last executing test programs:

27.244211768s ago: executing program 1 (id=126):
syz_io_uring_setup(0x4bfc, &(0x7f0000000280)={0x0, 0x10000000, 0x10100, 0x0, 0x200000}, &(0x7f0000000200)=<r0=>0x0, &(0x7f0000000340)=<r1=>0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4d, 0x0, @fd, 0x6, 0x8, 0xffffff2b, 0x2, 0x1, {0x3}}) (async)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xc43, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r2}})
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x4, 0x2, 0x2, 0x0, 0x7}) (async)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) (async)
recvfrom$inet6(r4, 0x0, 0x0, 0x10120, 0x0, 0x0) (async)
write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002a00)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (async)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0)
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
dup2(r7, r8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000180)='./file1\x00') (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) (async)
chdir(&(0x7f00000003c0)='./bus\x00') (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x478103, 0x60) (async)
getdents(r6, &(0x7f00000001c0)=""/240, 0xf0)

27.17323565s ago: executing program 1 (id=127):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20068011}, 0x24044090)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r5, 0x28543634fae43ad, 0x40000}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000aa40)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x61}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x18}}}}}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x8004)

27.109144687s ago: executing program 1 (id=128):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x100, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0xffc2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7bd3}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FITHAW(r0, 0xc0045878)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='-cpuset'], 0x1d)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132})
write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[], 0xc54c295c)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r3, 0x1, {0x1, 0xff, 0x4}, 0x2}, 0x72)
bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x1, {0x0, 0x1, 0x2}, 0x2}, 0x18)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

26.934606395s ago: executing program 1 (id=129):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x8, 0x10080)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=<r2=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000440)={{0x0, 0x6, 0x9, 0x9, 'syz1\x00', 0x3}, 0x1, 0x103, 0x1, r2, 0x4, 0x3, 'syz1\x00', &(0x7f0000000140)=['\x00', '^[\x00', '/dev/bsg/2:0:0:0\x00', 'autofs\x00'], 0x1c})
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "07bbfe1b9c6cd2888187a9223e009485800000000000c6a3000000f6515b2200", <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{}]})
chdir(&(0x7f0000000080)='./file1\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x102, 0x112)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/warn_count', 0x100, 0x40)
move_mount(r5, &(0x7f0000002840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000002980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$CDROMVOLREAD(r8, 0x5313, &(0x7f00000001c0))
setpgid(r7, 0x0)
setpgid(0x0, r7)
mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0)
r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x80, 0x0)
r10 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, <r11=>0x0, 0x0, <r12=>0x0}, 0x2020)
r13 = getuid()
write$FUSE_ENTRY(r10, &(0x7f0000000340)={0x90, 0xfffffffffffffff5, r11, {0x3, 0x1, 0x23d3, 0x4d, 0x6, 0x5, {0x6, 0x8, 0x5, 0x7, 0x5, 0x6000000000000, 0x20002, 0xaf6b, 0x8, 0xa000, 0x6, r13, r12, 0x2, 0xbb60}}}, 0x90)
ioctl$BSG_IO(r9, 0x2285, &(0x7f0000000280)={0x51, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xcd6, 0xbffff6df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x9144e6a29fca871a, 0x0, 0x304})

26.86044056s ago: executing program 1 (id=130):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup2(r0, r0)
read$usbfs(r1, &(0x7f0000000280)=""/220, 0xdc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB="08000400b800"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8004042)
r4 = socket$kcm(0x21, 0x2, 0x2)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000100)={0x4, <r11=>0xffffffffffffffff})
ioctl$KVM_GET_DEVICE_ATTR(r11, 0x4018aee2, 0x0)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0x10)
sendto$inet(r8, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x15)
write$uinput_user_dev(r12, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
r13 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000001a40)={0x466, 0xdab2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
bind$ax25(r13, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @null, @bcast, @null]}, 0x48)
write$binfmt_elf64(r13, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r12, 0x5501)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000b00"], 0x10b8}, 0xff00)

26.544214207s ago: executing program 1 (id=133):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x206, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x41}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0xb, 0x6, 0xfe, 0x7, 0x2, 0x3c, 0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x4, 0x9}, 0xe)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
r2 = syz_io_uring_setup(0x17271, &(0x7f0000000000)={0x0, 0xfffffffc, 0x4, 0x6, 0x2355}, &(0x7f00000002c0), &(0x7f0000ff4000))
close_range(r1, r1, 0x0)
getpeername(r0, &(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000240)=0x80)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000300)={{0x2, 0x0, @broadcast}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'sit0\x00'})
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='attr/sockcreate\x00')
preadv(r2, &(0x7f0000000040), 0x0, 0xfff, 0x0)
shutdown(r0, 0x1)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100"/28], 0x48)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000002000000009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad588c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8"], 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000a07000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000001c0)="66b80a0000000f23d00f21f866350000000c0f23f80fc7b900002e0f01c80f013abaf80c66b8530f8d8566efbafc0cb000ee3626650f0966db7f0083c6080fc735baf80c66b8d4ba278066efbafc0c66b8a926000066ef", 0x57}], 0x1, 0x4c, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002100df4dfdffffff001a00000200000000000000000000000c000c"], 0x28}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)

26.44065843s ago: executing program 32 (id=133):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x206, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x41}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0xb, 0x6, 0xfe, 0x7, 0x2, 0x3c, 0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x4, 0x9}, 0xe)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
r2 = syz_io_uring_setup(0x17271, &(0x7f0000000000)={0x0, 0xfffffffc, 0x4, 0x6, 0x2355}, &(0x7f00000002c0), &(0x7f0000ff4000))
close_range(r1, r1, 0x0)
getpeername(r0, &(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000240)=0x80)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000300)={{0x2, 0x0, @broadcast}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'sit0\x00'})
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='attr/sockcreate\x00')
preadv(r2, &(0x7f0000000040), 0x0, 0xfff, 0x0)
shutdown(r0, 0x1)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100"/28], 0x48)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000002000000009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad588c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8"], 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000a07000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000001c0)="66b80a0000000f23d00f21f866350000000c0f23f80fc7b900002e0f01c80f013abaf80c66b8530f8d8566efbafc0cb000ee3626650f0966db7f0083c6080fc735baf80c66b8d4ba278066efbafc0c66b8a926000066ef", 0x57}], 0x1, 0x4c, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002100df4dfdffffff001a00000200000000000000000000000c000c"], 0x28}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)

2.583631712s ago: executing program 3 (id=463):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0}) (rerun: 32)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYBLOB="08000600bc"], 0x24}}, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0)
ioctl$BSG_IO(r3, 0x2285, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4})

1.710667455s ago: executing program 3 (id=474):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x401, 0x2, 0x1, 0xfffffffd}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0)

1.654356323s ago: executing program 3 (id=475):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x53, 0xa, 0x0, "3258c546dacccfae1e008faa00000000f4ff4000"})
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000300)={0xa, <r2=>r0, 'id0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0x10a8, 0x30, 0x1, 0x203, 0x0, {}, [{0x1094, 0x1, [@m_skbedit={0x1090, 0x1e, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5cc, 0x4, 0x6, 0x4000009, 0xea}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xfff1}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3ff800, 0x80000001, 0x7, 0xfff, 0x1a6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x16}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x601a1da72de48ce}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x10a8}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002640), r3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffd, 0x4000000000}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r7 = eventfd(0xe)
ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f00000002c0)={0x1, r7})
sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002680)={0x14, r4, 0xf806850cacafa3b1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40c4}, 0x4c095)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r9)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fec040b92800000008000300", @ANYRES32=r11, @ANYBLOB="10002f80"], 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x2000c0c0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x7c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7bcb41d11aded6468a8157f79073221d21a59f9df3386b75e31c918eada29236"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "25aab5d13f20df31b60da5f67067ec2b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4cfc80767079c5a53ecf3d231e0714610a4eec38e61a19ecbdbc582dfb9026e8"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a5804ac1f7d7909127891363d033adef"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8800}, 0x20004011)

1.573923191s ago: executing program 3 (id=479):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x1, 0x6, 0x40}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x5, 0x12, 0x0, 0x4, 0x10}, 0x9c)
r3 = syz_io_uring_setup(0x7463, &(0x7f0000000740)={0x0, 0x0, 0x80}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x6e69326ecaf3183c, 0x0, @fd=r2, 0x8, 0x8, 0x50000000, 0xd})
io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000100)={0x7fff, 0xffffffffffffffff, 0x0, {0xd463}, 0x2}, 0x1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000})
socket$kcm(0x2, 0xa, 0x2)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0)
syz_usb_disconnect(r7)
syz_usb_control_io$uac1(r7, &(0x7f0000000100)={0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="400953000000530ecfc198a96f12e9a34c1d9c2f97b317362ee524340cea2b13e4952f955c8cf6e05107fc9800a7bc3b87bedc49129c36bbf4b29a727c2400f93acb608739a8d5e40481729dc27d876a4efde02d3b461deaad683c4cab8e861e9c3562d3b66cc6ec64"], &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, &(0x7f0000000640)={0x44, &(0x7f0000000400)={0x40, 0x17, 0xdd, "a0c4a8216297cc3eb842c878e8d8147090f9aa3ad410b923923335dca477a976dec9877043186139ff9923d29eba2d386a32e2971fb3c1377ad8a7466701491fc651f533543d8b04b4532c8a7d165f83915897b70632a974ce80d626eaeab5e67af9862f68b0ee4e61cde6de0bd2ffc29f58466d04c9657d4daaed2b223b4d7a704dd50359ceae447b6c6203f4135295397b8cde1811e133588b7703e20372786d2284bf5ebe75d81a41c6f1459b3858c5fe8ac9daefd9a365207ad75704c8793abe9a77e0464c265cecb95d4dd919336d04347abaef5827003a5e68ed"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xb3}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xd3}, &(0x7f0000000500)={0x20, 0x81, 0x1, '['}, &(0x7f0000000540)={0x20, 0x82, 0x3, "40a79b"}, &(0x7f0000000580)=ANY=[@ANYBLOB="0004010000008e"], &(0x7f00000005c0)={0x20, 0x84, 0x3, "1dc064"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "97600e"}})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r8, 0x0)
ftruncate(r8, 0xc17a)
ioctl$TIOCNOTTY(r8, 0x5422)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1})
syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x10f}, &(0x7f0000000940)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r3, 0xa32, 0x95eb, 0x0, 0x0, 0x0)

1.134078835s ago: executing program 0 (id=488):
mlock(&(0x7f0000ff8000/0x5000)=nil, 0x5000)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setgroups(0x0, 0x0)
getgroups(0x1, &(0x7f0000000080)=[<r1=>0xee00])
setregid(0x0, r1)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8})
r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@deltclass={0x4a0, 0x29, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff3, 0x2}, {0xfff3, 0xfffc}, {0x3, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_RATE={0x6, 0x5, {0xa, 0x4}}, @tclass_kind_options=@c_htb={{0x8}, {0x4}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x1, 0x6, 0x1, 0x3, 0xffffff01}, {0x1, 0x2, 0xe, 0x19d4, 0x5, 0xa9b}, 0x65c, 0x919b, 0x4cddb009, 0xa28b, 0x3}}, @TCA_HTB_RTAB={0x404, 0x4, [0xfffffffe, 0x8e, 0x5, 0x5, 0x3, 0x66, 0x1ff, 0x4, 0x1, 0x200, 0xe38, 0xfffffffa, 0x9f7b, 0xf7, 0x8000, 0x9, 0x10001, 0x3, 0x0, 0x7f, 0x3, 0x6, 0xfffffff9, 0x3, 0xd, 0x6, 0x2, 0x0, 0x6410000, 0xa91b, 0x1000, 0x4d5, 0x40, 0x3, 0x5, 0xffffff55, 0xc881, 0xfffffffa, 0xab5, 0x6, 0x6, 0x1, 0x1, 0x7, 0x8001, 0x61, 0x5c3, 0x0, 0x66df8, 0x0, 0x97, 0x9, 0x400, 0x9, 0xffffffff, 0x4, 0x8000, 0x9, 0x7, 0xfff, 0x7, 0xfffffffb, 0x5, 0xfffffff7, 0xb, 0x7fffffff, 0x5, 0x7, 0x8, 0x9, 0x3, 0x7f, 0x7fffffff, 0x2, 0x401, 0x140d8c63, 0x5, 0xa506, 0x4dd, 0xb, 0x0, 0x7fffffff, 0x9, 0x1, 0x60, 0xffffffff, 0x4, 0x0, 0x2, 0x916, 0x4, 0xfffffff8, 0x4, 0x7, 0x401, 0x4, 0x3, 0xa0, 0xfffffff8, 0x2, 0x88, 0xffff0000, 0x8, 0x10000, 0x34, 0x4, 0x4, 0x1, 0xdaa, 0x7, 0x0, 0x3ff, 0x0, 0x4, 0xe7cf, 0xfffffffd, 0x8, 0x14ad, 0x1e, 0x318, 0x43a, 0x5, 0x0, 0x7fff, 0x8, 0x9, 0x4, 0xeb, 0x8902, 0x7, 0x2, 0x3, 0x200, 0x2, 0x7, 0x56aa53d8, 0xe2d3, 0x2, 0x0, 0x10000000, 0xe, 0x2, 0x5, 0x839, 0x9, 0xffff6b29, 0x5d, 0x8, 0x9b4, 0x1, 0x0, 0x1000, 0x0, 0xdea5, 0x3, 0x80000000, 0x69da, 0xf, 0x401, 0x7, 0x4, 0x0, 0x0, 0x1, 0xffffffff, 0x4, 0x3, 0x0, 0x4, 0x7f, 0xfffffff8, 0x3, 0x80, 0x2, 0x2, 0x4, 0x4, 0xcafe, 0xfffffff9, 0x5, 0x4, 0x9, 0x1, 0x6, 0x9, 0x7, 0x80000001, 0x8, 0x3, 0xa3eb, 0x4, 0xfff, 0x6, 0x0, 0x7, 0x5, 0x80, 0x3, 0xfff, 0xff, 0xffffffff, 0x800, 0x72bf, 0x2, 0x0, 0x5, 0x6, 0x5, 0x5, 0xffff, 0x101, 0xffff, 0xffffffff, 0x798cece8, 0xb1, 0x3, 0x3, 0x80000001, 0x10001, 0xfffffffd, 0xd, 0xbd60, 0xffffff81, 0xffffffd1, 0x6, 0x7, 0x7, 0x100, 0x5, 0x0, 0x0, 0x0, 0x400, 0x277, 0x5, 0x4, 0x7fff, 0x4, 0x2, 0x0, 0x8, 0x7, 0x8, 0x9d0, 0x7, 0x9, 0x0, 0x7, 0x4, 0x8, 0xe12, 0x1, 0x0, 0x80000001, 0x80000001, 0x5]}]}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x7f, 0xe}}]}, 0x4a0}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000180)="471918f562d285ad1a2739c44a2f10f70ed0666fb496ae8423f781f670bf245faf87c310644e82aeece61e1ab3fa2b51cb317d7bbcdeca286a02ef80dbce14898dcdabca759c9a4ead040a69c969a6cad25667f016c2977a39e335860c9b0ea6289131f42f2dd3cfe036d11c29e806a4eb6f998b6af739456e9a6193890fd164d062e26fbc2b273291c4", 0x8a, <r10=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000000c0)={r10})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="28f4369a5b770148314d4cf4bc674c71d8ef9ae368c07c307bff19ee915e0d2e44d059cfbb84711f88544182abbe94d5cf69be22e28bab3f7d349c2eb80f884f62f9fb9d0ce56da724cd04ca7970237934be36ccc2461f669983f25982dac97f7a78dcee9e857d2f7aa2a870c86fa4d6118ccda5d03c302e84086d8a5f4603ce22ebde25ae4153ccf70c6c565448b301970ed18bceaa9d3601f1c99bb3b78f6605e8b920b65527b0a567a2ffd78665801707cc8da1f83584625cca74ff2300"/205, @ANYRES16=r6, @ANYBLOB="070025bd7000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0)

