1400 audit(2000000358.122:1088): avc:  denied  { bind } for  pid=11482 comm="syz.1.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  169.760016][   T40] audit: type=1400 audit(2000000358.172:1089): avc:  denied  { setattr } for  pid=11484 comm="syz.4.1633" name="/" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1
[  169.916715][T11494] fuse: Bad value for 'fd'
[  169.994776][T11502] syz_tun: refused to change device tx_queue_len
[  169.996245][T11500] IPVS: nq: TCP 172.20.20.170:0 - no destination available
[  170.298610][T11517] __nla_validate_parse: 9 callbacks suppressed
[  170.298622][T11517] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1645'.
[  170.352870][T11522] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1646'.
[  170.459998][T11539] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1653'.
[  170.464729][T11539] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1653'.
[  170.520270][T11546] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.683920][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'.
[  170.726305][T11576] sctp: [Deprecated]: syz.3.1663 (pid 11576) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.726305][T11576] Use struct sctp_sack_info instead
[  170.730630][T11574] ADFS-fs (nbd4): error: unable to read block 3, try 0
[  170.760461][T11578] ADFS-fs (nbd4): error: unable to read block 3, try 0
[  170.789138][T11581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1665'.
[  170.802545][T11581] IPv6: Can't replace route, no match found
[  171.115069][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1669'.
[  171.148069][T11606] dvmrp17: entered allmulticast mode
[  171.151058][T11606] dvmrp17: left allmulticast mode
[  171.189524][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1671'.
[  171.786182][T11651] cgroup: No subsys list or none specified
[  171.846026][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'.
[  171.852675][T11652] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1684'.
[  172.227113][T11663] openvswitch: netlink: Port 10289156 exceeds max allowable 65535
[  172.416686][   T40] kauditd_printk_skb: 8 callbacks suppressed
[  172.416703][   T40] audit: type=1400 audit(2000000360.832:1098): avc:  denied  { setattr } for  pid=11670 comm="syz.4.1691" name="nbd4" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  173.144436][T11710] qnx4: no qnx4 filesystem (no root dir).
[  173.214899][   T40] audit: type=1400 audit(2000000361.632:1099): avc:  denied  { wake_alarm } for  pid=11709 comm="syz.2.1704" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  173.363101][T11728] netlink: 'syz.2.1711': attribute type 83 has an invalid length.
[  173.363632][T11729] netlink: 'syz.3.1710': attribute type 5 has an invalid length.
[  173.367830][T11731] netlink: 'syz.2.1711': attribute type 83 has an invalid length.
[  173.369312][T11729] netlink: 'syz.3.1710': attribute type 7 has an invalid length.
[  173.375167][T11730] netlink: 'syz.3.1710': attribute type 5 has an invalid length.
[  173.378698][T11730] netlink: 'syz.3.1710': attribute type 7 has an invalid length.
[  173.383701][T11729] : entered promiscuous mode
[  173.401566][   T53] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  173.406541][T11689] syz.4.1697 (11689): drop_caches: 1
[  173.563636][   T53] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  173.568099][   T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.572032][   T53] usb 6-1: Product: syz
[  173.573786][   T53] usb 6-1: Manufacturer: syz
[  173.575805][   T53] usb 6-1: SerialNumber: syz
[  174.044849][   T40] audit: type=1400 audit(2000000362.462:1100): avc:  denied  { relabelfrom } for  pid=11773 comm="syz.4.1722" name="RAWv6" dev="sockfs" ino=59005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  174.045259][T11775] SELinux:  Context system_u:object_r:hald_dccm_exec_t:s0 is not valid (left unmapped).
[  174.073288][   T53] rtl8150 6-1:1.0: couldn't reset the device
[  174.075903][   T53] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5
[  174.081360][   T40] audit: type=1400 audit(2000000362.492:1101): avc:  denied  { relabelto } for  pid=11773 comm="syz.4.1722" name="RAWv6" dev="sockfs" ino=59005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="system_u:object_r:hald_dccm_exec_t:s0"
[  174.096397][   T53] usb 6-1: USB disconnect, device number 16
[  174.540290][   T40] audit: type=1400 audit(2000000362.952:1102): avc:  denied  { getopt } for  pid=11811 comm="syz.1.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  174.652142][   T53] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[  174.803473][   T53] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  174.807257][   T53] usb 7-1: config 0 has no interface number 0
[  174.810060][   T53] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  174.816107][   T53] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  174.831921][   T53] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  174.837262][   T53] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[  174.859947][   T53] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  174.874516][   T53] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  174.879027][   T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.885713][   T53] usb 7-1: config 0 descriptor??
[  174.890879][T11805] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  174.900724][   T53] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  175.091888][   T29] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  175.198942][T11851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11851 comm=syz.1.1743
[  175.262104][   T29] usb 9-1: Using ep0 maxpacket: 16
[  175.265329][   T40] audit: type=1400 audit(2000000363.682:1103): avc:  denied  { write } for  pid=11854 comm="syz.1.1744" name="hpet" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  175.274707][   T29] usb 9-1: config 4 has an invalid interface number: 253 but max is 1
[  175.277588][   T29] usb 9-1: config 4 has an invalid interface number: 241 but max is 1
[  175.282552][   T29] usb 9-1: config 4 has no interface number 0
[  175.285182][   T29] usb 9-1: config 4 has no interface number 1
[  175.288339][   T29] usb 9-1: config 4 interface 253 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  175.293953][   T29] usb 9-1: config 4 interface 253 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  175.297746][   T29] usb 9-1: config 4 interface 253 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  175.304638][   T29] usb 9-1: config 4 interface 253 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  175.309763][   T29] usb 9-1: config 4 interface 253 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  175.314829][   T29] usb 9-1: config 4 interface 253 altsetting 5 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  175.314945][   T29] usb 9-1: config 4 interface 253 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  175.314966][   T29] usb 9-1: config 4 interface 253 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[  175.314996][   T29] usb 9-1: config 4 interface 241 altsetting 3 has a duplicate endpoint with address 0x2, skipping
[  175.315016][   T29] usb 9-1: config 4 interface 241 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  175.315033][   T29] usb 9-1: config 4 interface 241 altsetting 3 has a duplicate endpoint with address 0xA, skipping
[  175.315047][   T29] usb 9-1: config 4 interface 241 altsetting 3 has a duplicate endpoint with address 0xA, skipping
[  175.351344][   T29] usb 9-1: config 4 interface 241 altsetting 3 has a duplicate endpoint with address 0xA, skipping
[  175.351371][   T29] usb 9-1: config 4 interface 241 altsetting 3 has a duplicate endpoint with address 0xA, skipping
[  175.351397][   T29] usb 9-1: config 4 interface 241 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  175.351420][   T29] usb 9-1: config 4 interface 253 has no altsetting 0
[  175.351594][   T29] usb 9-1: config 4 interface 241 has no altsetting 0
[  175.356775][   T29] usb 9-1: New USB device found, idVendor=03f0, idProduct=1116, bcdDevice=57.74
[  175.381609][   T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.381633][   T29] usb 9-1: Product: syz
[  175.381646][   T29] usb 9-1: Manufacturer: syz
[  175.381770][   T29] usb 9-1: SerialNumber: syz
[  175.383511][T11858] trusted_key: encrypted_key: insufficient parameters specified
[  175.385319][T11858] input: syz0 as /devices/virtual/input/input22
[  175.532198][T11862] netlink: 'syz.1.1747': attribute type 4 has an invalid length.