964.471322ms ago: executing program 2 (id=491):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='mmap_lock_acquire_returned\x00', r0}, 0x18)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000000)='usrquota')
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
io_setup(0x8, &(0x7f0000004200))
io_setup(0x3, &(0x7f0000000240))
io_setup(0x3083, &(0x7f0000000000))
io_setup(0xa, &(0x7f0000000040))
io_setup(0x8, &(0x7f00000001c0))
ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x4, 0x2001)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000180)='\x88\x9a.\xaa\x8c\b\x99\xe5 \x19\xa6\x1c}g\xf5)P\x86\f\xba\xff\x8fS0\xd0/\xa2\x16\xc1?5\x9f&!\xfe?\xbe\x03\\\x94s\xf5\x1f\xaa\xd9\xfd2\xbc5y\x18#Qu\x85\xee-\xc0\xac\xa8\x93\x0eXds\xf3\xf6\x84\xca\"\xb8\x06\x8bM\xd4\xc5\x8c\xe1\x86\'@\x9f\x8f\xce\x85\xdf\xbb\xa2\x04Z\xbc:;\x00B\x85U\xf6\x9d\x9e_\x9f_\x9dD\t\xa6\xf6\xa9\xb2e\x92\xd0g\xb3\x01\xb77\x8eC}\x1d\x92\xa0\x85)\x0f\x1d\x7f\xd6\xd7\x0f\x8d\xea']})

784.469608ms ago: executing program 2 (id=494):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_PEC(r1, 0x708, 0x3) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0}) (async)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0x5, 0x2, 0x401, 0x2, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0xdffffff8]})

643.697978ms ago: executing program 4 (id=498):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x2) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) (async)
r4 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r4, &(0x7f0000000000)={0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/1593], 0x639})
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x608783, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$unix(0x1, 0x1, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
userfaultfd(0x80001)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async)
r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x15d002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x2)

464.599319ms ago: executing program 4 (id=499):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x0, 0x0, 0xfffffffe})
readv(r6, &(0x7f0000000200)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffeb2, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x4040)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001300f5d10300"/20, @ANYRES32=r1, @ANYBLOB="0000000b6dc8b4eb08000d0006000010"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

294.471619ms ago: executing program 2 (id=500):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)
quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f00000003c0)=@sr0, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r3, 0x800, 0x70bdac, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008844}, 0x40000)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (async)
quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f00000003c0)=@sr0, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r3, 0x800, 0x70bdac, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008844}, 0x40000) (async)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)

294.072435ms ago: executing program 4 (id=501):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) (async)
ioctl$SNDCTL_SEQ_GETTIME(r2, 0x80045113, &(0x7f0000000180))
r3 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) (async)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000010000054001280080001006774700048000280080007000000000a080004000000000014000800fe8000000000000000000000000000aa0800030005000000050005"], 0x84}}, 0x0) (async)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x7fffffff, 0xdb}, 0x9c) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES16=r5, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x2, 0x3, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x547}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x18}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7ea30768}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8d}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8811}, 0x4000040)

292.702424ms ago: executing program 0 (id=502):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000001e000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="bad004ed0f06660f3a0e24000f062e0f01c8660f3880924900260f01ee2e0fc75c08f0ff8d0000ba4100b000ee", 0x2d}], 0x1, 0x2, &(0x7f0000000100)=[@cr0={0x0, 0x80000001}, @cstype0={0x4, 0x7}], 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0xffff1000, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

244.322907ms ago: executing program 4 (id=503):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x17f)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xe4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x5f, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x80]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x0, 0x1, {0xa, [0xc, 0xc, 0x8, 0xa, 0x6, 0xd, 0x6, 0x10, 0xb, 0x9, 0x4, 0x0, 0x0, 0x1, 0x8, 0xf], 0x0, [0x8, 0x0, 0x4, 0x4000, 0x6, 0x8, 0x8, 0x9, 0xfff2, 0x0, 0xf001, 0x2, 0x4, 0x9, 0x5, 0x101], [0x1, 0x1, 0x7, 0x30, 0x6, 0x7, 0x4, 0xa579, 0x6, 0x10, 0xa7, 0x36, 0x7, 0x81, 0x3ff, 0x9]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7fffffff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x83}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x401}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}]}}]}, 0xe4}}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0)
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r4, {0x7, 0x2b, 0x3, 0x200c0400, 0x0, 0x0, 0x0, 0xe382, 0x0, 0x0, 0x8}}, 0x50)
read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000480)={0x10, 0xffffffffffffffda, r5}, 0x10)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r6, &(0x7f0000001fc0)=""/184, 0x20002078)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

243.293827ms ago: executing program 3 (id=504):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x200)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}})
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r2, 0x27f1c000)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x200}, 0x1c)
getsockopt$inet6_int(r4, 0x29, 0x18, 0x0, &(0x7f00000001c0))
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7fff}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x7, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xb5}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

143.660071ms ago: executing program 4 (id=505):
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) (async)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x1cd100)
ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f0000000200)=[{}], 0x5, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}]}) (async)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0x0, 0x2, 0x9]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

143.161165ms ago: executing program 0 (id=506):
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/3:0:0:0\x00', 0x141000, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0)

142.615646ms ago: executing program 0 (id=507):
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10060, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10)
ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000040))
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000002c0)={0x24, 0x28, 0x3, 0x6, 0x1, 0xcd, 0x6, 0x4c, 0x1})
socket(0x11, 0x800000003, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600))
read$FUSE(0xffffffffffffffff, &(0x7f0000001140)={0x2020}, 0x3f)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
r6 = userfaultfd(0x1)
ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r8)
syz_emit_ethernet(0xda, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xa4, 0x2b, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@routing={0x3b, 0x0, 0x3}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "ad659a87ce8d6c4642e7b756fdd99c8a003016d9b0740e1e5222cc00ccb1137d", "91492c9f8a93ab7cbdc2fcd39ddfcb1f049555996610eb1bb8e54a1c3f5624fe1401051de2ce367aadedefa5e434abf7", "0a4dee37c85aecbf21c869478c62f84ba03ff89b863366c0128e76d8", {"51650242e877a758a21f80764984be21", "ef5d907f201d99a4eff0c7b450cf0a15"}}}}}}}}, 0x0)
sendmsg$DEVLINK_CMD_GET(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="05c790dda8bc018fd0c0abbc8bfd603b691018ed766809be7d45f66476b85ef92faa63f115fc2ffb12", @ANYRES16=r9, @ANYBLOB="010029bd7000fddbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x20000800)
sendmsg$nl_route(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r8], 0x38}, 0x1, 0x0, 0x0, 0x24048825}, 0x20008800)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0xe, 0x0, &(0x7f0000000080)="fcffffff00000000899094fb9db1", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa03049078120002282500000000000000000100007f0000017f673301dc916371ae9b1c03"], 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="0918000000000000300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb080004000005"], 0x58}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)

73.855944ms ago: executing program 2 (id=508):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0x8}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x400, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004071}, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

68.684404ms ago: executing program 3 (id=509):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x62d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x810, 0xffffffffffffffff, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0xd, 0x300}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x7a00}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b"], 0x14}}, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3], 0x48}}, 0x0)
recvmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

57.355882ms ago: executing program 0 (id=510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000580)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xd6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="28000000071c2600000041632e00000005000009f99e32000203a2"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x4000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
dup3(r2, r1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r3) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000580)={'wpan0\x00'}) (async)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xd6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) (async)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="28000000071c2600000041632e00000005000009f99e32000203a2"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x4000) (async)

56.861523ms ago: executing program 2 (id=511):
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x7}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)
r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

2.682934ms ago: executing program 4 (id=512):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff})
mount$afs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000240)=ANY=[@ANYBLOB='dyn', @ANYRESOCT, @ANYRESHEX=r0])
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x42)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0/../file0'}, 0x14)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "d2487b822050386f", "4946115b8e1acab11dda0ee7d5239a0ff818a4b776b238dccb81bfd9652cb934", "f728d519", "0cb42238c52f3b48"}, 0x38) (async)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "d2487b822050386f", "4946115b8e1acab11dda0ee7d5239a0ff818a4b776b238dccb81bfd9652cb934", "f728d519", "0cb42238c52f3b48"}, 0x38)
ioctl$CDROMREADCOOKED(r3, 0x5315, &(0x7f00000003c0)) (async)
ioctl$CDROMREADCOOKED(r3, 0x5315, &(0x7f00000003c0))
sendfile(r2, r3, &(0x7f0000000100)=0x10, 0x10001)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x400, 0x2) (async)
r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x400, 0x2)
move_mount(r1, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0xa339e38e2ca5ef9f) (async)
move_mount(r1, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0xa339e38e2ca5ef9f)

264.663µs ago: executing program 0 (id=513):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r2 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8141, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
get_mempolicy(&(0x7f00000000c0), &(0x7f0000000200), 0x5, &(0x7f0000ffc000/0x4000)=nil, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000300)={'wg1\x00', @broadcast})
openat(r4, &(0x7f00000002c0)='./file1\x00', 0x800, 0x0)
ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x8, &(0x7f0000000000))
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x64, r1, 0x731, 0x4, 0x25dfdbfe, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}, 0x1, 0x2, 0x0, 0x80}, 0x0)
r6 = accept$ax25(r3, 0x0, &(0x7f0000000340))
ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000000380))
rt_sigsuspend(&(0x7f0000000280)={[0x4]}, 0x8)

0s ago: executing program 2 (id=514):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x4004004)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = gettid()
r3 = epoll_create(0x400)
r4 = eventfd(0xfffffffe)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000008, 0x810, 0xffffffffffffffff, 0x8000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x118, &(0x7f0000000180)=0xfff, 0x0, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000))
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r4, &(0x7f00000000c0)={r3, r4, 0x5})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000140)=0xfffffff9, 0x4)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r7 = socket$netlink(0x10, 0x3, 0xf)
getsockopt$sock_buf(r7, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000))
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000, 0x400}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

0s ago: executing program 4 (id=515):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = socket(0x200000000000011, 0x2, 0xd)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$TCFLSH(r5, 0x400455c8, 0x2) (async)
ioctl$TCFLSH(r5, 0x400455c8, 0x2)
ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) (async)
ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xdb)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0xf7)
bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
read$usbmon(r6, &(0x7f00000005c0)=""/225, 0xe1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0)
preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000300)=""/275, 0x113}], 0x1, 0xa3, 0xf9f) (async)
preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000300)=""/275, 0x113}], 0x1, 0xa3, 0xf9f)
r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0)
write(r2, &(0x7f0000000300)="2cd889f035a53e14f3d5ac", 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x18, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xd}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@deltclass={0x7c, 0x29, 0x8, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0xfff2, 0x1f}, {0xc, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x80, 0x8}}, @TCA_RATE={0x6, 0x5, {0x7, 0x80}}, @TCA_RATE={0x6, 0x5, {0x2, 0xd}}]}, 0x7c}}, 0x24000000)
socket$netlink(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