[  175.748984][T11866] __nla_validate_parse: 7 callbacks suppressed
[  175.749002][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'.
[  175.803470][  T837] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  175.962656][  T837] usb 6-1: Using ep0 maxpacket: 8
[  175.966923][  T837] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  175.969622][  T837] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  175.973227][  T837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  175.976174][  T837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  175.979160][  T837] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  175.983636][  T837] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  175.986907][  T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.992156][T11873] lo speed is unknown, defaulting to 1000
[  175.994449][T11873] lo speed is unknown, defaulting to 1000
[  176.001274][T11873] lo speed is unknown, defaulting to 1000
[  176.016299][T11873] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  176.062052][T11873] lo speed is unknown, defaulting to 1000
[  176.070562][T11873] lo speed is unknown, defaulting to 1000
[  176.079023][T11873] lo speed is unknown, defaulting to 1000
[  176.082690][T11873] lo speed is unknown, defaulting to 1000
[  176.158493][   T40] audit: type=1400 audit(2000000364.572:1104): avc:  denied  { getopt } for  pid=11881 comm="syz.3.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  176.201611][  T837] usb 6-1: usb_control_msg returned -32
[  176.203529][  T837] usbtmc 6-1:16.0: can't read capabilities
[  176.229903][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1753'.
[  176.654098][T11896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11896 comm=syz.1.1755
[  176.660489][T11896] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1755'.
[  176.724620][   T53] usb 6-1: USB disconnect, device number 17
[  176.729554][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'.
[  177.193419][    C1] ldusb 7-1:0.55: usb_submit_urb failed (-1)
[  177.198241][   T53] usb 7-1: USB disconnect, device number 21
[  177.207428][   T40] audit: type=1400 audit(2000000365.622:1105): avc:  denied  { read write } for  pid=11901 comm="syz.1.1764" name="file0" dev="tmpfs" ino=2307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  177.209590][   T53] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  177.216877][   T40] audit: type=1400 audit(2000000365.622:1106): avc:  denied  { open } for  pid=11901 comm="syz.1.1764" path="/415/file0" dev="tmpfs" ino=2307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  177.229171][T11900] netlink: 'syz.3.1756': attribute type 4 has an invalid length.
[  177.708859][   T29] usb 9-1: USB disconnect, device number 7
[  177.756061][   T40] audit: type=1400 audit(2000000366.172:1107): avc:  denied  { map } for  pid=11919 comm="syz.2.1762" path="socket:[64576]" dev="sockfs" ino=64576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  177.781912][   T40] audit: type=1400 audit(2000000366.182:1108): avc:  denied  { connect } for  pid=11919 comm="syz.2.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  177.785678][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1761'.
[  178.033913][T11937] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  178.045374][ T5355] Dev loop6: unable to read RDB block 1
[  178.047953][ T5355]  loop6: unable to read partition table
[  178.049955][ T5355] loop6: partition table beyond EOD, truncated
[  178.194284][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'.
[  178.238309][T11946] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  178.243910][T11946] binder: 11945:11946 ioctl c0306201 200000000080 returned -22
[  178.278022][T11951] sctp: Trying to GSO but underlying device doesn't support it.
[  178.338962][T11953] netlink: 'syz.1.1773': attribute type 1 has an invalid length.
[  178.347840][   T40] audit: type=1400 audit(2000000366.762:1109): avc:  denied  { mounton } for  pid=11952 comm="syz.1.1773" path="/420/file0/bus" dev="afs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[  178.348335][T11953] overlay: filesystem on ./bus not supported
[  178.355118][T11955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4880 sclass=netlink_route_socket pid=11955 comm=syz.4.1774
[  178.373511][   T40] audit: type=1400 audit(2000000366.792:1110): avc:  denied  { watch } for  pid=11952 comm="syz.1.1773" path="/420/file0/file0" dev="afs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[  178.449906][ T5355] Dev loop6: unable to read RDB block 1
[  178.451804][ T5355]  loop6: unable to read partition table
[  178.453736][ T5355] loop6: partition table beyond EOD, truncated
[  178.488695][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1776'.
[  178.493647][T11962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1776'.
[  178.629343][T11966] dlm: no locking on control device
[  178.687359][T11970] netlink: 'syz.4.1778': attribute type 27 has an invalid length.
[  178.862615][T11976] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1779'.
[  178.892745][T11970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.953804][T11979] netlink: 'syz.2.1780': attribute type 1 has an invalid length.
[  179.054926][T11970] vlan2: left allmulticast mode
[  179.056561][T11970] bond0: left allmulticast mode
[  179.058958][T11970] bond_slave_0: left allmulticast mode
[  179.060785][T11970] bond_slave_1: left allmulticast mode
[  179.062909][T11970] mac80211_hwsim hwsim14 wlan1: left allmulticast mode
[  179.066470][T11970] vxlan0: left promiscuous mode
[  179.068305][T11970] vxlan0: left allmulticast mode
[  179.082175][T11981] overlay: filesystem on ./file0 not supported
[  179.099955][T11979] bond8: entered promiscuous mode
[  179.106630][T11979] bond8: entered allmulticast mode
[  179.109226][ T9941] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.119316][ T9941] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.124034][   T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.127684][   T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.134270][   T46] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.137745][   T46] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.142220][ T1187] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.146091][ T1187] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.184176][T11991] netlink: 75 bytes leftover after parsing attributes in process `syz.4.1783'.
[  179.230291][T12008] : entered promiscuous mode
[  179.240101][   T40] audit: type=1400 audit(2000000367.652:1111): avc:  denied  { map } for  pid=12006 comm="syz.4.1786" path="socket:[62450]" dev="sockfs" ino=62450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  179.256769][   T40] audit: type=1400 audit(2000000367.652:1112): avc:  denied  { nlmsg_read } for  pid=12009 comm="syz.1.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  179.303628][T12020] fuse: Bad value for 'fd'
[  179.309669][   T40] audit: type=1400 audit(2000000367.722:1113): avc:  denied  { write } for  pid=12018 comm="syz.3.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  179.446826][T12012] team0: Port device team_slave_0 removed
[  179.713767][T12055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.849357][T12061] netlink: 'syz.3.1802': attribute type 6 has an invalid length.
[  180.334091][T12082] futex_wake_op: syz.3.1808 tries to shift op by -1; fix this program
[  180.418017][T12093] xt_l2tp: unknown flags: 51
[  180.475883][   T40] audit: type=1400 audit(2000000368.892:1114): avc:  denied  { name_bind } for  pid=12103 comm="syz.4.1814" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  180.487145][T12106] netlink: 'syz.4.1814': attribute type 10 has an invalid length.
[  180.491207][T12106] team0: Cannot enslave team device to itself
[  180.498369][T12110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.525266][   T40] audit: type=1400 audit(2000000368.942:1115): avc:  denied  { bind } for  pid=12112 comm="syz.1.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  180.553657][   T40] audit: type=1400 audit(2000000368.972:1116): avc:  denied  { setopt } for  pid=12115 comm="syz.2.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  180.776151][T12134] trusted_key: encrypted_key: master key parameter 'defaultsyz' is invalid
[  181.134023][T12152] binder: 12150:12152 ioctl 4018620d 200000000040 returned -22
[  181.137497][T12152] binder: 12150:12152 ioctl c0306201 2000000003c0 returned -14
[  181.141884][T12152] binder: 12150:12152 ioctl c0306201 2000000001c0 returned -14
[  181.145277][T12152] binder: 12150:12152 ioctl c0306201 200000000240 returned -14
[  181.149575][T12152] binder: 12150:12152 ioctl c0306201 2000000002c0 returned -14
[  181.158754][ T9941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.161290][ T9941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.290902][T12171] netlink: 'syz.4.1836': attribute type 11 has an invalid length.
[  181.325699][T12176] netlink: 'syz.4.1838': attribute type 21 has an invalid length.
[  181.574599][T12204] netlink: 'syz.1.1847': attribute type 32 has an invalid length.
[  181.713497][T12210] syz.2.1849 (12210): drop_caches: 2
[  181.752739][   T63] Bluetooth: hci0: link tx timeout
[  181.754722][   T63] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  181.863502][T12226] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  182.227198][T12283] __nla_validate_parse: 4 callbacks suppressed
[  182.227220][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1871'.
[  182.249310][T12283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12283 comm=syz.3.1871
[  182.320527][T12292] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  182.372279][T12292] tipc: New replicast peer: fe99:0000:0000:0000:0000:0000:0000:00bb
[  182.375681][T12292] tipc: Enabled bearer <udp:syz0>, priority 10
[  182.676801][T12322] overlayfs: failed to clone upperpath
[  182.760439][T12331] veth1_to_batadv: entered promiscuous mode
[  182.962387][   T40] kauditd_printk_skb: 29 callbacks suppressed
[  182.962404][   T40] audit: type=1400 audit(2000000371.382:1146): avc:  denied  { setattr } for  pid=12348 comm="syz.1.1893" name="dsp1" dev="devtmpfs" ino=1321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  183.038669][T12351] overlay: filesystem on ./file0 not supported
[  183.068733][   T40] audit: type=1400 audit(2000000371.482:1147): avc:  denied  { map } for  pid=12352 comm="syz.2.1895" path="/dev/comedi4" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  183.079305][   T40] audit: type=1400 audit(2000000371.482:1148): avc:  denied  { execute } for  pid=12352 comm="syz.2.1895" path="/dev/comedi4" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  183.104031][T12356] bridge0: entered promiscuous mode
[  183.106531][T12356] macsec1: entered promiscuous mode
[  183.109071][T12356] bridge0: port 2(macsec1) entered blocking state
[  183.112016][T12356] bridge0: port 2(macsec1) entered disabled state
[  183.114175][T12356] macsec1: entered allmulticast mode
[  183.116146][T12356] bridge0: entered allmulticast mode
[  183.120016][T12356] macsec1: left allmulticast mode
[  183.122717][T12356] bridge0: left allmulticast mode
[  183.126681][T12356] bridge0: left promiscuous mode
[  183.229800][   T40] audit: type=1400 audit(2000000371.642:1149): avc:  denied  { mount } for  pid=12359 comm="syz.1.1897" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  183.237884][   T40] audit: type=1400 audit(2000000371.642:1150): avc:  denied  { unmount } for  pid=12359 comm="syz.1.1897" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  183.515087][ T6036] tipc: Node number set to 2995126336
[  183.698533][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1898'.
[  183.700004][T12365] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12365 comm=syz.4.1899
[  183.821758][ T5953] Bluetooth: hci0: command 0x0406 tx timeout
[  184.045484][   T40] audit: type=1400 audit(2000000372.462:1151): avc:  denied  { map } for  pid=12399 comm="syz.3.1911" path="socket:[68060]" dev="sockfs" ino=68060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  184.086835][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1910'.
[  184.091020][T12398] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1910'.
[  184.136934][T12407] openvswitch: netlink: IP tunnel TTL not specified.
[  184.148378][T12407] Invalid source name
[  184.150218][T12407] UBIFS error (pid: 12407): cannot open "/dev/sg0", error -22
[  184.182569][T12409] mkiss: ax0: crc mode is auto.
[  184.194159][T12409] pimreg: entered allmulticast mode
[  184.394235][T12425] netlink: 212288 bytes leftover after parsing attributes in process `syz.4.1919'.
[  184.661137][T12443] ieee802154 phy0 wpan0: encryption failed: -22
[  184.735756][T12447] F2FS-fs: Conflicting test_dummy_encryption options
[  184.751897][   T40] audit: type=1400 audit(2000000373.172:1152): avc:  denied  { unmount } for  pid=5961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  184.867437][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'.
[  184.874435][T12450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1929'.
[  184.882398][ T6036] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  184.956745][T12458] netlink: 'syz.3.1931': attribute type 2 has an invalid length.
[  185.029895][T12472] overlayfs: failed to clone upperpath
[  185.037155][   T40] audit: type=1400 audit(2000000373.452:1153): avc:  denied  { setattr } for  pid=12471 comm="syz.1.1935" name="/" dev="9p" ino=71827693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  185.041592][ T6036] usb 7-1: Using ep0 maxpacket: 8
[  185.055426][ T6036] usb 7-1: config 2 interface 0 has no altsetting 0
[  185.060082][ T6036] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  185.065291][ T6036] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.067820][ T6036] usb 7-1: Product: syz
[  185.069271][ T6036] usb 7-1: Manufacturer: syz
[  185.070453][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1935'.