[   43.599295][   T40] audit: type=1400 audit(1756008453.379:61): avc:  denied  { siginh } for  pid=5873 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '[localhost]:45589' (ED25519) to the list of known hosts.
[   44.733767][   T40] audit: type=1400 audit(1756008454.539:62): avc:  denied  { name_bind } for  pid=5880 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   44.765102][   T40] audit: type=1400 audit(1756008454.569:63): avc:  denied  { write } for  pid=5883 comm="sh" path="pipe:[5748]" dev="pipefs" ino=5748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   44.785650][   T40] audit: type=1400 audit(1756008454.589:64): avc:  denied  { execute } for  pid=5883 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   44.795451][   T40] audit: type=1400 audit(1756008454.589:65): avc:  denied  { execute_no_trans } for  pid=5883 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   47.204378][   T40] audit: type=1400 audit(1756008457.009:66): avc:  denied  { mounton } for  pid=5883 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   47.207060][ T5883] cgroup: Unknown subsys name 'net'
[   47.342219][ T5883] cgroup: Unknown subsys name 'cpuset'
[   47.348550][ T5883] cgroup: Unknown subsys name 'rlimit'
[   47.608360][ T5954] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   48.514379][ T5883] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   51.666829][   T40] kauditd_printk_skb: 13 callbacks suppressed
[   51.666840][   T40] audit: type=1400 audit(1756008461.469:80): avc:  denied  { execmem } for  pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   51.884237][   T40] audit: type=1400 audit(1756008461.689:81): avc:  denied  { create } for  pid=5965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   51.890611][   T40] audit: type=1400 audit(1756008461.689:82): avc:  denied  { read write } for  pid=5965 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   51.898237][   T40] audit: type=1400 audit(1756008461.689:83): avc:  denied  { open } for  pid=5965 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   51.905464][   T40] audit: type=1400 audit(1756008461.709:84): avc:  denied  { ioctl } for  pid=5966 comm="syz-executor" path="socket:[5761]" dev="sockfs" ino=5761 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   51.930155][ T5970] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   51.933166][ T5977] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   51.933290][ T5970] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   51.936164][ T5982] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   51.936451][ T5977] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   51.937898][ T5977] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   51.938590][ T5970] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   51.939079][ T5970] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   51.939340][ T5970] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   51.941393][ T5980] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   51.941405][   T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   51.942840][   T40] audit: type=1400 audit(1756008461.759:85): avc:  denied  { read } for  pid=5966 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   51.945694][   T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   51.947012][ T5977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   51.949066][   T40] audit: type=1400 audit(1756008461.759:86): avc:  denied  { open } for  pid=5966 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   51.950216][   T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   51.950462][   T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   51.952086][ T5977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   51.954089][   T40] audit: type=1400 audit(1756008461.759:87): avc:  denied  { mounton } for  pid=5966 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   51.956300][ T5977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   51.959029][   T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   51.959963][   T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   51.994375][ T5977] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.147398][   T40] audit: type=1400 audit(1756008461.949:88): avc:  denied  { module_request } for  pid=5972 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   52.195887][ T5972] chnl_net:caif_netlink_parms(): no params data found
[   52.309460][ T5966] chnl_net:caif_netlink_parms(): no params data found
[   52.331430][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.334036][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.336412][ T5972] bridge_slave_0: entered allmulticast mode
[   52.339941][ T5972] bridge_slave_0: entered promiscuous mode
[   52.376104][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.378923][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.381715][ T5972] bridge_slave_1: entered allmulticast mode
[   52.385295][ T5972] bridge_slave_1: entered promiscuous mode
[   52.443701][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.486709][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.529370][ T5974] chnl_net:caif_netlink_parms(): no params data found
[   52.560940][ T5972] team0: Port device team_slave_0 added
[   52.586926][ T5972] team0: Port device team_slave_1 added
[   52.605401][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.608662][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.611006][ T5966] bridge_slave_0: entered allmulticast mode
[   52.613708][ T5966] bridge_slave_0: entered promiscuous mode
[   52.665366][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.667939][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.670176][ T5966] bridge_slave_1: entered allmulticast mode
[   52.672748][ T5966] bridge_slave_1: entered promiscuous mode
[   52.700733][ T5965] chnl_net:caif_netlink_parms(): no params data found
[   52.715264][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.718129][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.726025][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.766678][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.769000][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.777055][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.812160][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.825920][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.882525][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.885888][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.889863][ T5974] bridge_slave_0: entered allmulticast mode
[   52.893820][ T5974] bridge_slave_0: entered promiscuous mode
[   52.959134][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.962311][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.965434][ T5974] bridge_slave_1: entered allmulticast mode
[   52.969712][ T5974] bridge_slave_1: entered promiscuous mode
[   52.998890][ T5966] team0: Port device team_slave_0 added
[   53.044263][ T5972] hsr_slave_0: entered promiscuous mode
[   53.046776][ T5972] hsr_slave_1: entered promiscuous mode
[   53.050397][ T5966] team0: Port device team_slave_1 added
[   53.112379][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.144428][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.146770][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.155646][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.160204][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.162455][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.171055][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.176147][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.195104][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.197791][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.200027][ T5965] bridge_slave_0: entered allmulticast mode
[   53.202634][ T5965] bridge_slave_0: entered promiscuous mode
[   53.233622][ T5974] team0: Port device team_slave_0 added
[   53.235838][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.238391][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.240691][ T5965] bridge_slave_1: entered allmulticast mode
[   53.243293][ T5965] bridge_slave_1: entered promiscuous mode
[   53.267081][ T5974] team0: Port device team_slave_1 added
[   53.314103][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.321980][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.401625][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.404483][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.414931][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.423225][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.426259][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.436367][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.444137][ T5966] hsr_slave_0: entered promiscuous mode
[   53.446539][ T5966] hsr_slave_1: entered promiscuous mode
[   53.448913][ T5966] debugfs: 'hsr0' already exists in 'hsr'
[   53.450785][ T5966] Cannot create hsr debugfs directory
[   53.453784][ T5965] team0: Port device team_slave_0 added
[   53.465838][ T5965] team0: Port device team_slave_1 added
[   53.581896][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.584179][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.592721][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.602190][ T5974] hsr_slave_0: entered promiscuous mode
[   53.604842][ T5974] hsr_slave_1: entered promiscuous mode
[   53.607191][ T5974] debugfs: 'hsr0' already exists in 'hsr'
[   53.609190][ T5974] Cannot create hsr debugfs directory
[   53.615375][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.619485][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.628768][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.741008][ T5965] hsr_slave_0: entered promiscuous mode
[   53.743252][ T5965] hsr_slave_1: entered promiscuous mode
[   53.745831][ T5965] debugfs: 'hsr0' already exists in 'hsr'
[   53.748974][ T5965] Cannot create hsr debugfs directory
[   53.835552][ T5972] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.856815][ T5972] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.890714][ T5972] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.899913][ T5972] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   53.992544][ T5974] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.000661][ T5974] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.006405][ T5974] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.007887][ T5332] Bluetooth: hci2: command tx timeout
[   54.008815][ T5977] Bluetooth: hci3: command tx timeout
[   54.010680][ T5975] Bluetooth: hci0: command tx timeout
[   54.014303][ T5974] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.017611][ T5975] Bluetooth: hci1: command tx timeout
[   54.087092][ T5966] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.101865][ T5966] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.113725][ T5966] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.118899][ T5966] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.164920][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.183812][ T5965] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   54.188114][ T5965] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   54.194193][ T5965] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   54.200126][ T5965] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   54.255200][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.259579][ T5972] 8021q: adding VLAN 0 to HW filter on device team0
[   54.281581][   T72] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.284075][   T72] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.300380][   T72] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.302584][   T72] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.311845][ T5974] 8021q: adding VLAN 0 to HW filter on device team0
[   54.322448][   T72] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.324727][   T72] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.328913][   T72] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.331306][   T72] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.362439][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.398298][ T5966] 8021q: adding VLAN 0 to HW filter on device team0
[   54.409112][   T94] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.411385][   T94] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.417888][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.426332][   T94] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.428608][   T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.450424][   T40] audit: type=1400 audit(1756008464.259:89): avc:  denied  { sys_module } for  pid=5974 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   54.459657][ T5965] 8021q: adding VLAN 0 to HW filter on device team0
[   54.472679][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.475034][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.488945][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.491221][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.532653][ T5965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.570023][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.580141][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.616864][ T5974] veth0_vlan: entered promiscuous mode
[   54.629858][ T5974] veth1_vlan: entered promiscuous mode
[   54.646895][ T5972] veth0_vlan: entered promiscuous mode
[   54.675385][ T5972] veth1_vlan: entered promiscuous mode
[   54.683868][ T5974] veth0_macvtap: entered promiscuous mode
[   54.691393][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.694843][ T5974] veth1_macvtap: entered promiscuous mode
[   54.703145][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.723482][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.739378][ T5972] veth0_macvtap: entered promiscuous mode
[   54.743561][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.751221][ T5972] veth1_macvtap: entered promiscuous mode
[   54.762475][ T1207] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.765544][ T1207] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.776292][ T1207] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.779473][ T1207] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.790677][ T5966] veth0_vlan: entered promiscuous mode
[   54.807787][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.823066][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.826264][ T5965] veth0_vlan: entered promiscuous mode
[   54.828683][ T5966] veth1_vlan: entered promiscuous mode
[   54.847749][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.866524][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.870010][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.874749][ T5965] veth1_vlan: entered promiscuous mode
[   54.879462][ T1207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.882851][ T1207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.884858][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.920915][ T5966] veth0_macvtap: entered promiscuous mode
[   54.930931][ T5966] veth1_macvtap: entered promiscuous mode
[   54.938281][   T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.940767][   T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.959067][ T5965] veth0_macvtap: entered promiscuous mode
[   54.963835][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.972470][ T5974] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   54.985863][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.989384][ T5965] veth1_macvtap: entered promiscuous mode
[   54.998757][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.002013][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.007935][ T1155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.011685][ T1155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.019691][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.029573][ T1155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.042809][ T1155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.051052][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.078036][ T1155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.078072][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.078093][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.078195][ T1155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.084676][ T1155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.084736][ T1155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.090283][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.094914][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.135218][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.135233][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.183231][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.185866][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.215190][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.219691][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.283804][ T6070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5'.
[   55.327502][ T6081] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   55.399264][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   55.408499][ T6091] fuse: Bad value for 'fd'
[   55.441906][ T6093] Zero length message leads to an empty skb
[   56.087568][ T5975] Bluetooth: hci2: command tx timeout
[   56.087591][ T5977] Bluetooth: hci1: command tx timeout
[   56.089607][ T5975] Bluetooth: hci0: command tx timeout
[   56.098634][ T5975] Bluetooth: hci3: command tx timeout
[   56.189915][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'.
[   56.204927][ T6117] Bluetooth: MGMT ver 1.23
[   56.231382][ T6117] netfs: Couldn't get user pages (rc=-14)
[   56.304837][ T6125] netlink: 'syz.2.19': attribute type 29 has an invalid length.
[   56.307525][ T6125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19'.
[   56.429989][ T6139] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1
[   56.460902][ T6143] fuse: Unknown parameter '�d'
[   56.468176][ T6052] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   56.522021][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'.
[   56.618757][ T6099] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   56.621440][ T6099] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   56.628225][ T6052] usb 5-1: Using ep0 maxpacket: 8
[   56.632878][ T6052] usb 5-1: config 0 interface 0 has no altsetting 0
[   56.635271][ T6052] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   56.640316][ T6052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.650661][ T6052] usb 5-1: config 0 descriptor??
[   56.651809][ T6099] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   56.655875][ T6099] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   56.667141][ T6099] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   56.670133][ T6099] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   56.676284][ T6099] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   56.678613][ T6099] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   56.699606][   T40] kauditd_printk_skb: 85 callbacks suppressed
[   56.699660][   T40] audit: type=1400 audit(1756008466.519:175): avc:  denied  { ioctl } for  pid=6174 comm="syz.3.30" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   56.792128][ T5977] Bluetooth: hci4: sending frame failed (-49)
[   56.794630][ T5975] Bluetooth: hci4: Opcode 0x1003 failed: -49
[   56.841041][   T40] audit: type=1400 audit(1756008466.649:176): avc:  denied  { read } for  pid=6182 comm="syz.1.32" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   56.851195][   T40] audit: type=1400 audit(1756008466.649:177): avc:  denied  { open } for  pid=6182 comm="syz.1.32" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   56.861025][   T40] audit: type=1400 audit(1756008466.649:178): avc:  denied  { ioctl } for  pid=6182 comm="syz.1.32" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   56.867554][ T6120] netlink: 'syz.0.17': attribute type 1 has an invalid length.
[   56.957704][   T40] audit: type=1400 audit(1756008466.759:179): avc:  denied  { unlink } for  pid=6189 comm="syz.2.34" name="#1" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   56.965800][ T6190] tipc: Started in network mode
[   56.967090][   T40] audit: type=1400 audit(1756008466.769:180): avc:  denied  { mount } for  pid=6189 comm="syz.2.34" name="/" dev="overlay" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   56.969005][ T6190] tipc: Node identity , cluster identity 4711
[   56.979185][ T6190] tipc: Failed to set node id, please configure manually
[   56.981544][ T6190] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   56.988675][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'.
[   57.064340][ T6195] capability: warning: `syz.2.35' uses 32-bit capabilities (legacy support in use)