[  185.070826][ T6036] usb 7-1: SerialNumber: syz
[  185.078793][T12473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1935'.
[  185.388288][ T6036] usb 7-1: USB disconnect, device number 22
[  185.524388][   T63] Bluetooth: hci0: unexpected event for opcode 0x1408
[  185.562128][T12499] trusted_key: encrypted_key: master key parameter '' is invalid
[  185.569038][T12499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  185.633385][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  185.640122][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  185.645981][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  185.652090][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  185.656872][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  185.702758][   T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  185.715109][   T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  185.716892][T12500] lo speed is unknown, defaulting to 1000
[  185.719957][   T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  185.727739][   T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  185.730560][   T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  185.793881][T12504] lo speed is unknown, defaulting to 1000
[  185.868246][   T40] audit: type=1400 audit(2000000374.282:1154): avc:  denied  { getopt } for  pid=12519 comm="syz.4.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  185.876329][   T40] audit: type=1400 audit(2000000374.292:1155): avc:  denied  { create } for  pid=12519 comm="syz.4.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  185.890060][T12500] chnl_net:caif_netlink_parms(): no params data found
[  186.083715][T12500] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.083798][T12500] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.083912][T12500] bridge_slave_0: entered allmulticast mode
[  186.084630][T12500] bridge_slave_0: entered promiscuous mode
[  186.091840][T12500] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.091913][T12500] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.092168][T12500] bridge_slave_1: entered allmulticast mode
[  186.092973][T12500] bridge_slave_1: entered promiscuous mode
[  186.136223][T12500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.147458][T12500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.215473][T12504] chnl_net:caif_netlink_parms(): no params data found
[  186.269464][T12500] team0: Port device team_slave_0 added
[  186.316256][T12500] team0: Port device team_slave_1 added
[  186.328089][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.334018][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.338355][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.343916][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.349791][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.355677][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.360303][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.365121][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.370081][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.374219][T12559] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1964'.
[  186.376264][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.385201][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.390006][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.395250][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.399866][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.406036][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.413060][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.417972][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.419304][T12500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.423205][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.426516][T12500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.430909][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.442117][T12500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.446535][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.456077][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.461383][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.467355][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.472393][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.475157][T12563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12563 comm=syz.2.1965
[  186.477177][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.486050][T12563] netlink: 'syz.2.1965': attribute type 1 has an invalid length.
[  186.488294][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.495804][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.499859][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.505704][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.508042][T12500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.510882][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.513883][T12500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.518459][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.531062][T12500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.533902][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.543015][T12552] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  186.546279][T12504] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.551436][T12504] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.556019][T12504] bridge_slave_0: entered allmulticast mode
[  186.560177][T12504] bridge_slave_0: entered promiscuous mode
[  186.565654][T12504] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.569077][T12504] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.575237][T12504] bridge_slave_1: entered allmulticast mode
[  186.579307][T12504] bridge_slave_1: entered promiscuous mode
[  186.685598][T12504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.718909][T12504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.784893][T12500] hsr_slave_0: entered promiscuous mode
[  186.788346][T12500] hsr_slave_1: entered promiscuous mode
[  186.793637][T12500] debugfs: 'hsr0' already exists in 'hsr'
[  186.795734][T12500] Cannot create hsr debugfs directory
[  186.818315][T12504] team0: Port device team_slave_0 added
[  186.840773][T12504] team0: Port device team_slave_1 added
[  186.929531][T12504] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.932399][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.943159][T12504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.955041][T12504] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.958279][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.971832][T12504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.079483][T12504] hsr_slave_0: entered promiscuous mode
[  187.084312][T12504] hsr_slave_1: entered promiscuous mode
[  187.086763][T12504] debugfs: 'hsr0' already exists in 'hsr'
[  187.088602][T12504] Cannot create hsr debugfs directory
[  187.202363][T12582] IPVS: set_ctl: invalid protocol: 22 172.20.20.34:20002
[  187.394657][T12500] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  187.409731][T12500] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  187.428108][T12500] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  187.433709][T12500] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  187.517548][T12504] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  187.522735][T12597] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  187.525657][T12504] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  187.530603][T12504] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  187.546546][T12504] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  187.562488][T12597] __nla_validate_parse: 1 callbacks suppressed
[  187.562499][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1973'.
[  187.619090][T12500] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.641417][T12500] 8021q: adding VLAN 0 to HW filter on device team0
[  187.648600][T12504] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.656566][ T9942] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.659374][ T9942] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.667558][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.670136][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.687099][T12504] 8021q: adding VLAN 0 to HW filter on device team0
[  187.699118][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.702126][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.713959][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.716745][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.741798][   T63] Bluetooth: hci3: command tx timeout
[  187.745429][   T63] Bluetooth: hci2: command tx timeout
[  187.860568][T12500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.877062][T12504] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.964371][T12622] kvm: pic: non byte write
[  188.077920][T12500] veth0_vlan: entered promiscuous mode
[  188.092680][T12504] veth0_vlan: entered promiscuous mode
[  188.098064][T12500] veth1_vlan: entered promiscuous mode
[  188.108483][T12504] veth1_vlan: entered promiscuous mode
[  188.138098][T12500] veth0_macvtap: entered promiscuous mode
[  188.146903][T12504] veth0_macvtap: entered promiscuous mode
[  188.153106][T12500] veth1_macvtap: entered promiscuous mode
[  188.157296][T12504] veth1_macvtap: entered promiscuous mode
[  188.180730][T12504] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.187865][T12500] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.201594][T12504] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.208463][T12500] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.224715][ T1187] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.228611][ T1187] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.235398][ T1187] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.238805][ T1187] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.247337][ T1187] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.250167][ T1187] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.255279][ T1187] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.258146][ T1187] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.335569][ T9942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.339343][ T9942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.371134][ T9930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.375558][ T9930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.385121][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.387677][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.400921][ T9930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.405017][ T9930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.445710][   T40] kauditd_printk_skb: 9 callbacks suppressed
[  188.445722][   T40] audit: type=1326 audit(2000000376.862:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12636 comm="syz.5.1945" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f785bb8eec9 code=0x0
[  188.510722][T12641] binder: 12640:12641 ioctl ab0a 40 returned -22
[  188.521221][T12639] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1953'.
[  189.014623][   T40] audit: type=1400 audit(2000000377.432:1166): avc:  denied  { write } for  pid=12649 comm="syz.2.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  189.016101][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'.
[  189.026473][ T5965] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  189.212378][T12654] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  189.253090][ T5965] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  189.831902][   T63] Bluetooth: hci2: command tx timeout
[  189.859991][T12679] 9p: Unknown access argument 3 : -22
[  190.142929][ T5990] usb 7-1: new low-speed USB device number 23 using dummy_hcd
[  190.291817][ T5990] usb 7-1: Invalid ep0 maxpacket: 32
[  190.362725][ T9930] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.421801][ T5990] usb 7-1: new low-speed USB device number 24 using dummy_hcd
[  190.571629][ T5990] usb 7-1: Invalid ep0 maxpacket: 32
[  190.575808][ T5990] usb usb7-port1: attempt power cycle
[  190.596361][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  190.600995][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  190.614071][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  190.624377][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  190.628650][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  190.661970][T12691] lo speed is unknown, defaulting to 1000
[  190.759856][T12695] input: syz1 as /devices/virtual/input/input26
[  190.846521][T12691] chnl_net:caif_netlink_parms(): no params data found
[  190.945415][ T5990] usb 7-1: new low-speed USB device number 25 using dummy_hcd
[  190.982307][ T5990] usb 7-1: Invalid ep0 maxpacket: 32
[  191.000447][T12691] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.005469][T12691] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.009569][T12691] bridge_slave_0: entered allmulticast mode
[  191.014614][T12691] bridge_slave_0: entered promiscuous mode
[  191.019307][T12691] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.023773][T12691] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.027190][T12691] bridge_slave_1: entered allmulticast mode
[  191.032333][T12691] bridge_slave_1: entered promiscuous mode
[  191.093926][T12691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.099974][T12691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.131676][ T5990] usb 7-1: new low-speed USB device number 26 using dummy_hcd
[  191.152762][T12691] team0: Port device team_slave_0 added
[  191.153535][ T5990] usb 7-1: Invalid ep0 maxpacket: 32
[  191.157956][T12691] team0: Port device team_slave_1 added
[  191.158111][ T5990] usb usb7-port1: unable to enumerate USB device
[  191.205435][T12691] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.208188][T12691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.216658][T12691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.226655][T12691] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.229452][T12691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.241951][T12691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.287899][T12691] hsr_slave_0: entered promiscuous mode
[  191.290116][T12691] hsr_slave_1: entered promiscuous mode
[  191.292421][T12691] debugfs: 'hsr0' already exists in 'hsr'
[  191.295038][T12691] Cannot create hsr debugfs directory
[  191.475168][T12691] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  191.480810][T12691] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  191.485843][T12691] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  191.491192][T12691] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  191.513346][T12691] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.516011][T12691] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.518486][T12691] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.521020][T12691] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.527874][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.533179][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.587114][T12691] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.599809][T12691] 8021q: adding VLAN 0 to HW filter on device team0
[  191.607312][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.609782][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.620294][ T9941] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.622923][ T9941] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.798012][T12691] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.842424][T12763] loop6: detected capacity change from 0 to 524279808
[  191.874675][T12764] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  191.902318][   T63] Bluetooth: hci2: command tx timeout
[  191.957268][T12691] veth0_vlan: entered promiscuous mode
[  191.969218][T12691] veth1_vlan: entered promiscuous mode
[  191.970059][T12774] netlink: 45 bytes leftover after parsing attributes in process `����
[  191.970059][T12774] �� �!�'.
[  192.000105][T12691] veth0_macvtap: entered promiscuous mode
[  192.004246][T12691] veth1_macvtap: entered promiscuous mode
[  192.017427][T12691] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.025418][T12691] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.036230][ T1187] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.040562][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.066630][ T9930] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.082806][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.088435][T12776] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2008'.
[  192.094236][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.133610][ T9930] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.168942][ T9942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.181868][ T9942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.206428][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.211108][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.218060][   T40] audit: type=1400 audit(2000000380.632:1167): avc:  denied  { map } for  pid=12785 comm="syz.4.2011" path="/dev/loop4" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  192.230915][T12788] can: request_module (can-proto-0) failed.
[  192.248808][ T9930] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.283453][T12792] tipc: Started in network mode
[  192.285564][T12792] tipc: Node identity ac14140f, cluster identity 4711
[  192.288813][T12792] tipc: New replicast peer: 255.255.255.255
[  192.295797][T12792] tipc: Enabled bearer <udp:syz2>, priority 10
[  192.469348][ T9930] bridge_slave_1: left allmulticast mode
[  192.472189][ T9930] bridge_slave_1: left promiscuous mode
[  192.476575][ T9930] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.486515][ T9930] bridge_slave_0: left allmulticast mode
[  192.488557][ T9930] bridge_slave_0: left promiscuous mode
[  192.490801][ T9930] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.518086][T12801] openvswitch: netlink: Key type 147 is out of range max 32
[  192.651610][ T5990] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  192.709541][   T63] Bluetooth: hci3: command tx timeout
[  192.801783][ T5990] usb 9-1: Using ep0 maxpacket: 32
[  192.805851][ T5990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.812725][ T5990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.817703][ T5990] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  192.822485][ T5990] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.829143][ T5990] usb 9-1: config 0 descriptor??
[  192.949795][ T9930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.950361][T12809] 9pnet_fd: Insufficient options for proto=fd
[  192.960701][ T8278] usb 12-1: new full-speed USB device number 2 using dummy_hcd
[  192.964840][ T9930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.971366][ T1187] tipc: Subscription rejected, illegal request
[  192.971952][ T9930] bond0 (unregistering): Released all slaves
[  193.017689][T12811] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  193.061872][T12813] lo speed is unknown, defaulting to 1000
[  193.122664][T12814] ntfs3(sr0): Primary boot signature is not NTFS.
[  193.134656][T12814] ntfs3(sr0): try to read out of volume at offset 0xf800
[  193.135266][ T8278] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  193.142712][ T8278] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  193.146067][ T8278] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.148660][ T8278] usb 12-1: Product: syz
[  193.150051][ T8278] usb 12-1: Manufacturer: syz
[  193.151725][ T8278] usb 12-1: SerialNumber: syz
[  193.154760][ T8278] usb 12-1: config 0 descriptor??
[  193.183531][T12814] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  193.202844][T12815] ntfs3(sr0): Primary boot signature is not NTFS.
[  193.205600][T12815] ntfs3(sr0): try to read out of volume at offset 0xf800
[  193.244094][T12815] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  193.249879][ T5990] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  193.313438][ T9930] hsr_slave_0: left promiscuous mode
[  193.319160][ T9930] hsr_slave_1: left promiscuous mode
[  193.322533][ T9930] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.325246][ T9930] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.328340][ T9930] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.330892][ T9930] batman_adv: batadv0: Removing interface: batadv_slave_1
[  193.366012][T12832] netlink: 'syz.2.2025': attribute type 1 has an invalid length.