[   57.083332][ T6052] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[   57.134095][   T40] audit: type=1400 audit(1756008466.939:181): avc:  denied  { read } for  pid=6201 comm="syz.1.38" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   57.136271][ T6202] binder: 6201:6202 unknown command 0
[   57.143001][   T40] audit: type=1400 audit(1756008466.939:182): avc:  denied  { open } for  pid=6201 comm="syz.1.38" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   57.143667][ T6202] binder: 6201:6202 ioctl c0306201 200000000080 returned -22
[   57.159133][   T40] audit: type=1400 audit(1756008466.939:183): avc:  denied  { ioctl } for  pid=6201 comm="syz.1.38" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   57.169019][   T40] audit: type=1400 audit(1756008466.939:184): avc:  denied  { set_context_mgr } for  pid=6201 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   57.237013][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'.
[   57.242197][ T6210] team0: No ports can be present during mode change
[   57.284884][   T60] usb 5-1: USB disconnect, device number 2
[   57.385275][ T6224] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[   57.389084][ T6224] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[   57.586036][ T6237] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003
[   57.624724][ T6239] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET)
[   57.863158][ T6260] cgroup2: Unknown parameter 'euid'
[   57.892423][ T6262] netlink: 696 bytes leftover after parsing attributes in process `syz.3.57'.
[   58.059556][ T6272] netlink: 14 bytes leftover after parsing attributes in process `syz.3.60'.
[   58.123167][ T6272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.128618][ T6272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.133503][ T6272] bond0 (unregistering): Released all slaves
[   58.247783][ T6281] =======================================================
[   58.247783][ T6281] WARNING: The mand mount option has been deprecated and
[   58.247783][ T6281]          and is ignored by this kernel. Remove the mand
[   58.247783][ T6281]          option from the mount to silence this warning.
[   58.247783][ T6281] =======================================================
[   58.269998][ T6285] netlink: 'syz.3.62': attribute type 1 has an invalid length.
[   58.344401][ T6291] warning: `syz.0.67' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.355223][ T6291] autofs: Unknown parameter '…hÍÄBýE�E'
[   58.369780][ T6291] random: crng reseeded on system resumption
[   58.419694][ T6296] dlm: Unknown command passed to DLM device : 255
[   58.419694][ T6296] 
[   58.426614][ T6296] netlink: 'syz.2.70': attribute type 10 has an invalid length.
[   58.439648][ T6296] team0: Port device netdevsim0 added
[   58.447774][ T6298] tmpfs: Bad value for 'mpol'
[   58.570808][ T6306] geneve2: entered promiscuous mode
[   58.572528][ T6306] geneve2: entered allmulticast mode
[   58.574648][ T1155] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   58.578389][ T1155] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   58.581369][ T1155] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   58.584319][ T1155] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   58.650875][ T6312] sctp: [Deprecated]: syz.2.74 (pid 6312) Use of int in max_burst socket option deprecated.
[   58.650875][ T6312] Use struct sctp_assoc_value instead
[   59.069947][ T6339] fuse: Bad value for 'user_id'
[   59.071694][ T6339] fuse: Bad value for 'user_id'
[   59.109374][ T6341] overlay: Bad value for 'xino'
[   59.248124][ T6350] ieee802154 phy0 wpan0: encryption failed: -22
[   59.405875][ T6355] overlayfs: workdir and upperdir must reside under the same mount
[   59.641649][ T6384] fuse: Unknown parameter 'ÿ0x000000000000000a'
[   59.653520][ T6386] Bluetooth: hci4: Frame reassembly failed (-84)
[   59.656513][ T1207] Bluetooth: hci4: Frame reassembly failed (-84)
[   59.821109][ T6398] tmpfs: Bad value for 'huge'
[   59.823769][ T6398] tmpfs: Bad value for 'huge'
[   59.826457][ T6398] tmpfs: Bad value for 'huge'
[   59.833986][ T6398] tmpfs: Bad value for 'huge'
[   59.838125][ T6398] tmpfs: Bad value for 'huge'
[   59.840790][ T6398] tmpfs: Bad value for 'huge'
[   59.930482][ T6406] sg_write: data in/out 10438218/1 bytes for SCSI command 0x6b-- guessing data in;
[   59.930482][ T6406]    program syz.3.101 not setting count and/or reply_len properly
[   60.035044][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'.
[   60.153779][ T6413] process 'syz.3.103' launched './file0' with NULL argv: empty string added
[   60.200339][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.204383][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.387203][ T6421] __nla_validate_parse: 2 callbacks suppressed
[   60.387220][ T6421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.106'.
[   60.514449][ T6426] kvm: user requested TSC rate below hardware speed
[   60.728024][ T6429] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.734808][ T6429] bond0: (slave rose0): Enslaving as an active interface with an up link
[   60.742554][ T6431] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   61.137584][ T1027] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   61.295584][ T1027] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   61.302731][ T1027] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   61.306318][ T1027] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   61.311283][ T1027] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   61.315656][ T1027] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   61.323243][ T1027] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.330413][ T1027] usb 8-1: config 0 descriptor??
[   61.357760][ T6467] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.115'.
[   61.475054][ T6471] SELinux: ebitmap start bit (4279173126) is not a multiple of the map unit size (64)
[   61.485008][ T6471] SELinux: failed to load policy
[   61.548988][ T6474] netlink: 36 bytes leftover after parsing attributes in process `syz.2.118'.
[   61.555969][ T6474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6474 comm=syz.2.118
[   61.697529][ T5977] Bluetooth: hci4: command 0xfc11 tx timeout
[   61.698738][ T5975] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[   61.707354][   T40] kauditd_printk_skb: 12391 callbacks suppressed
[   61.707366][   T40] audit: type=1326 audit(1756008471.509:12561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.0.92" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d518ebe9 code=0x7fc00000
[   61.719317][   T40] audit: type=1326 audit(1756008471.519:12562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.0.92" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d518ebe9 code=0x7fc00000
[   61.722170][ T6482] audit: audit_backlog=65 > audit_backlog_limit=64
[   61.729356][   T40] audit: type=1326 audit(1756008471.519:12563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.0.92" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d518ebe9 code=0x7fc00000
[   61.731735][ T6482] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64
[   61.741791][   T40] audit: type=1326 audit(1756008471.519:12564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.0.92" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d518ebe9 code=0x7fc00000
[   61.747328][ T6482] audit: backlog limit exceeded
[   61.758033][ T1027] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   61.758644][   T40] audit: type=1326 audit(1756008471.519:12565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.0.92" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d518ebe9 code=0x7fc00000
[   61.761885][ T5974] audit: audit_backlog=65 > audit_backlog_limit=64
[   61.762799][ T6482] audit: audit_backlog=65 > audit_backlog_limit=64
[   61.771845][ T1027] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   61.774169][ T1027] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   61.776451][ T1027] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   61.779010][ T1027] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   61.781239][ T1027] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   61.783520][ T1027] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   61.785815][ T1027] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   61.794771][ T1027] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   61.798420][ T1027] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[   61.807117][ T1027] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   61.811997][ T6487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6487 comm=syz.2.123
[   62.033495][  T840] usb 8-1: USB disconnect, device number 2
[   62.620938][ T1207] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.705774][ T1207] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.765995][ T6520] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   62.874725][ T1207] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.945954][ T5977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.949864][ T5977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.952804][ T5977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.958264][ T5977] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.959516][ T1207] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.962108][ T5977] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.983924][ T5975] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.988464][ T5975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.992353][ T5975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.997037][ T5975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.001963][ T5975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.022415][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'.
[   63.047437][  T840] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   63.071398][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'.
[   63.204154][ T1207] bridge_slave_1: left allmulticast mode
[   63.206728][ T1207] bridge_slave_1: left promiscuous mode
[   63.209201][  T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.210345][ T1207] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.212712][  T840] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   63.212727][  T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.214952][  T840] usb 7-1: config 0 descriptor??
[   63.232848][ T1207] bridge_slave_0: left allmulticast mode
[   63.235211][ T1207] bridge_slave_0: left promiscuous mode
[   63.237767][ T1207] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.450264][  T840] usbhid 7-1:0.0: can't add hid device: -71
[   63.454875][  T840] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[   63.463474][  T840] usb 7-1: USB disconnect, device number 2
[   63.517355][ T1207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.522027][ T1207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.526703][ T1207] bond0 (unregistering): Released all slaves
[   63.535288][ T1207] bond1 (unregistering): Released all slaves
[   63.566449][ T6561] syzkaller1: entered promiscuous mode
[   63.571731][ T6561] syzkaller1: entered allmulticast mode
[   63.724385][ T6543] chnl_net:caif_netlink_parms(): no params data found
[   63.760844][ T6573] fanotify: failed to encode fid (type=0, len=0, err=-2)
[   63.883616][ T6543] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.886724][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.891163][ T6543] bridge_slave_0: entered allmulticast mode
[   63.902908][ T6543] bridge_slave_0: entered promiscuous mode
[   63.909961][ T6543] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.912926][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.915998][ T6543] bridge_slave_1: entered allmulticast mode
[   63.921729][ T6543] bridge_slave_1: entered promiscuous mode
[   63.929698][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'.
[   63.941717][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'.
[   63.947981][  T840] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   63.971099][ T1207] hsr_slave_0: left promiscuous mode
[   63.973608][ T1207] hsr_slave_1: left promiscuous mode
[   63.975997][ T1207] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.978898][ T1207] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.982008][ T1207] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.984323][ T1207] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.005318][ T1207] veth1_macvtap: left promiscuous mode
[   64.008028][ T1207] veth0_macvtap: left promiscuous mode
[   64.010898][ T1207] veth1_vlan: left promiscuous mode
[   64.013130][ T1207] veth0_vlan: left promiscuous mode
[   64.047216][ T6592] fuse: Bad value for 'user_id'
[   64.049073][ T6592] fuse: Bad value for 'user_id'
[   64.112189][  T840] usb 7-1: Using ep0 maxpacket: 32
[   64.119861][  T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.124255][  T840] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=a8.88
[   64.131943][  T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.145210][  T840] usb 7-1: config 0 descriptor??
[   64.153856][  T840] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   64.184910][  T840] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   64.351247][ T6015] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   64.529550][ T6015] usb 5-1: Using ep0 maxpacket: 8
[   64.536503][ T6015] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   64.540157][ T6015] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   64.544252][ T6015] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   64.548780][ T6015] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   64.551992][ T6015] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   64.557495][ T6015] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   64.561094][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.646613][ T1207] team0 (unregistering): Port device team_slave_1 removed
[   64.706147][   T24] usb 7-1: USB disconnect, device number 3
[   64.706260][ T1207] team0 (unregistering): Port device team_slave_0 removed
[   64.713968][   T24] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[   64.779154][ T6594] could not open pipe file descriptor
[   64.783382][ T6015] usb 5-1: usb_control_msg returned -32
[   64.785495][ T6015] usbtmc 5-1:16.0: can't read capabilities
[   65.047443][ T5975] Bluetooth: hci2: command tx timeout
[   65.136884][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'.
[   65.176525][ T6543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.180592][ T1146] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.184565][ T1146] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.187707][ T1155] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.194992][ T6543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.230501][ T1155] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   65.293832][ T6543] team0: Port device team_slave_0 added
[   65.295560][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'.
[   65.299714][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'.
[   65.304512][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.309023][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.313309][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.316694][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.340091][ T6543] team0: Port device team_slave_1 added
[   65.418985][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.422080][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.433192][ T6543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.440038][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.443079][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.453699][ T6543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.531869][ T6543] hsr_slave_0: entered promiscuous mode
[   65.534859][ T6543] hsr_slave_1: entered promiscuous mode
[   65.539772][ T6543] debugfs: 'hsr0' already exists in 'hsr'
[   65.541975][ T6543] Cannot create hsr debugfs directory
[   65.549733][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.553106][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.658107][   T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   65.700064][ T6543] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   65.705889][ T6543] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   65.711977][ T6543] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   65.717444][ T6543] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   65.772440][ T6543] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.793146][ T6543] 8021q: adding VLAN 0 to HW filter on device team0
[   65.797540][ T6053] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   65.803010][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.805447][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.811988][   T24] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[   65.815279][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.821562][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.823863][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.827863][   T24] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   65.830635][   T24] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   65.833013][   T24] usb 7-1: Manufacturer: syz
[   65.842135][   T24] usb 7-1: config 0 descriptor??
[   65.917346][   T24] rc_core: IR keymap rc-hauppauge not found
[   65.919436][   T24] Registered IR keymap rc-empty
[   65.922843][   T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0
[   65.927136][   T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input7
[   65.947652][ T6053] usb 8-1: Using ep0 maxpacket: 32
[   65.954516][ T6053] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   65.961151][ T6053] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[   65.967086][ T6053] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   65.971709][ T6053] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.976393][ T6053] usb 8-1: Product: ė᧲펀㛰ㅠ뫉邫�뇫冯ᄘ圡먤㕢ꜿ躡ꞧ뢻�㸲刨腞圱�柪ꑫ拃육떊仸蠻穠ቾT夥�﷜ḳ온�ﮫ�ွౚ�茫絕�復휲�竟㰋㙋�뮣ो㹯쟙ベ눇�檯ᴈ⼎輗彰꫌肴誸�뗽
[   65.990057][ T6053] usb 8-1: Manufacturer: �
[   65.992198][ T6053] usb 8-1: SerialNumber: syz
[   66.022831][ T6543] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.198252][ T6543] veth0_vlan: entered promiscuous mode
[   66.203350][ T6543] veth1_vlan: entered promiscuous mode
[   66.227111][ T6543] veth0_macvtap: entered promiscuous mode
[   66.235849][ T6543] veth1_macvtap: entered promiscuous mode
[   66.242127][  T840] usb 7-1: USB disconnect, device number 4
[   66.249843][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.261806][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.270892][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.274209][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.286024][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.290239][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.336844][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.340575][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.354817][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.359786][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.412582][ T6053] usb 8-1: 0:2 : does not exist
[   66.435735][ T6053] usb 8-1: USB disconnect, device number 3
[   66.484353][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'.
[   66.487861][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   66.733004][ T6661] kvm: kvm [6660]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18
[   66.737860][ T6661] kvm: kvm [6660]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18
[   66.758630][ T6661] kvm: kvm [6660]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18
[   66.780405][ T6661] kvm: kvm [6660]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18
[   66.783684][ T6661] kvm: kvm [6660]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18
[   66.950196][   T40] kauditd_printk_skb: 7292 callbacks suppressed
[   66.950261][   T40] audit: type=1400 audit(1756008476.769:19842): avc:  denied  { bind } for  pid=6664 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   66.961209][   T40] audit: type=1400 audit(1756008476.769:19843): avc:  denied  { accept } for  pid=6664 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   66.971484][   T40] audit: type=1400 audit(1756008476.779:19844): avc:  denied  { execute } for  pid=6664 comm="syz.3.158" name="file0" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   66.980549][   T40] audit: type=1400 audit(1756008476.779:19845): avc:  denied  { execute_no_trans } for  pid=6664 comm="syz.3.158" path="/39/file0" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   66.990514][   T40] audit: type=1400 audit(1756008476.779:19846): avc:  denied  { write } for  pid=6666 comm="syz.2.159" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   67.040896][   T59] cfg80211: failed to load regulatory.db