[  193.377538][ T9930] veth1_macvtap: left promiscuous mode
[  193.379965][ T9930] veth0_macvtap: left promiscuous mode
[  193.384507][ T9930] veth1_vlan: left promiscuous mode
[  193.386544][ T9930] veth0_vlan: left promiscuous mode
[  193.411748][ T8278] tipc: Node number set to 2886997007
[  193.503043][ T6036] usb 9-1: USB disconnect, device number 8
[  193.574730][ T1473] usb 12-1: USB disconnect, device number 2
[  193.991759][   T63] Bluetooth: hci2: command tx timeout
[  194.132102][T12838] usb usb7: usbfs: process 12838 (syz.7.2027) did not claim interface 0 before use
[  194.529758][ T9930] team0 (unregistering): Port device team_slave_1 removed
[  194.640440][ T9930] team0 (unregistering): Port device team_slave_0 removed
[  194.785226][   T63] Bluetooth: hci3: command tx timeout
[  194.939339][T12857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12857 comm=syz.4.2033
[  195.550293][T12832] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  195.666003][T12842] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2028'.
[  195.710383][   T40] audit: type=1400 audit(2000000384.122:1168): avc:  denied  { execute } for  pid=12864 comm="syz.4.2035" path="/dev/nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  195.739186][   T40] audit: type=1400 audit(2000000384.152:1169): avc:  denied  { watch_mount } for  pid=12870 comm="syz.7.2036" path="/6" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  195.777727][T12873] befs: (nullb0): No write support. Marking filesystem read-only
[  195.785223][T12873] befs: (nullb0): invalid magic header
[  195.795868][T12878] FAULT_INJECTION: forcing a failure.
[  195.795868][T12878] name failslab, interval 1, probability 0, space 0, times 0
[  195.809691][T12878] CPU: 3 UID: 0 PID: 12878 Comm: syz.2.2039 Not tainted syzkaller #0 PREEMPT(full) 
[  195.809718][T12878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  195.809729][T12878] Call Trace:
[  195.809736][T12878]  <TASK>
[  195.809743][T12878]  dump_stack_lvl+0x16c/0x1f0
[  195.809785][T12878]  should_fail_ex+0x512/0x640
[  195.809815][T12878]  ? fs_reclaim_acquire+0xae/0x150
[  195.809838][T12878]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  195.809884][T12878]  should_failslab+0xc2/0x120
[  195.809903][T12878]  __kmalloc_noprof+0xd2/0x510
[  195.809935][T12878]  tomoyo_realpath_from_path+0xc2/0x6e0
[  195.809961][T12878]  ? tomoyo_profile+0x47/0x60
[  195.809989][T12878]  tomoyo_path_number_perm+0x245/0x580
[  195.810008][T12878]  ? tomoyo_path_number_perm+0x237/0x580
[  195.810030][T12878]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  195.810052][T12878]  ? find_held_lock+0x2b/0x80
[  195.810101][T12878]  ? find_held_lock+0x2b/0x80
[  195.810124][T12878]  ? hook_file_ioctl_common+0x145/0x410
[  195.810156][T12878]  ? __fget_files+0x20e/0x3c0
[  195.810197][T12878]  security_file_ioctl+0x9b/0x240
[  195.810223][T12878]  __x64_sys_ioctl+0xb7/0x210
[  195.810249][T12878]  do_syscall_64+0xcd/0x4e0
[  195.810272][T12878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.810290][T12878] RIP: 0033:0x7f371e18eec9
[  195.810306][T12878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.810322][T12878] RSP: 002b:00007f371ef88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  195.810340][T12878] RAX: ffffffffffffffda RBX: 00007f371e3e5fa0 RCX: 00007f371e18eec9
[  195.810352][T12878] RDX: 0000200000000100 RSI: 0000000000004b72 RDI: 0000000000000003
[  195.810363][T12878] RBP: 00007f371ef88090 R08: 0000000000000000 R09: 0000000000000000
[  195.810373][T12878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  195.810383][T12878] R13: 00007f371e3e6038 R14: 00007f371e3e5fa0 R15: 00007fffa478ace8
[  195.810409][T12878]  </TASK>
[  195.810465][T12878] ERROR: Out of memory at tomoyo_realpath_from_path.
[  195.820824][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2040'.
[  195.867070][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2037'.
[  195.871416][T12880] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2040'.
[  196.067048][T12904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2047'.
[  196.073521][T12907] libceph: resolve '
[  196.073521][T12907] -&���f�Y�ǝ�a���2i�
[  196.073521][T12907] .���?��&�*��&' (ret=-3): failed
[  196.073554][ T1473] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  196.255770][T12926] FAULT_INJECTION: forcing a failure.
[  196.255770][T12926] name failslab, interval 1, probability 0, space 0, times 0
[  196.261073][ T1473] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[  196.261175][T12926] CPU: 0 UID: 0 PID: 12926 Comm: syz.5.2054 Not tainted syzkaller #0 PREEMPT(full) 
[  196.261197][T12926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  196.261206][T12926] Call Trace:
[  196.261213][T12926]  <TASK>
[  196.261220][T12926]  dump_stack_lvl+0x16c/0x1f0
[  196.261248][T12926]  should_fail_ex+0x512/0x640
[  196.261269][T12926]  ? fs_reclaim_acquire+0xae/0x150
[  196.261292][T12926]  ? tomoyo_encode2+0x100/0x3e0
[  196.261314][T12926]  should_failslab+0xc2/0x120
[  196.261331][T12926]  __kmalloc_noprof+0xd2/0x510
[  196.261357][T12926]  ? d_absolute_path+0x136/0x1a0
[  196.261383][T12926]  tomoyo_encode2+0x100/0x3e0
[  196.261409][T12926]  tomoyo_encode+0x29/0x50
[  196.261430][T12926]  tomoyo_realpath_from_path+0x18f/0x6e0
[  196.261480][T12926]  tomoyo_path_number_perm+0x245/0x580
[  196.261500][T12926]  ? tomoyo_path_number_perm+0x237/0x580
[  196.261523][T12926]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  196.261567][T12926]  ? find_held_lock+0x2b/0x80
[  196.261613][T12926]  ? find_held_lock+0x2b/0x80
[  196.261634][T12926]  ? hook_file_ioctl_common+0x145/0x410
[  196.261664][T12926]  ? __fget_files+0x20e/0x3c0
[  196.261683][T12926]  security_file_ioctl+0x9b/0x240
[  196.261705][T12926]  __x64_sys_ioctl+0xb7/0x210
[  196.261729][T12926]  do_syscall_64+0xcd/0x4e0
[  196.261751][T12926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.261764][T12926] RIP: 0033:0x7f785bb8eec9
[  196.261773][T12926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.261784][T12926] RSP: 002b:00007f785c993038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  196.261796][T12926] RAX: ffffffffffffffda RBX: 00007f785bde5fa0 RCX: 00007f785bb8eec9
[  196.261802][T12926] RDX: 0000200000000100 RSI: 0000000000004b72 RDI: 0000000000000003
[  196.261809][T12926] RBP: 00007f785c993090 R08: 0000000000000000 R09: 0000000000000000
[  196.261816][T12926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.261822][T12926] R13: 00007f785bde6038 R14: 00007f785bde5fa0 R15: 00007ffc51a5b1b8
[  196.261837][T12926]  </TASK>
[  196.262521][T12926] ERROR: Out of memory at tomoyo_realpath_from_path.
[  196.264011][ T1473] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.344821][   T24] usb 12-1: new low-speed USB device number 3 using dummy_hcd
[  196.346471][ T1473] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  196.353594][ T1473] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  196.353609][ T1473] usb 9-1: Manufacturer: syz
[  196.356178][ T1473] usb 9-1: config 0 descriptor??
[  196.421657][ T1473] rc_core: IR keymap rc-hauppauge not found
[  196.423579][ T1473] Registered IR keymap rc-empty
[  196.427377][ T1473] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0
[  196.432462][ T1473] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input27
[  196.440333][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2056'.
[  196.445197][T12934] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  196.473411][   T46] ------------[ cut here ]------------
[  196.475938][   T46] RTNL: assertion failed at ./include/net/netdev_lock.h (72)
[  196.478706][   T46] WARNING: CPU: 1 PID: 46 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230
[  196.482157][   T46] Modules linked in:
[  196.484708][   T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/u32:2 Not tainted syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  196.486556][   T40] audit: type=1400 audit(2000000384.902:1170): avc:  denied  { write } for  pid=5937 comm="syz-executor" path="pipe:[6604]" dev="pipefs" ino=6604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  196.490777][   T46] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  196.503235][   T24] usb 12-1: Invalid ep0 maxpacket: 16
[  196.503993][   T46] Workqueue: bond0 bond_mii_monitor
[  196.507758][   T46] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230
[  196.510048][   T46] Code: 05 ff ff ff e8 54 08 86 f8 c6 05 45 0f 14 07 01 90 ba 48 00 00 00 48 c7 c6 40 c8 9f 8c 48 c7 c7 e0 c7 9f 8c e8 54 93 44 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 e1 60 90 e8 de 80 ed f8 e9
[  196.516995][   T46] RSP: 0018:ffffc900007ef9f0 EFLAGS: 00010286
[  196.519161][   T46] RAX: 0000000000000000 RBX: ffff888057ff8000 RCX: ffffffff8179b5b8
[  196.522838][   T46] RDX: ffff88801eeb8000 RSI: ffffffff8179b5c5 RDI: 0000000000000001
[  196.525774][   T46] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  196.528679][   T46] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920000fdf48
[  196.531155][   T46] R13: ffff888057ff8cc1 R14: ffffffff8c146920 R15: ffffffff896e72f0
[  196.533812][   T46] FS:  0000000000000000(0000) GS:ffff8880d6f55000(0000) knlGS:0000000000000000
[  196.536954][   T46] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  196.540462][   T46] CR2: 00007f371ef67000 CR3: 000000000df82000 CR4: 0000000000352ef0
[  196.543491][   T46] Call Trace:
[  196.544603][   T46]  <TASK>
[  196.545623][   T46]  ethtool_op_get_link+0x1d/0x70
[  196.547329][   T46]  bond_check_dev_link+0x3fc/0x710
[  196.548931][   T46]  ? __pfx_bond_check_dev_link+0x10/0x10
[  196.550724][   T46]  bond_mii_monitor+0x3c0/0x2dc0
[  196.552819][   T46]  ? __pfx_bond_mii_monitor+0x10/0x10
[  196.555215][   T46]  ? rcu_is_watching+0x12/0xc0
[  196.557479][   T46]  process_one_work+0x9cf/0x1b70
[  196.559523][   T46]  ? __pfx_process_one_work+0x10/0x10
[  196.561737][   T46]  ? assign_work+0x1a0/0x250
[  196.563555][   T46]  worker_thread+0x6c8/0xf10
[  196.565081][   T46]  ? __kthread_parkme+0x19e/0x250
[  196.566893][   T46]  ? __pfx_worker_thread+0x10/0x10
[  196.568963][   T46]  kthread+0x3c5/0x780
[  196.570577][   T46]  ? __pfx_kthread+0x10/0x10
[  196.572337][   T46]  ? rcu_is_watching+0x12/0xc0
[  196.573885][   T46]  ? __pfx_kthread+0x10/0x10
[  196.575523][   T46]  ret_from_fork+0x56a/0x730
[  196.577600][   T46]  ? __pfx_kthread+0x10/0x10
[  196.579854][   T46]  ret_from_fork_asm+0x1a/0x30
[  196.581986][   T46]  </TASK>
[  196.583117][   T46] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  196.585485][   T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/u32:2 Not tainted syzkaller #0 PREEMPT(full) 
[  196.588412][   T46] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  196.591801][   T46] Workqueue: bond0 bond_mii_monitor
[  196.593432][   T46] Call Trace:
[  196.594491][   T46]  <TASK>
[  196.595449][   T46]  dump_stack_lvl+0x3d/0x1f0
[  196.596904][   T46]  vpanic+0x6e8/0x7a0
[  196.598150][   T46]  ? __pfx_vpanic+0x10/0x10
[  196.599628][   T46]  ? __linkwatch_sync_dev+0x1ed/0x230
[  196.601309][   T46]  panic+0xca/0xd0
[  196.602602][   T46]  ? __pfx_panic+0x10/0x10
[  196.604171][   T46]  ? check_panic_on_warn+0x1f/0xb0
[  196.606352][   T46]  check_panic_on_warn+0xab/0xb0
[  196.608337][   T46]  __warn+0xf6/0x3c0
[  196.609730][   T46]  ? __pfx_vprintk_emit+0x10/0x10
[  196.611322][   T46]  ? __linkwatch_sync_dev+0x1ed/0x230
[  196.613025][   T46]  report_bug+0x3c3/0x580
[  196.614411][   T46]  ? __linkwatch_sync_dev+0x1ed/0x230
[  196.616136][   T46]  handle_bug+0x184/0x210
[  196.617460][   T46]  exc_invalid_op+0x17/0x50
[  196.619079][   T46]  asm_exc_invalid_op+0x1a/0x20
[  196.621128][   T46] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230
[  196.623628][   T46] Code: 05 ff ff ff e8 54 08 86 f8 c6 05 45 0f 14 07 01 90 ba 48 00 00 00 48 c7 c6 40 c8 9f 8c 48 c7 c7 e0 c7 9f 8c e8 54 93 44 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 e1 60 90 e8 de 80 ed f8 e9
[  196.632489][   T46] RSP: 0018:ffffc900007ef9f0 EFLAGS: 00010286
[  196.634736][   T46] RAX: 0000000000000000 RBX: ffff888057ff8000 RCX: ffffffff8179b5b8
[  196.638024][   T46] RDX: ffff88801eeb8000 RSI: ffffffff8179b5c5 RDI: 0000000000000001
[  196.641584][   T46] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[  196.645565][   T46] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920000fdf48
[  196.649351][   T46] R13: ffff888057ff8cc1 R14: ffffffff8c146920 R15: ffffffff896e72f0
[  196.652672][   T46]  ? __pfx_ethtool_op_get_link+0x10/0x10
[  196.654961][   T46]  ? __warn_printk+0x198/0x350
[  196.657227][   T46]  ? __warn_printk+0x1a5/0x350
[  196.659538][   T46]  ethtool_op_get_link+0x1d/0x70
[  196.661819][   T46]  bond_check_dev_link+0x3fc/0x710
[  196.664105][   T46]  ? __pfx_bond_check_dev_link+0x10/0x10
[  196.666623][   T46]  bond_mii_monitor+0x3c0/0x2dc0
[  196.669159][   T46]  ? __pfx_bond_mii_monitor+0x10/0x10