[   67.086891][   T40] audit: type=1400 audit(1756008476.889:19847): avc:  denied  { ioctl } for  pid=6671 comm="syz.3.161" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13033 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   67.096140][   T40] audit: type=1400 audit(1756008476.899:19848): avc:  denied  { create } for  pid=6671 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   67.102670][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'.
[   67.104371][   T40] audit: type=1400 audit(1756008476.899:19849): avc:  denied  { ioctl } for  pid=6671 comm="syz.3.161" path="socket:[14729]" dev="sockfs" ino=14729 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   67.115709][   T40] audit: type=1400 audit(1756008476.899:19850): avc:  denied  { bind } for  pid=6671 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   67.123426][   T40] audit: type=1400 audit(1756008476.899:19851): avc:  denied  { setopt } for  pid=6671 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   67.137647][ T5975] Bluetooth: hci2: command tx timeout
[   67.182637][ T6053] usb 5-1: USB disconnect, device number 3
[   67.225398][ T6675] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.321579][ T6682] binder: 6681:6682 ioctl c0306201 200000000440 returned -14
[   68.173717][ T6696] trusted_key: syz.3.166 sent an empty control message without MSG_MORE.
[   68.361108][ T6712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6712 comm=syz.0.171
[   68.412525][ T6714] netlink: 'syz.3.170': attribute type 13 has an invalid length.
[   68.454722][ T6718] tmpfs: Bad value for 'mpol'
[   68.501109][ T6723] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[   68.503529][ T6723] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   68.507996][ T6723] vhci_hcd vhci_hcd.0: Device attached
[   68.512342][ T6725] vhci_hcd: connection closed
[   68.513297][ T1146] vhci_hcd: stop threads
[   68.517027][ T1146] vhci_hcd: release socket
[   68.519486][ T1146] vhci_hcd: disconnect device
[   68.563872][ T6729] netlink: 'syz.3.176': attribute type 7 has an invalid length.
[   68.566355][ T6729] netlink: 'syz.3.176': attribute type 8 has an invalid length.
[   68.867394][ T6053] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   69.002644][ T6761] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN'
[   69.017501][ T6053] usb 9-1: Using ep0 maxpacket: 8
[   69.020629][ T6053] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[   69.023247][ T6053] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   69.028754][ T6053] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   69.034814][ T6053] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   69.038909][ T6053] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.050225][ T6053] usbtmc 9-1:16.0: bulk endpoints not found
[   69.217408][ T5975] Bluetooth: hci2: command tx timeout
[   69.381893][ T6776] netlink: 'syz.2.192': attribute type 12 has an invalid length.
[   69.385597][ T6776] netlink: 120 bytes leftover after parsing attributes in process `syz.2.192'.
[   69.617739][ T6787] geneve2: entered promiscuous mode
[   69.620103][ T6787] geneve2: entered allmulticast mode
[   69.623386][ T6788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'.
[   69.653632][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[   69.656926][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[   69.660434][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[   69.663435][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[   69.666632][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[   69.670454][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[   69.898517][ T6805] tipc: Started in network mode
[   69.900218][ T6805] tipc: Node identity 4, cluster identity 4711
[   69.902244][ T6805] tipc: Node number set to 4
[   69.940710][ T6808] program syz.3.202 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.300120][ T6816] netlink: 'syz.3.205': attribute type 1 has an invalid length.
[   70.303503][ T6816] netlink: 'syz.3.205': attribute type 3 has an invalid length.
[   70.306710][ T6816] NCSI netlink: No device for ifindex 0
[   70.408402][ T6827] kvm: kvm [6824]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200000000080
[   70.495999][ T6829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.500985][ T6829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.504625][ T6829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   70.643066][ T6829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.649715][ T6829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.653705][ T6829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   70.661078][ T6842] netlink: 'syz.0.214': attribute type 1 has an invalid length.
[   70.664236][ T6842] netlink: 'syz.0.214': attribute type 2 has an invalid length.
[   70.696677][ T6844] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   70.724562][ T6829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.730658][ T6829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.733417][ T6851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.735367][ T6829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   70.801987][ T6829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.806331][ T6829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.811167][ T6829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   70.919324][   T94] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.922806][   T94] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   70.922834][   T94] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   70.929429][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.929460][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   70.929481][   T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   70.939361][ T1207] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.944933][ T1207] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   70.944961][ T1207] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   70.959168][ T1207] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.962377][ T1207] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   70.965564][ T1207] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   71.221459][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[   71.223618][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[   71.236183][ T6882] sp0: Synchronizing with TNC
[   71.288202][ T5975] Bluetooth: hci2: command tx timeout
[   71.579645][ T6912] I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2
[   71.583885][ T6912] gfs2: error -5 reading superblock
[   71.628903][ T6919] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.658855][   T53] usb 9-1: USB disconnect, device number 2
[   71.814119][ T6943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.822905][ T6944] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   71.823144][ T6929] __nla_validate_parse: 37 callbacks suppressed
[   71.823160][ T6929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.237'.
[   71.829829][ T6944] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   71.836360][ T6944] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   71.893724][ T6944] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   71.899341][ T6944] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   71.905995][ T6944] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   71.992933][   T40] kauditd_printk_skb: 130 callbacks suppressed
[   71.992945][   T40] audit: type=1400 audit(1756008481.799:19982): avc:  denied  { execute } for  pid=6953 comm="syz.4.243" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   72.007536][ T6944] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.010861][ T6944] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   72.013893][ T6944] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   72.095717][ T6944] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.099553][ T6944] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   72.102599][ T6944] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   72.159498][   T40] audit: type=1400 audit(1756008481.969:19983): avc:  denied  { name_bind } for  pid=6960 comm="syz.4.245" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   72.162840][ T6962] ptm ptm0: ldisc open failed (-12), clearing slot 0
[   72.306979][   T40] audit: type=1400 audit(1756008482.109:19984): avc:  denied  { append } for  pid=6967 comm="syz.4.247" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   72.399526][   T40] audit: type=1400 audit(1756008482.209:19985): avc:  denied  { ioctl } for  pid=6967 comm="syz.4.247" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   72.599945][   T40] audit: type=1400 audit(1756008482.409:19986): avc:  denied  { bind } for  pid=6975 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   72.608851][   T40] audit: type=1400 audit(1756008482.409:19987): avc:  denied  { name_bind } for  pid=6975 comm="syz.4.250" src=17955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   72.617706][   T40] audit: type=1400 audit(1756008482.409:19988): avc:  denied  { node_bind } for  pid=6975 comm="syz.4.250" saddr=fe80::35 src=17955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   72.626957][   T40] audit: type=1400 audit(1756008482.409:19989): avc:  denied  { name_connect } for  pid=6975 comm="syz.4.250" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   72.682626][ T1146] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.686168][ T1146] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.705002][ T6984] batman_adv: batadv0: Adding interface: gretap1
[   72.710284][ T6984] batman_adv: batadv0: Interface activated: gretap1
[   72.714557][ T1146] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.718942][ T1146] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.752016][   T40] audit: type=1400 audit(1756008482.559:19990): avc:  denied  { getopt } for  pid=6992 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   72.759750][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'.
[   72.765124][ T6995] IPVS: Error joining to the multicast group
[   72.806968][   T40] audit: type=1400 audit(1756008482.609:19991): avc:  denied  { bind } for  pid=7003 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   73.031037][ T7022] overlayfs: maximum fs stacking depth exceeded
[   73.037804][  T840] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   73.097368][   T53] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   73.173514][ T7021] cgroup: fork rejected by pids controller in /syz2
[   73.197409][  T840] usb 9-1: Using ep0 maxpacket: 8
[   73.200377][  T840] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[   73.203343][  T840] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   73.206784][  T840] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   73.213393][  T840] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   73.216515][  T840] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   73.220855][  T840] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   73.223822][  T840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.268767][   T53] usb 5-1: config index 0 descriptor too short (expected 127, got 36)
[   73.271341][   T53] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   73.278136][   T53] usb 5-1: config 1 has no interfaces?
[   73.280251][   T53] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[   73.283359][   T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.434264][  T840] usb 9-1: GET_CAPABILITIES returned 0
[   73.436721][  T840] usbtmc 9-1:16.0: can't read capabilities
[   73.691138][ T7001] usbtmc 9-1:16.0: stb usb_control_msg returned -32
[   73.699992][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.704503][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.793425][ T1027] usb 5-1: USB disconnect, device number 4
[   74.580519][ T7105] pim6reg1: entered promiscuous mode
[   74.582654][ T7105] pim6reg1: entered allmulticast mode
[   74.637572][  T840] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   74.787451][  T840] usb 7-1: Using ep0 maxpacket: 8
[   74.790907][  T840] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.794539][  T840] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[   74.797917][  T840] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[   74.801423][  T840] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[   74.804862][  T840] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   74.808049][  T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.815706][  T840] hub 7-1:1.0: bad descriptor, ignoring hub
[   74.818721][  T840] hub 7-1:1.0: probe with driver hub failed with error -5
[   74.821100][  T840] cdc_wdm 7-1:1.0: skipping garbage
[   74.822830][  T840] cdc_wdm 7-1:1.0: skipping garbage
[   74.826385][  T840] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device
[   74.828428][  T840] cdc_wdm 7-1:1.0: Unknown control protocol
[   74.922216][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.925011][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   74.928186][   T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   74.938197][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.941657][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   74.945018][   T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   74.953245][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.956645][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   74.960444][   T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   74.968972][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.971760][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   74.974546][   T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   75.139965][ T6053] usb 7-1: USB disconnect, device number 5
[   75.459066][ T6053] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   75.617794][ T6053] usb 7-1: Using ep0 maxpacket: 8
[   75.622645][ T6053] usb 7-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config
[   75.627114][ T6053] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[   75.631258][ T6053] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   75.636719][ T6053] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[   75.640911][ T6053] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.652598][ T6053] hub 7-1:1.0: bad descriptor, ignoring hub
[   75.655367][ T6053] hub 7-1:1.0: probe with driver hub failed with error -5
[   75.659521][ T6053] cdc_wdm 7-1:1.0: skipping garbage
[   75.661956][ T6053] cdc_wdm 7-1:1.0: skipping garbage
[   75.664764][ T6053] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[   75.815337][ T6053] usb 9-1: USB disconnect, device number 3
[   75.952440][  T840] IPVS: starting estimator thread 0...
[   75.959725][   T53] usb 7-1: USB disconnect, device number 6
[   76.047801][ T7137] IPVS: using max 26 ests per chain, 62400 per kthread
[   76.248999][ T7148] GUP no longer grows the stack in syz.4.281 (7148): 200000007000-20000000a000 (200000004000)
[   76.252599][ T7148] CPU: 3 UID: 0 PID: 7148 Comm: syz.4.281 Not tainted syzkaller #0 PREEMPT(full) 
[   76.252614][ T7148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   76.252620][ T7148] Call Trace:
[   76.252625][ T7148]  <TASK>
[   76.252630][ T7148]  dump_stack_lvl+0x16c/0x1f0
[   76.252671][ T7148]  gup_vma_lookup+0x1d2/0x220
[   76.252692][ T7148]  __get_user_pages+0x243/0x34a0
[   76.252711][ T7148]  ? xsk_setsockopt+0x6db/0x9a0
[   76.252726][ T7148]  ? do_sock_setsockopt+0xf3/0x1d0
[   76.252746][ T7148]  ? __sys_setsockopt+0x1a0/0x230
[   76.252755][ T7148]  ? __x64_sys_setsockopt+0xbd/0x160
[   76.252766][ T7148]  ? __pfx___get_user_pages+0x10/0x10
[   76.252784][ T7148]  __gup_longterm_locked+0x2dd/0x17e0
[   76.252799][ T7148]  ? __lock_acquire+0xac0/0x1ce0
[   76.252819][ T7148]  ? __pfx___gup_longterm_locked+0x10/0x10
[   76.252841][ T7148]  pin_user_pages+0x13c/0x160
[   76.252856][ T7148]  ? __pfx_pin_user_pages+0x10/0x10
[   76.252872][ T7148]  ? xdp_umem_create+0x652/0x1270
[   76.252891][ T7148]  xdp_umem_create+0x73c/0x1270
[   76.252912][ T7148]  xsk_setsockopt+0x6db/0x9a0
[   76.252928][ T7148]  ? __pfx_xsk_setsockopt+0x10/0x10
[   76.252944][ T7148]  ? find_held_lock+0x2b/0x80
[   76.252959][ T7148]  ? selinux_socket_setsockopt+0x6a/0x80
[   76.252974][ T7148]  ? __pfx_xsk_setsockopt+0x10/0x10
[   76.252991][ T7148]  do_sock_setsockopt+0xf3/0x1d0
[   76.253006][ T7148]  __sys_setsockopt+0x1a0/0x230
[   76.253019][ T7148]  __x64_sys_setsockopt+0xbd/0x160
[   76.253029][ T7148]  ? do_syscall_64+0x91/0x4c0
[   76.253041][ T7148]  ? lockdep_hardirqs_on+0x7c/0x110
[   76.253058][ T7148]  do_syscall_64+0xcd/0x4c0
[   76.253071][ T7148]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.253083][ T7148] RIP: 0033:0x7fcbf678ebe9
[   76.253092][ T7148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.253102][ T7148] RSP: 002b:00007fcbf76cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   76.253119][ T7148] RAX: ffffffffffffffda RBX: 00007fcbf69b5fa0 RCX: 00007fcbf678ebe9
[   76.253125][ T7148] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003
[   76.253132][ T7148] RBP: 00007fcbf6811e19 R08: 0000000000000020 R09: 0000000000000000
[   76.253138][ T7148] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[   76.253144][ T7148] R13: 00007fcbf69b6038 R14: 00007fcbf69b5fa0 R15: 00007ffe5657ca78
[   76.253157][ T7148]  </TASK>
[   76.581934][ T7166] netlink: 256 bytes leftover after parsing attributes in process `syz.2.287'.
[   76.590957][ T7165] loop6: detected capacity change from 0 to 7
[   76.605503][ T7165] Dev loop6: unable to read RDB block 7
[   76.608752][ T7165]  loop6: unable to read partition table
[   76.611292][ T7165] loop6: partition table beyond EOD, truncated
[   76.614035][ T7165] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œ²Ü%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[   76.704463][ T7174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.289'.
[   76.774367][ T7183] netlink: 'syz.0.292': attribute type 4 has an invalid length.
[   76.798275][ T7183] netlink: 'syz.0.292': attribute type 4 has an invalid length.
[   76.879082][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[   76.882302][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[   76.885616][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[   76.889095][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[   76.892210][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[   76.896208][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[   76.898459][ T7191] futex_wake_op: syz.0.293 tries to shift op by 32; fix this program
[   76.901192][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[   76.905644][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[   76.910034][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[   76.913885][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[   77.110708][ T7206] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002
[   77.158805][   T40] kauditd_printk_skb: 22 callbacks suppressed
[   77.158821][   T40] audit: type=1400 audit(1756008486.969:20014): avc:  denied  { unmount } for  pid=5966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   77.273636][ T7215] ALSA: mixer_oss: invalid index 100000
[   77.334637][ T7220] overlay: Bad value for 'workdir'
[   77.490926][ T7242] netlink: 'syz.4.305': attribute type 4 has an invalid length.
[   77.501549][ T7243] netlink: 'syz.4.305': attribute type 4 has an invalid length.
[   77.506840][ T7242] netlink: 'syz.4.305': attribute type 4 has an invalid length.
[   77.626714][   T40] audit: type=1400 audit(1756008487.429:20015): avc:  denied  { ioctl } for  pid=7265 comm="syz.2.311" path="socket:[18520]" dev="sockfs" ino=18520 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   77.629144][ T7267] syzkaller1: entered promiscuous mode
[   77.637067][ T7267] syzkaller1: entered allmulticast mode
[   77.642239][   T40] audit: type=1400 audit(1756008487.459:20016): avc:  denied  { map } for  pid=7265 comm="syz.2.311" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   77.657026][   T40] audit: type=1400 audit(1756008487.459:20017): avc:  denied  { execute } for  pid=7265 comm="syz.2.311" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   77.825724][   T40] audit: type=1400 audit(1756008487.629:20018): avc:  denied  { read write } for  pid=7279 comm="syz.2.315" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   77.835474][   T40] audit: type=1400 audit(1756008487.629:20019): avc:  denied  { open } for  pid=7279 comm="syz.2.315" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   77.975170][ T7306] SELinux:  policydb magic number 0x10 does not match expected magic number 0xf97cff8c
[   77.977350][   T40] audit: type=1400 audit(1756008487.779:20020): avc:  denied  { load_policy } for  pid=7305 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   77.987393][ T7306] SELinux: failed to load policy