[  196.672849][   T46]  ? rcu_is_watching+0x12/0xc0
[  196.675083][   T46]  process_one_work+0x9cf/0x1b70
[  196.677207][   T46]  ? __pfx_process_one_work+0x10/0x10
[  196.679456][   T46]  ? assign_work+0x1a0/0x250
[  196.681838][   T46]  worker_thread+0x6c8/0xf10
[  196.683859][   T46]  ? __kthread_parkme+0x19e/0x250
[  196.686035][   T46]  ? __pfx_worker_thread+0x10/0x10
[  196.688182][   T46]  kthread+0x3c5/0x780
[  196.690030][   T46]  ? __pfx_kthread+0x10/0x10
[  196.692130][   T46]  ? rcu_is_watching+0x12/0xc0
[  196.694296][   T46]  ? __pfx_kthread+0x10/0x10
[  196.696361][   T46]  ret_from_fork+0x56a/0x730
[  196.698388][   T46]  ? __pfx_kthread+0x10/0x10
[  196.700429][   T46]  ret_from_fork_asm+0x1a/0x30
[  196.702578][   T46]  </TASK>
[  196.704703][   T46] Kernel Offset: disabled
[  196.706542][   T46] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:49:36  Registers:
info registers vcpu 0

CPU#0
RAX=000000000017ba91 RBX=0000000000000000 RCX=ffffffff8b51d209 RDX=0000000000000000
RSI=ffffffff8d9c755e RDI=ffffffff8bd00b40 RBP=fffffbfff1bd2f00 RSP=ffffffff8de07e08
R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000
R12=0000000000000000 R13=ffffffff8de97800 R14=ffffffff9060af90 R15=0000000000000000
RIP=ffffffff8b51bd4f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6e55000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c3b7d72 CR3=000000004e87c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000080040001 Opmask01=0000000002fefce0 Opmask02=0000000002fefcfe Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa478b070 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa478b1f6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa478b1f6 00007fffa478b1fc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371e212fbe
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371e212fcb
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371e212fc5
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371e212fd9
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371e21305f
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371e21313d
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff852064a5 RDI=ffffffff9ab6fae0 RBP=ffffffff9ab6faa0 RSP=ffffc900007ef360
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000034 R14=ffffffff9ab6faa0 R15=ffffffff85206440
RIP=ffffffff852064cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6f55000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f371ef67000 CR3=000000000df82000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000002fefce0 Opmask02=0000000002fefcfe Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa478b1f6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa478b1f6 00007fffa478b1fc
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371e212fbe
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371e212fcb
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371e212fc5
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371e212fd9
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371e21305f
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371e21313d
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371e3b74a8 00007f371e3b74a0 00007f371e3b7498 00007f371e3b7470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371ef1d100 00007f371e3b7460 00007f371e3b7478 00007f371e3b74c0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f371e3b74b8 00007f371e3b74b0 00007f371e3b74a8 00007f371e3b74a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=ffffea00011a6d00 RCX=ffffffff822e5d44 RDX=ffff88802f4a4900
RSI=ffffffff822e5d5f RDI=0000000000000007 RBP=ffffffff8dac9470 RSP=ffffc90003b3f738
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=ffffea00011a6d00 R13=0000000000000001 R14=0000000000000000 R15=0000000000000001
RIP=ffffffff810014b0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d7055000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fb2ed117d60 CR3=00000000248e7000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2ec5b76c3 00007fb2ec5b76c3
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea46ef230 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556ed485e6 000055556ed48280
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556ed37498
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556ed4cbf2 000055556ed4c8f0
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0401000012080606 015ba64080808008 0006e00300100006 d00300100006c003
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101808080801000 0680040100001208 0606015ba6408080 80080006e0030010
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006d00300100006 c00302100006b003 68100004900302f6 020001e603280200
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01e40328020001e2 0302d8020001e003 0010b880840001de 030210b080840001
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 de030201e0808084 0001dc0310040001 d8030210b8808400 01d6030010b08084
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=00000000000000ef RCX=ffffffff819a5ca2 RDX=ffff88801eae8000
RSI=ffffffff819a5c90 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000078fb98
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=1ffff920000f1f75 R13=0000000000000200 R14=ffff88801eeb8000 R15=ffffc9000078fc60
RIP=ffffffff819a5c92 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d7155000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f371ef156c0 CR3=0000000032f6d000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=0000000010400000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056513aafd600 000056513aafd600
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7efcebc0 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2032373a682e6b63 6f6c5f7665647465 6e2f74656e2f6564 756c636e692f2e20
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3834203130203938 2034362038642037 6620666620666620 6666203861203163
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2037632038342033 6320313020333720 6666206666203066 203130206433203e
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38343c2035302066 3020383020343220 6334206238206334 2038632039382064
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420326320393820 6434206163203938 2038342036642039 3820383420376620
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000