[   78.206280][   T40] audit: type=1400 audit(1756008488.009:20021): avc:  denied  { create } for  pid=7332 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   78.210272][ T7333] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   78.213938][   T40] audit: type=1400 audit(1756008488.019:20022): avc:  denied  { ioctl } for  pid=7332 comm="syz.2.329" path="socket:[18145]" dev="sockfs" ino=18145 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   78.237130][   T40] audit: type=1400 audit(1756008488.039:20023): avc:  denied  { unmount } for  pid=6543 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   78.275969][ T7337] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[   78.278030][ T7337] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   78.281645][ T7337] vhci_hcd vhci_hcd.0: Device attached
[   78.287856][ T7337] vhci_hcd vhci_hcd.0: port 0 already used
[   78.328900][ T7338] vhci_hcd: connection closed
[   78.330515][ T1207] vhci_hcd: stop threads
[   78.333516][ T1207] vhci_hcd: release socket
[   78.335044][ T1207] vhci_hcd: disconnect device
[   78.337068][ T7343] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[   78.389298][ T7348] capability: warning: `syz.4.333' uses deprecated v2 capabilities in a way that may be insecure
[   78.398840][ T7348] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   78.403694][ T7348] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   78.522310][ T7354] input: syz0 as /devices/virtual/input/input8
[   78.525060][ T7354] input: failed to attach handler leds to device input8, error: -6
[   78.539244][ T7354] syz.4.334 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   78.913283][ T7360] binder: 7357:7360 ioctl c0306201 2000000003c0 returned -14
[   78.925977][ T7360] smb3: Unknown parameter 'rdmanderfs/custom0'
[   78.939751][ T7356] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   79.003622][ T7365] Bluetooth: hci0: Opcode 0x080f failed: -22
[   79.276764][ T7331] orangefs_mount: mount request failed with -4
[   79.286137][ T7367] veth1_vlan: left promiscuous mode
[   79.319070][ T7378] netlink: 'syz.0.342': attribute type 2 has an invalid length.
[   79.377740][ T7385] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   79.829656][ T7412] dlm: no locking on control device
[   79.900469][ T7424] sch_tbf: peakrate 14 is lower than or equals to rate 19064 !
[   79.988090][ T7431] netlink: 'syz.4.359': attribute type 1 has an invalid length.
[   79.991100][ T7431] netlink: 'syz.4.359': attribute type 2 has an invalid length.
[   79.994548][ T7431] netlink: 'syz.4.359': attribute type 1 has an invalid length.
[   80.090489][ T7442] fuse: Unknown parameter '¨²Ê0x0000000000000006'
[   80.093511][ T7442] fuse: Unknown parameter 'rotmode'
[   80.217447][   T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   80.377746][   T34] usb 8-1: Using ep0 maxpacket: 8
[   80.382296][   T34] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[   80.386037][   T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   80.389967][   T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   80.394010][   T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   80.398477][   T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   80.403950][   T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   80.408307][   T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.618212][   T34] usb 8-1: usb_control_msg returned -32
[   80.620218][   T34] usbtmc 8-1:16.0: can't read capabilities
[   80.822937][ T7485] netlink: 'syz.2.374': attribute type 21 has an invalid length.
[   80.899825][ T7487] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   80.925521][ T7497] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   80.930160][ T7497] qnx4: unable to read the superblock
[   81.015140][ T7509] No control pipe specified
[   81.057361][ T5975] Bluetooth: hci0: command tx timeout
[   81.062681][ T7512] Driver unsupported XDP return value 0 on prog  (id 44) dev N/A, expect packet loss!
[   81.119619][ T7512] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0)
[   81.154224][ T7517] block nbd0: Attempted send on invalid socket
[   81.156450][ T7517] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.162314][ T7517] hpfs: hpfs_map_sector(): read error
[   81.198363][ T7526] SELinux: security_context_str_to_sid (sy‡adm_u) failed with errno=-22
[   81.213287][ T7526] block nbd2: Attempted send on invalid socket
[   81.215868][ T7526] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   81.219532][ T7526] befs: (nbd2): unable to read superblock
[   81.286808][ T7532] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.291319][ T7532] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.301631][ T7533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=7533 comm=syz.0.388
[   81.358171][ T7541] usbtmc 8-1:16.0: usb_control_msg returned -71
[   81.403063][ T7532] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.406579][ T7532] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.496190][ T7532] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.501329][ T7532] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.561269][ T6052] usb 8-1: USB disconnect, device number 4
[   81.609159][ T7532] team0: Port device netdevsim0 removed
[   81.613931][ T7532] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.620267][ T7532] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.761311][   T72] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.764054][   T72] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.772866][   T72] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.776278][   T72] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.786979][   T72] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.792035][   T72] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.804205][   T72] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.808667][   T72] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.868830][ T7555] 9pnet_virtio: no channels available for device syz
[   81.887349][ T1027] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   81.996532][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.005394][ T7558] __nla_validate_parse: 152 callbacks suppressed
[   82.005406][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'.
[   82.037427][ T1027] usb 9-1: Using ep0 maxpacket: 16
[   82.040328][ T1027] usb 9-1: too many configurations: 85, using maximum allowed: 8
[   82.045360][ T1027] usb 9-1: unable to read config index 0 descriptor/start: -61
[   82.049335][ T1027] usb 9-1: can't read configurations, error -61
[   82.068046][ T7568] gfs2: Unknown parameter 'Ö³·ê†£°8ÁÀ¶tÝ\téM6äÅ8À­ÅýUÄ$€BªŽpúpŠÝ
[   82.068046][ T7568] ýTÈÚa�½ŽDÉ'-:z£’½t€ôï/4Ô6”Iú—Ö Uv8âk‘@
[   82.068046][ T7568] ¤Úr8øÐ[tF'
[   82.113281][ T7573] netlink: 36 bytes leftover after parsing attributes in process `syz.0.402'.
[   82.155942][ T7577] netlink: 32 bytes leftover after parsing attributes in process `syz.2.404'.
[   82.167944][   T40] kauditd_printk_skb: 54 callbacks suppressed
[   82.167956][   T40] audit: type=1400 audit(1756008491.979:20078): avc:  denied  { write } for  pid=7580 comm="syz.0.405" name="file0" dev="tmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   82.184322][   T40] audit: type=1400 audit(1756008491.979:20079): avc:  denied  { open } for  pid=7580 comm="syz.0.405" path="/102/file0" dev="tmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   82.187645][ T1027] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[   82.197832][   T40] audit: type=1400 audit(1756008491.979:20080): avc:  denied  { ioctl } for  pid=7580 comm="syz.0.405" path="/102/file0" dev="tmpfs" ino=544 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   82.210414][ T7588] netlink: 256 bytes leftover after parsing attributes in process `syz.0.408'.
[   82.213800][ T7588] unsupported nlmsg_type 40
[   82.216879][ T7588] netlink: 256 bytes leftover after parsing attributes in process `syz.0.408'.
[   82.218446][   T40] audit: type=1400 audit(1756008492.019:20081): avc:  denied  { map } for  pid=7585 comm="syz.0.408" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   82.222010][ T7588] netlink: 256 bytes leftover after parsing attributes in process `syz.0.408'.
[   82.228210][   T40] audit: type=1400 audit(1756008492.019:20082): avc:  denied  { execute } for  pid=7585 comm="syz.0.408" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   82.231744][ T7588] netlink: 256 bytes leftover after parsing attributes in process `syz.0.408'.
[   82.243951][ T7588] netlink: 256 bytes leftover after parsing attributes in process `syz.0.408'.
[   82.249379][ T7588] netlink: 256 bytes leftover after parsing attributes in process `syz.0.408'.
[   82.254070][ T7588] netlink: 256 bytes leftover after parsing attributes in process `syz.0.408'.
[   82.293767][ T7591] validate_nla: 2 callbacks suppressed
[   82.293782][ T7591] netlink: 'syz.2.409': attribute type 2 has an invalid length.
[   82.367746][ T1027] usb 9-1: Using ep0 maxpacket: 16
[   82.370898][ T1027] usb 9-1: too many configurations: 85, using maximum allowed: 8
[   82.372757][ T7593] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[   82.375594][ T1027] usb 9-1: unable to read config index 0 descriptor/start: -61
[   82.381295][ T1027] usb 9-1: can't read configurations, error -61
[   82.384379][ T1027] usb usb9-port1: attempt power cycle
[   82.447482][   T53] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   82.486868][   T40] audit: type=1400 audit(1756008492.289:20083): avc:  denied  { mounton } for  pid=7595 comm="syz.0.411" path="/105/file0" dev="tmpfs" ino=561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   82.557510][  T839] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   82.619087][   T53] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[   82.621840][   T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.626083][   T53] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   82.629292][   T53] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   82.631826][   T53] usb 8-1: Manufacturer: syz
[   82.635128][   T53] usb 8-1: config 0 descriptor??
[   82.697365][   T53] rc_core: IR keymap rc-hauppauge not found
[   82.699464][   T53] Registered IR keymap rc-empty
[   82.701609][   T53] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0
[   82.706134][   T53] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input9
[   82.718505][  T839] usb 7-1: Using ep0 maxpacket: 8
[   82.722751][  T839] usb 7-1: config 2 interface 0 has no altsetting 0
[   82.728653][  T839] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[   82.733082][  T839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.736578][  T839] usb 7-1: Product: syz
[   82.738927][ T1027] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[   82.742318][  T839] usb 7-1: Manufacturer: syz
[   82.744412][  T839] usb 7-1: SerialNumber: syz
[   82.758341][ T1027] usb 9-1: Using ep0 maxpacket: 16
[   82.762534][ T1027] usb 9-1: too many configurations: 85, using maximum allowed: 8
[   82.768631][ T1027] usb 9-1: unable to read config index 0 descriptor/start: -61
[   82.771957][ T1027] usb 9-1: can't read configurations, error -61
[   82.846150][   T53] usb 8-1: USB disconnect, device number 5
[   82.918506][ T1027] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[   82.947887][ T1027] usb 9-1: Using ep0 maxpacket: 16
[   82.950107][ T1027] usb 9-1: too many configurations: 85, using maximum allowed: 8
[   82.955417][ T1027] usb 9-1: unable to read config index 0 descriptor/start: -61
[   82.958179][ T1027] usb 9-1: can't read configurations, error -61
[   82.960651][  T839] usb 7-1: USB disconnect, device number 7
[   82.964877][ T1027] usb usb9-port1: unable to enumerate USB device
[   83.478601][   T40] audit: type=1400 audit(1756008493.289:20084): avc:  denied  { mount } for  pid=7610 comm="syz.3.415" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   83.486846][   T40] audit: type=1400 audit(1756008493.289:20085): avc:  denied  { mounton } for  pid=7610 comm="syz.3.415" path="/77/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[   83.508047][   T40] audit: type=1400 audit(1756008493.309:20086): avc:  denied  { mount } for  pid=7614 comm="syz.2.417" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   83.516014][   T40] audit: type=1400 audit(1756008493.319:20087): avc:  denied  { unmount } for  pid=7614 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   83.627779][   T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   83.797491][   T34] usb 5-1: Using ep0 maxpacket: 8
[   83.801634][   T34] usb 5-1: config 1 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 249, changing to 11
[   83.805595][   T34] usb 5-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 8
[   83.810246][   T34] usb 5-1: config 1 interface 0 altsetting 14 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   83.815806][   T34] usb 5-1: config 1 interface 0 has no altsetting 0
[   83.817432][ T5976] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   83.821634][   T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   83.825731][   T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.829272][   T34] usb 5-1: Product: 婷倗퓽腄빰ￖ蜘�ꪊ�פֿ�蓇푅Վ�鳳昜Ḵߎꡪ昊䲡⾲✾ᦠ஽�ꠅಥ躿�춞풢�뼎뫀⻾Ⴎ蛘販�Ꞅ៓쿀ꀶ�㚮뜷〆蚭왭췓紊�뒥ꘖ�㋣ￜ���鄗ㅼ蟓��櫓ሄⱗ銱
[   83.837496][   T34] usb 5-1: Manufacturer: 䀊
[   83.839424][   T34] usb 5-1: SerialNumber: �
[   83.844893][ T7608] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   83.847488][ T7608] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   83.967369][ T5976] usb 8-1: Using ep0 maxpacket: 16
[   83.971492][ T5976] usb 8-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[   83.975552][ T5976] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[   83.978841][ T5976] usb 8-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   83.982796][ T5976] usb 8-1: config 1 interface 0 has no altsetting 0
[   83.988557][ T5976] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   83.991867][ T5976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.994940][ T5976] usb 8-1: Product: syz
[   83.996656][ T5976] usb 8-1: Manufacturer: syz
[   83.999499][ T5976] usb 8-1: SerialNumber: syz
[   84.055208][   T34] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[   84.114113][ T7632] (syz.2.423,7632,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[   84.119169][ T7631] (syz.2.423,7631,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[   84.207706][ T5976] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[   84.219256][   T53] usb 8-1: USB disconnect, device number 6
[   84.235783][   T53] usblp0: removed
[   84.253965][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.258641][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.262445][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.265953][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.269891][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.274081][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.278085][   T34] usb 5-1: USB disconnect, device number 5
[   84.356778][ T7655] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   84.684407][ T7676] sp0: Synchronizing with TNC
[   84.961221][ T7697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=7697 comm=syz.4.438
[   85.041331][ T7695] hsr_slave_1 (unregistering): left promiscuous mode
[   85.497489][ T7712] netlink: 'syz.3.445': attribute type 13 has an invalid length.
[   85.776581][ T7717] block nbd2: Attempted send on invalid socket
[   85.780185][ T7717] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.784449][ T7717] block nbd2: Attempted send on invalid socket
[   85.788803][ T7717] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   85.792368][ T7717] Mount JFS Failure: -5
[   85.794880][ T7717] jfs_mount failed w/return code = -5
[   85.919294][ T7731] geneve2: entered allmulticast mode
[   86.097674][   T34] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   86.246814][ T7750] tipc: Started in network mode
[   86.250149][ T7750] tipc: Node identity 4, cluster identity 4711
[   86.252771][ T7750] tipc: Node number set to 4
[   86.262431][   T34] usb 5-1: config 129 has an invalid interface number: 134 but max is 3
[   86.266087][   T34] usb 5-1: config 129 has an invalid interface number: 171 but max is 3
[   86.270682][   T34] usb 5-1: config 129 has an invalid interface number: 135 but max is 3
[   86.275007][   T34] usb 5-1: config 129 has an invalid interface number: 91 but max is 3
[   86.279364][   T34] usb 5-1: config 129 has an invalid interface number: 56 but max is 3
[   86.282998][   T34] usb 5-1: config 129 contains an unexpected descriptor of type 0x2, skipping
[   86.286794][   T34] usb 5-1: config 129 has 5 interfaces, different from the descriptor's value: 4
[   86.291249][   T34] usb 5-1: config 129 has no interface number 0
[   86.293857][   T34] usb 5-1: config 129 has no interface number 1
[   86.296468][   T34] usb 5-1: config 129 has no interface number 2
[   86.299338][   T34] usb 5-1: config 129 has no interface number 3
[   86.301887][   T34] usb 5-1: config 129 has no interface number 4
[   86.304456][   T34] usb 5-1: config 129 interface 134 altsetting 0 endpoint 0xD has invalid maxpacket 2047, setting to 1024
[   86.310604][   T34] usb 5-1: config 129 interface 134 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024
[   86.315172][   T34] usb 5-1: config 129 interface 171 altsetting 4 endpoint 0xC has an invalid bInterval 0, changing to 7
[   86.319852][   T34] usb 5-1: config 129 interface 171 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[   86.325423][   T34] usb 5-1: too many endpoints for config 129 interface 135 altsetting 65: 41, using maximum allowed: 30
[   86.330360][   T34] usb 5-1: config 129 interface 135 altsetting 65 has a duplicate endpoint with address 0xC, skipping
[   86.335169][   T34] usb 5-1: config 129 interface 135 altsetting 65 endpoint 0xF has invalid maxpacket 1024, setting to 64
[   86.340158][   T34] usb 5-1: config 129 interface 135 altsetting 65 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[   86.344790][   T34] usb 5-1: config 129 interface 135 altsetting 65 has a duplicate endpoint with address 0xB, skipping
[   86.349497][   T34] usb 5-1: config 129 interface 135 altsetting 65 has an endpoint descriptor with address 0x77, changing to 0x7
[   86.354507][   T34] usb 5-1: config 129 interface 135 altsetting 65 endpoint 0x7 has an invalid bInterval 173, changing to 11
[   86.359817][   T34] usb 5-1: config 129 interface 135 altsetting 65 endpoint 0x7 has invalid maxpacket 42248, setting to 1024
[   86.364354][   T34] usb 5-1: config 129 interface 135 altsetting 65 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[   86.369065][   T34] usb 5-1: config 129 interface 135 altsetting 65 has 9 endpoint descriptors, different from the interface descriptor's value: 41
[   86.374642][   T34] usb 5-1: config 129 interface 91 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[   86.379360][   T34] usb 5-1: config 129 interface 91 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[   86.383809][   T34] usb 5-1: config 129 interface 91 altsetting 4 has a duplicate endpoint with address 0x5, skipping
[   86.388240][   T34] usb 5-1: config 129 interface 91 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[   86.392653][   T34] usb 5-1: config 129 interface 91 altsetting 4 has a duplicate endpoint with address 0x9, skipping
[   86.397156][   T34] usb 5-1: config 129 interface 91 altsetting 4 has a duplicate endpoint with address 0xD, skipping
[   86.401772][   T34] usb 5-1: config 129 interface 91 altsetting 4 has a duplicate endpoint with address 0x5, skipping
[   86.405660][   T34] usb 5-1: config 129 interface 56 altsetting 5 has a duplicate endpoint with address 0x4, skipping
[   86.410110][   T34] usb 5-1: config 129 interface 56 altsetting 5 has a duplicate endpoint with address 0x4, skipping
[   86.414479][   T34] usb 5-1: config 129 interface 56 altsetting 5 has a duplicate endpoint with address 0xF, skipping
[   86.417997][   T34] usb 5-1: config 129 interface 56 altsetting 5 has a duplicate endpoint with address 0x9, skipping
[   86.421787][   T34] usb 5-1: config 129 interface 56 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[   86.426171][   T34] usb 5-1: config 129 interface 56 altsetting 5 has a duplicate endpoint with address 0x4, skipping
[   86.430933][   T34] usb 5-1: config 129 interface 56 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[   86.435615][   T34] usb 5-1: config 129 interface 56 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[   86.440170][   T34] usb 5-1: config 129 interface 56 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[   86.444689][   T34] usb 5-1: config 129 interface 171 has no altsetting 0
[   86.447818][   T34] usb 5-1: config 129 interface 135 has no altsetting 0
[   86.450658][   T34] usb 5-1: config 129 interface 91 has no altsetting 0
[   86.453530][   T34] usb 5-1: config 129 interface 56 has no altsetting 0
[   86.455303][ T7753] netlink: 'syz.3.460': attribute type 1 has an invalid length.
[   86.459058][   T34] usb 5-1: New USB device found, idVendor=0c45, idProduct=60b0, bcdDevice=2f.21
[   86.463210][   T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.466456][   T34] usb 5-1: Product: �
[   86.469727][   T34] usb 5-1: Manufacturer: Т
[   86.471689][   T34] usb 5-1: SerialNumber: Dž䒢筩塢ﶯ幱�媵�펺����杖ꩌ⚀ỽﱦ鎺얅
[   86.479836][ T7727] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   86.718646][   T34] usb-storage 5-1:129.91: USB Mass Storage device detected
[   86.799882][   T34] usb 5-1: USB disconnect, device number 6
[   87.007428][  T839] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   87.096431][ T7798] __nla_validate_parse: 39 callbacks suppressed
[   87.096443][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'.
[   87.159072][  T839] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   87.162991][  T839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   87.166548][  T839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   87.169899][  T839] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   87.173924][  T839] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   87.176945][  T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.182432][  T839] usb 7-1: config 0 descriptor??
[   87.231189][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.234003][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.239359][   T40] kauditd_printk_skb: 87 callbacks suppressed
[   87.239369][   T40] audit: type=1400 audit(1756008497.057:20175): avc:  denied  { read } for  pid=7811 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   87.251530][   T40] audit: type=1400 audit(1756008497.057:20176): avc:  denied  { ioctl } for  pid=7811 comm="syz.0.469" path="socket:[22083]" dev="sockfs" ino=22083 ioctlcmd=0x5600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   87.279126][   T40] audit: type=1400 audit(1756008497.097:20177): avc:  denied  { read write } for  pid=7814 comm="syz.0.470" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   87.281967][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'.
[   87.286882][   T40] audit: type=1400 audit(1756008497.097:20178): avc:  denied  { open } for  pid=7814 comm="syz.0.470" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   87.298325][   T40] audit: type=1400 audit(1756008497.097:20179): avc:  denied  { map } for  pid=7814 comm="syz.0.470" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   87.300238][ T1155] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.305818][   T40] audit: type=1400 audit(1756008497.117:20180): avc:  denied  { ioctl } for  pid=7814 comm="syz.0.470" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   87.306044][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'.
[   87.306059][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'.
[   87.308928][ T1155] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.308966][ T1155] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.333298][ T1155] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.355954][   T40] audit: type=1400 audit(1756008497.167:20181): avc:  denied  { write } for  pid=7821 comm="syz.0.471" lport=217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   87.405527][  T839] usbhid 7-1:0.0: can't add hid device: -71
[   87.405589][  T839] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[   87.408671][  T839] usb 7-1: USB disconnect, device number 8
[   87.467428][   T59] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[   87.493571][   T40] audit: type=1400 audit(1756008497.297:20182): avc:  denied  { read write } for  pid=7839 comm="syz.3.475" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   87.507038][   T40] audit: type=1400 audit(1756008497.297:20183): avc:  denied  { open } for  pid=7839 comm="syz.3.475" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   87.514864][   T40] audit: type=1400 audit(1756008497.307:20184): avc:  denied  { ioctl } for  pid=7839 comm="syz.3.475" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   87.617887][   T59] usb 9-1: Using ep0 maxpacket: 32
[   87.622182][   T59] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[   87.625001][   T59] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   87.630153][   T59] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[   87.633035][   T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   87.636104][   T59] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   87.640008][   T59] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   87.644714][   T59] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   87.648056][   T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.652795][   T59] usb 9-1: config 0 descriptor??
[   87.807681][ T6052] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   87.856967][   T59] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   87.958614][ T6052] usb 8-1: config index 0 descriptor too short (expected 39, got 27)
[   87.961337][ T6052] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   87.964475][ T6052] usb 8-1: config 0 interface 0 has no altsetting 0
[   87.968824][ T6052] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   87.971779][ T6052] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   87.973956][ T7467] usb 9-1: USB disconnect, device number 8
[   87.974420][ T6052] usb 8-1: Product: syz
[   87.978467][ T7467] usblp0: removed
[   87.979893][ T6052] usb 8-1: Manufacturer: syz
[   87.981407][ T6052] usb 8-1: SerialNumber: syz
[   87.987525][ T6052] usb 8-1: config 0 descriptor??
[   87.991951][ T6052] hub 8-1:0.0: bad descriptor, ignoring hub
[   87.993908][ T6052] hub 8-1:0.0: probe with driver hub failed with error -5
[   87.999889][ T6052] usb 8-1: selecting invalid altsetting 0
[   88.138099][ T7891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23359 sclass=netlink_route_socket pid=7891 comm=syz.4.490
[   88.144833][   T59] IPv4: Oversized IP packet from 127.0.0.1
[   88.147910][    C2] IPv4: Oversized IP packet from 127.0.0.1
[   88.150070][    C2] IPv4: Oversized IP packet from 127.0.0.1
[   88.196830][ T7895] mmap: syz.4.492 (7895) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   88.209411][ T7897] /dev/sg0: Can't lookup blockdev
[   88.271562][ T7902] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   88.280469][ T7902] CIFS mount error: No usable UNC path provided in device string!
[   88.280469][ T7902] 
[   88.284750][ T7902] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   88.297571][ T1027] usb 8-1: USB disconnect, device number 7
[   88.410565][ T7913] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   88.442655][ T7914] comedi: valid board names for 8255 driver are:
[   88.445246][ T7914]  8255
[   88.446544][ T7914] comedi: valid board names for vmk80xx driver are:
[   88.450142][ T7914]  vmk80xx
[   88.451550][ T7914] comedi: valid board names for usbduxsigma driver are:
[   88.452715][ T7916] netlink: 36 bytes leftover after parsing attributes in process `syz.4.497'.
[   88.454148][ T7914]  usbduxsigma
[   88.454173][ T7914] comedi: valid board names for usbduxfast driver are:
[   88.454179][ T7914]  usbduxfast
[   88.454183][ T7914] comedi: valid board names for usbdux driver are:
[   88.454188][ T7914]  usbdux
[   88.454192][ T7914] comedi: valid board names for ni6501 driver are:
[   88.454197][ T7914]  ni6501
[   88.469009][ T7914] comedi: valid board names for dt9812 driver are:
[   88.471703][ T7914]  dt9812
[   88.472718][ T7914] comedi: valid board names for ni_labpc_cs driver are:
[   88.475337][ T7914]  ni_labpc_cs
[   88.476659][ T7914] comedi: valid board names for ni_daq_700 driver are:
[   88.479592][ T7914]  ni_daq_700
[   88.480766][ T7914] comedi: valid board names for labpc_pci driver are:
[   88.483333][ T7914]  labpc_pci
[   88.484535][ T7914] comedi: valid board names for adl_pci9118 driver are:
[   88.487040][ T7914]  pci9118dg
[   88.488364][ T7914]  pci9118hg
[   88.489546][ T7914]  pci9118hr
[   88.490713][ T7914] comedi: valid board names for 8255_pci driver are:
[   88.493410][ T7914]  8255_pci
[   88.494610][ T7914] comedi: valid board names for s526 driver are:
[   88.496991][ T7914]  s526
[   88.498147][ T7914] comedi: valid board names for multiq3 driver are:
[   88.500722][ T7914]  multiq3
[   88.502078][ T7914] comedi: valid board names for pcmuio driver are:
[   88.504469][ T7914]  pcmuio48
[   88.505788][ T7914]  pcmuio96
[   88.507126][ T7914] comedi: valid board names for pcmmio driver are:
[   88.509696][ T7914]  pcmmio
[   88.510921][ T7914] comedi: valid board names for pcmda12 driver are:
[   88.513123][ T7914]  pcmda12
[   88.514414][ T7914] comedi: valid board names for pcmad driver are:
[   88.516877][ T7914]  pcmad12
[   88.518920][ T7914]  pcmad16
[   88.520071][ T7914] comedi: valid board names for ni_labpc driver are:
[   88.522145][ T7914]  lab-pc-1200
[   88.523252][ T7914]  lab-pc-1200ai
[   88.524353][ T7914]  lab-pc+
[   88.525415][ T7914] comedi: valid board names for atmio16 driver are:
[   88.527669][ T7914]  atmio16
[   88.528684][ T7914]  atmio16d
[   88.529989][ T7914] comedi: valid board names for ni_at_ao driver are:
[   88.532092][ T7914]  at-ao-6
[   88.533095][ T7914]  at-ao-10
[   88.534153][ T7914] comedi: valid board names for ni_at_a2150 driver are:
[   88.536367][ T7914]  ni_at_a2150
[   88.537576][ T7914] comedi: valid board names for adq12b driver are:
[   88.539607][ T7914]  adq12b
[   88.540561][ T7914] comedi: valid board names for mpc624 driver are:
[   88.542606][ T7914]  mpc624
[   88.543559][ T7914] comedi: valid board names for c6xdigio driver are:
[   88.545682][ T7914]  c6xdigio
[   88.546697][ T7914] comedi: valid board names for aio_iiro_16 driver are:
[   88.549272][ T7914]  aio_iiro_16
[   88.550412][ T7914] comedi: valid board names for aio_aio12_8 driver are:
[   88.552572][ T7914]  aio_aio12_8
[   88.553680][ T7914]  aio_ai12_8
[   88.554765][ T7914]  aio_ao12_4
[   88.555876][ T7914] comedi: valid board names for fl512 driver are:
[   88.558861][ T7914]  fl512
[   88.560060][ T7914] comedi: valid board names for dmm32at driver are:
[   88.562394][ T7914]  dmm32at
[   88.563683][ T7914] comedi: valid board names for dt282x driver are:
[   88.566301][ T7914]  dt2821
[   88.567595][ T7914]  dt2821-f
[   88.568841][ T7914]  dt2821-g
[   88.570079][ T7914]  dt2823
[   88.571240][ T7914]  dt2824-pgh
[   88.572437][ T7914]  dt2824-pgl
[   88.573522][ T7914]  dt2825
[   88.574479][ T7914]  dt2827
[   88.575665][ T7914]  dt2828
[   88.576769][ T7914]  dt2829
[   88.577997][ T7914]  dt21-ez
[   88.579179][ T7914]  dt23-ez
[   88.580257][ T7914]  dt24-ez
[   88.581249][ T7914]  dt24-ez-pgl
[   88.582318][ T7914] comedi: valid board names for dt2817 driver are:
[   88.584786][ T7914]  dt2817
[   88.585964][ T7914] comedi: valid board names for dt2815 driver are:
[   88.588591][ T7914]  dt2815
[   88.589661][ T7914] comedi: valid board names for dt2814 driver are:
[   88.591670][ T7914]  dt2814
[   88.592808][ T7914] comedi: valid board names for dt2811 driver are:
[   88.595343][ T7914]  dt2811-pgh
[   88.596544][ T7914]  dt2811-pgl
[   88.597894][ T7914] comedi: valid board names for dt2801 driver are:
[   88.600484][ T7914]  dt2801
[   88.602042][ T7914] comedi: valid board names for das6402 driver are:
[   88.605126][ T7914]  das6402-12
[   88.606684][ T7914]  das6402-16
[   88.608331][ T7914] comedi: valid board names for das1800 driver are:
[   88.610464][ T7914]  das-1701st
[   88.611530][ T7914]  das-1701st-da
[   88.612677][ T7914]  das-1702st
[   88.613930][ T7914]  das-1702st-da
[   88.615206][ T7914]  das-1702hr
[   88.616297][ T7914]  das-1702hr-da
[   88.617552][ T7914]  das-1701ao
[   88.618631][ T7914]  das-1702ao
[   88.619708][ T7914]  das-1801st
[   88.620805][ T7914]  das-1801st-da
[   88.621967][ T7914]  das-1802st
[   88.623044][ T7914]  das-1802st-da
[   88.624192][ T7914]  das-1802hr
[   88.625302][ T7914]  das-1802hr-da
[   88.626460][ T7914]  das-1801hc
[   88.627657][ T7914]  das-1802hc
[   88.628737][ T7914]  das-1801ao
[   88.629826][ T7914]  das-1802ao
[   88.630900][ T7914] comedi: valid board names for das800 driver are:
[   88.632936][ T7914]  das-800
[   88.633937][ T7914]  cio-das800
[   88.635050][ T7914]  das-801
[   88.636040][ T7914]  cio-das801
[   88.637117][ T7914]  das-802
[   88.638211][ T7914]  cio-das802
[   88.639279][ T7914]  cio-das802/16
[   88.640426][ T7914] comedi: valid board names for isa-das08 driver are:
[   88.642543][ T7914]  isa-das08
[   88.643598][ T7914]  das08-pgm
[   88.644642][ T7914]  das08-pgh
[   88.645731][ T7914]  das08-pgl
[   88.646780][ T7914]  das08-aoh
[   88.648009][ T7914]  das08-aol
[   88.649281][ T7914]  das08-aom
[   88.650402][ T7914]  das08/jr-ao
[   88.651742][ T7914]  das08jr-16-ao
[   88.653140][ T7914]  pc104-das08
[   88.654502][ T7914]  das08jr/16
[   88.655828][ T7914] comedi: valid board names for das16m1 driver are:
[   88.658807][ T7914]  das16m1
[   88.660062][ T7914] comedi: valid board names for dac02 driver are:
[   88.662603][ T7914]  dac02
[   88.663760][ T7914] comedi: valid board names for rti802 driver are:
[   88.666519][ T7914]  rti802
[   88.667841][ T7914] comedi: valid board names for rti800 driver are:
[   88.670241][ T7914]  rti800
[   88.671174][ T7914]  rti815
[   88.672123][ T7914] comedi: valid board names for pcm3724 driver are:
[   88.674382][ T7914]  pcm3724
[   88.675483][ T7914] comedi: valid board names for pcl818 driver are:
[   88.678168][ T7914]  pcl818l
[   88.680019][ T7914]  pcl818h
[   88.681119][ T7914]  pcl818hd
[   88.682165][ T7914]  pcl818hg
[   88.683179][ T7914]  pcl818
[   88.684113][ T7914]  pcl718
[   88.685093][ T7914]  pcm3718
[   88.686136][ T7914] comedi: valid board names for pcl816 driver are:
[   88.688259][ T7914]  pcl816
[   88.689219][ T7914]  pcl814b
[   88.690204][ T7914] comedi: valid board names for pcl812 driver are:
[   88.692364][ T7914]  pcl812
[   88.693346][ T7914]  pcl812pg
[   88.694409][ T7914]  acl8112pg
[   88.695512][ T7914]  acl8112dg
[   88.696573][ T7914]  acl8112hg
[   88.697729][ T7914]  a821pgl
[   88.698735][ T7914]  a821pglnda
[   88.699822][ T7914]  a821pgh
[   88.700836][ T7914]  a822pgl
[   88.701864][ T7914]  a822pgh
[   88.703032][ T7914]  a823pgl
[   88.704042][ T7914]  a823pgh
[   88.705086][ T7914]  pcl813
[   88.706067][ T7914]  pcl813b
[   88.707107][ T7914]  acl8113
[   88.708500][ T7914]  iso813
[   88.709783][ T7914]  acl8216
[   88.711283][ T7914]  a826pg
[   88.712411][ T7914] comedi: valid board names for pcl730 driver are:
[   88.714711][ T7914]  pcl730
[   88.715786][ T7914]  iso730
[   88.716763][ T7914]  acl7130
[   88.717885][ T7914]  pcm3730
[   88.718877][ T7914]  pcl725
[   88.719836][ T7914]  p8r8dio
[   88.720942][ T7914]  acl7225b
[   88.722004][ T7914]  p16r16dio
[   88.723162][ T7914]  pcl733
[   88.724162][ T7914]  pcl734
[   88.725153][ T7914]  opmm-1616-xt
[   88.726305][ T7914]  pearl-mm-p
[   88.727475][ T7914]  ir104-pbf
[   88.728492][ T7914] comedi: valid board names for pcl726 driver are:
[   88.730589][ T7914]  pcl726
[   88.731577][ T7914]  pcl727
[   88.732119][ T7923] netlink: 'syz.4.499': attribute type 1 has an invalid length.
[   88.732679][ T7914]  pcl728
[   88.732689][ T7914]  acl6126
[   88.732693][ T7914]  acl6128
[   88.732697][ T7914] comedi: valid board names for pcl724 driver are:
[   88.732705][ T7914]  pcl724
[   88.732711][ T7914]  pcl722
[   88.732717][ T7914]  pcl731
[   88.743892][ T7914]  acl7122
[   88.744907][ T7914]  acl7124
[   88.745963][ T7914]  pet48dio
[   88.747019][ T7914]  pcmio48
[   88.748105][ T7914]  onyx-mm-dio
[   88.749216][ T7914] comedi: valid board names for pcl711 driver are:
[   88.751202][ T7914]  pcl711
[   88.752112][ T7914]  pcl711b
[   88.753112][ T7914]  acl8112hg
[   88.754171][ T7914]  acl8112dg
[   88.755246][ T7914] comedi: valid board names for amplc_pc263 driver are:
[   88.757449][ T7914]  pc263
[   88.758398][ T7914] comedi: valid board names for amplc_pc236 driver are:
[   88.760604][ T7914]  pc36at
[   88.761594][ T7914] comedi: valid board names for amplc_dio200 driver are:
[   88.763793][ T7914]  pc212e
[   88.764797][ T7914]  pc214e
[   88.765828][ T7914]  pc215e
[   88.767022][ T7914]  pc218e
[   88.768323][ T7914]  pc272e
[   88.769519][ T7914] comedi: valid board names for comedi_parport driver are:
[   88.771889][ T7914]  comedi_parport
[   88.773071][ T7914] comedi: valid board names for comedi_test driver are:
[   88.775284][ T7914]  comedi_test
[   88.776383][ T7914] comedi: valid board names for comedi_bond driver are:
[   88.778657][ T7914]  comedi_bond
[   88.790438][ T7924] syz_tun: refused to change device tx_queue_len
[   88.860497][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.501'.
[   88.863785][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.501'.
[   88.906973][ T7936] netlink: 72 bytes leftover after parsing attributes in process `syz.4.503'.
[   88.948860][ T7926] /dev/sr0: Can't open blockdev
[   89.061606][ T7952] netlink: 'syz.2.508': attribute type 1 has an invalid length.
[   89.109093][ T7959] binder: 7955:7959 ioctl c0306201 200000000080 returned -22
[   89.147038][ T7964] afs: Unknown parameter 'dyn017777777777777777777770x0000000000000004'
[   89.157084][ T7964] overlayfs: overlapping lowerdir path
[   89.200759][ T7978] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI
[   89.204696][ T7978] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff]
[   89.209039][ T7978] CPU: 2 UID: 0 PID: 7978 Comm: syz.4.515 Not tainted syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   89.212997][ T7978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   89.217582][ T7978] RIP: 0010:h5_recv+0x104/0x950
[   89.219152][ T7978] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 41 b6 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00
[   89.226678][ T7978] RSP: 0018:ffffc90003a37c00 EFLAGS: 00010293
[   89.228594][ T7978] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887ad56a
[   89.231101][ T7978] RDX: ffff888038124880 RSI: ffffffff887ad5af RDI: 0000000000000005
[   89.233713][ T7978] RBP: ffffc90003a37d88 R08: 0000000000000005 R09: 0000000000000000
[   89.237061][ T7978] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[   89.239900][ T7978] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb478e0
[   89.243142][ T7978] FS:  00007fcbf76ae6c0(0000) GS:ffff8880d68b9000(0000) knlGS:0000000000000000
[   89.246463][ T7978] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   89.248625][ T7978] CR2: 00007fcbf76adf98 CR3: 0000000051ba6000 CR4: 0000000000352ef0
[   89.251481][ T7978] Call Trace:
[   89.252907][ T7978]  <TASK>
[   89.254186][ T7978]  ? __pfx_h5_recv+0x10/0x10
[   89.255807][ T7978]  hci_uart_tty_receive+0x251/0x7e0
[   89.257898][ T7978]  ? __pfx_hci_uart_tty_receive+0x10/0x10
[   89.259706][ T7978]  tty_ioctl+0x583/0x1680
[   89.261081][ T7978]  ? __pfx_tty_ioctl+0x10/0x10
[   89.262631][ T7978]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   89.265564][ T7978]  ? hook_file_ioctl_common+0x145/0x410
[   89.267771][ T7978]  ? selinux_file_ioctl+0x180/0x270
[   89.269775][ T7978]  ? selinux_file_ioctl+0xb4/0x270
[   89.272007][ T7978]  ? __pfx_tty_ioctl+0x10/0x10
[   89.273911][ T7978]  __x64_sys_ioctl+0x18e/0x210
[   89.275543][ T7978]  do_syscall_64+0xcd/0x4c0
[   89.277517][ T7978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.280290][ T7978] RIP: 0033:0x7fcbf678ebe9
[   89.282286][ T7978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.289041][ T7978] RSP: 002b:00007fcbf76ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   89.292057][ T7978] RAX: ffffffffffffffda RBX: 00007fcbf69b6090 RCX: 00007fcbf678ebe9
[   89.295423][ T7978] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 000000000000000b
[   89.298727][ T7978] RBP: 00007fcbf6811e19 R08: 0000000000000000 R09: 0000000000000000
[   89.301747][ T7978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.304940][ T7978] R13: 00007fcbf69b6128 R14: 00007fcbf69b6090 R15: 00007ffe5657ca78
[   89.307950][ T7978]  </TASK>
[   89.309257][ T7978] Modules linked in:
[   89.311562][ T7978] ---[ end trace 0000000000000000 ]---
[   89.319158][ T7978] RIP: 0010:h5_recv+0x104/0x950
[   89.321260][ T7978] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 41 b6 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00
[   89.329197][ T7978] RSP: 0018:ffffc90003a37c00 EFLAGS: 00010293
[   89.331097][ T7978] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887ad56a
[   89.333477][ T7978] RDX: ffff888038124880 RSI: ffffffff887ad5af RDI: 0000000000000005
[   89.336080][ T7978] RBP: ffffc90003a37d88 R08: 0000000000000005 R09: 0000000000000000
[   89.377332][ T7978] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[   89.380529][ T7978] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb478e0
[   89.383673][ T7978] FS:  00007fcbf76ae6c0(0000) GS:ffff8880d68b9000(0000) knlGS:0000000000000000
[   89.400196][ T7978] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   89.402715][ T7978] CR2: 00007fe61b4dc840 CR3: 0000000051ba6000 CR4: 0000000000352ef0
[   89.406106][ T7978] Kernel panic - not syncing: Fatal exception
[   89.409266][ T7978] Kernel Offset: disabled
[   89.411063][ T7978] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:08:19  Registers:
info registers vcpu 0

CPU#0
RAX=0000000080000101 RBX=ffff888059e366c0 RCX=ffffffff89a5d392 RDX=ffff888027eba440
RSI=ffffffff89a5d39c RDI=0000000000000006 RBP=ffff8880554d3b00 RSP=ffffc90000007b70
R8 =0000000000000006 R9 =000000000001c9c3 R10=0000000000000000 R11=ffffffff9b082dd0
R12=000000000001c9c3 R13=0000000000000000 R14=fffffff0a3da8872 R15=0000000000000001
RIP=ffffffff81bb8c07 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d66b9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ffef0d8ffc0 CR3=000000005603e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe234bb8e6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe234bb8e6 00007ffe234bb8ec
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8206212e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8206212e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8206212e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8206212e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8206212ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8206212fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82063874a8 00007f82063874a0 00007f8206387498 00007f8206387470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8206eed100 00007f8206387460 00007f8206387478 00007f82063874c0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82063874b8 00007f82063874b0 00007f82063874a8 00007f82063874a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dffffc0000000000 RBX=ffffffff93d7a2a8 RCX=ffffffff81c3704f RDX=1ffffffff1bebdcd
RSI=ffffffff8c162880 RDI=ffffffff8df5ee68 RBP=0000000000000001 RSP=ffffc90004997ee8
R8 =0000000000000000 R9 =fffffbfff2156972 R10=ffffffff90ab4b97 R11=0000000000000000
R12=0000000000000000 R13=0000000000000025 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81a0b171 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8206ff46c0 ffffffff 00c00000
GS =0000 ffff8880d67b9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fcbf768cf98 CR3=0000000025bc3000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe234bb760 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe234bb8e6
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe234bb8e6 00007ffe234bb8ec
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8206212e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8206212e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8206212e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8206212e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8206212ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8206212fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff85643b80 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc90003a37518
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043
R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3622266 R15=dffffc0000000000
RIP=ffffffff85643ba7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007fcbf76ae6c0 ffffffff 00c00000
GS =0000 ffff8880d68b9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fcbf76adf98 CR3=0000000051ba6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5657cf86
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5657cf86 00007ffe5657cf8c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbf6812e46
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbf6812e53
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbf6812e4d
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbf6812e61
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbf6812ee7
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbf6812fc5
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbf69874a8 00007fcbf69874a0 00007fcbf6987498 00007fcbf6987470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbf74ed100 00007fcbf6987460 00007fcbf6987478 00007fcbf69874c0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbf69874b8 00007fcbf69874b0 00007fcbf69874a8 00007fcbf69874a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000042 RCX=ffffffff820737ed RDX=ffff8880281c8000
RSI=0000000000000200 RDI=0000000000000004 RBP=ffff8880590f5210 RSP=ffffc90003d8f828
R8 =0000000000000004 R9 =0000000000000200 R10=0000000000000042 R11=0000000000000000
R12=0000000000000042 R13=0000000000000000 R14=dffffc0000000000 R15=0000000000000000
RIP=ffffffff81bb85fb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d69b9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fcaa6ae7d60 CR3=000000002a68e000 CR4=00352ef0
DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcaa5f876c3 00007fcaa5f876c3
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe21473110 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555617ff79 000055555617fc20
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555618e4b9 000055555618da50
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000ec8030008000e c0030008000eb803 02ee02000eb40300 02000eb203000200
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001808080 ba100003ff800401 0000000806080159 8603d010000b8004
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2208000008000100 000008060a016da6 0008000ec8030008 000ec0030008000e
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b80302ee02000eb4 030002000eb20300 02000eb003000800 0ea803020490000e
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9803000490000e88 030004000e800301 d802000df8030204 88000df0030ff080
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000