last executing test programs:

4.589095209s ago: executing program 1 (id=2118):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x50}}, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0)
ioctl$BLKFINISHZONE(r2, 0x40101288, &(0x7f0000000180)={0x8, 0x1})
socket$nl_route(0x10, 0x3, 0x0)

4.480774507s ago: executing program 1 (id=2122):
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffd, 0x79, 0x10, 0x48, 0x4}, [@map_idx={0x18, 0xe65c72ee8dee941e, 0x5, 0x0, 0xe}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94)

4.479496709s ago: executing program 1 (id=2124):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_usb_disconnect(r0)
syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff8eff80ec003108004500007000000000000190780a010101ac1414aa0400907800000000450000020000000000110000ffffffffac1e000101863c0000000000109e0cec69d2dae06de9173b3f60c80005f34629000b3033a70f1c0f9d1bfd000a3aba454f6dc54cc6000591ec9200070683fa3f39000000"], 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@getqdisc={0x3c, 0x26, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0xfff1}, {0xffe0, 0xf}, {0x3, 0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48840}, 0x24008095)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

3.641175504s ago: executing program 2 (id=2139):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x5, 0xc5, &(0x7f0000000000)={0x3, 0x0, 0x7, 0x4360}, 0x8, 0xe, 0x7d, 0x1000000, 0x180, 0x101, 0x0})
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0)

1.411587475s ago: executing program 1 (id=2163):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1)
r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000080)={0x4e6f, 0x0, '\x00', {0x0, @bt={0x4117, 0x401, 0x1, 0x1, 0xfffffffffffffe00, 0xedb7, 0xe3b, 0x7, 0x8000, 0x2, 0x1000, 0x7, 0x3, 0x4, 0x14, 0x35, {0x85c5, 0x800}, 0x3, 0x4}}})

1.411299685s ago: executing program 1 (id=2164):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
fremovexattr(r1, &(0x7f0000000040)=@known='security.selinux\x00')
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/41, 0x29}], 0x1}, 0x20003ff0}], 0x1, 0x183, 0x0)
close(r3)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)

1.271370751s ago: executing program 1 (id=2166):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040))
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000b00)={0x2020}, 0x2020)
sendmsg$netlink(r1, &(0x7f00000001c0), 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)

1.201384151s ago: executing program 3 (id=2168):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x161b82, 0x0)
write$cgroup_int(r0, &(0x7f0000000040), 0x12)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
r6 = syz_open_procfs$userns(0x0, &(0x7f0000000400))
ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000440))
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r3, 0x1, 0x1, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9ee}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)={0x29c, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6030d27bf2c0"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x0, 0x1, 0x1, 0x0, {0x2, 0x4, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x300, 0x9, 0x7f}}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_IE={0x117, 0x2a, [@cf={0x4, 0x6, {0x5, 0x68, 0x3, 0x800}}, @dsss={0x3, 0x1, 0xb8}, @sec_chan_ofs={0x3e, 0x1}, @random_vendor={0xdd, 0x7d, "80d5ab17f574b50f35cb2e061446b66d09bc284462d4ad98d078395a50ad2578a096bdd2f513c7c2fc47a507b7533e9e42642a8aace87d3843313cfafea67353f9b9ef0027f87f7f32ced81670161d4d5ad8da44a6f652fd540f9b23ba5d115895e95643a6f2447bc0d4478dbcde9760fee8a291f70930d9bf4125dc49"}, @random_vendor={0xdd, 0x7c, "68dd17be0d1290fcbad5cb059bb18bac6877d35ee5e7af4e2316bc1c6aa31a6e8cc05f5e48049be938e6a3e01022aa54f70cbb03bffa2aafae69040b9f81193372b0eb79b5f55fef1d39e7a47a30bdde506dc43360a579add4bacc83c6ad23596e534fc10fde465a8c32299393a59ac147c8ec14a8b5597495fdf6cb"}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x2, 0x2, 0x0, {0xaa5, 0xff1, 0x0, 0x308, 0x0, 0x0, 0x1, 0x2}, 0x6, 0x81, 0x2}}, @NL80211_ATTR_IE={0xf7, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x9}, 0x8, 0x3, @device_b, 0x6, 0x6, 0x6}}, @ht={0x2d, 0x1a, {0x4038, 0x1, 0x3, 0x0, {0x2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x9, 0xb7}}, @gcr_ga={0xbd, 0x6, @device_b}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @preq={0x82, 0x36, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x7, 0xc, 0x10001, @broadcast, 0x9, @value, 0x7, 0x1, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x10}, {{0x0, 0x0, 0x1}, @device_b, 0xfffffff7}]}}, @tim={0x5, 0x7b, {0x8, 0x2, 0x4, "44ee0b36ead55df2ed403ff52faa56342a83c508469b9ca6a02e651eec2b63bc086775a666024808ba668b228cd4eb319d62dff002a65c5921303bd9c16a8c0a4d7a467f043c058634e402dde2c0d61ef666bdb12ce5917785552912e32fe3476b9a65861c1470f05a6c54d7bf644ec4803ba5ca6181ace5"}}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x0, 0x2, 0x0, {0x3, 0x243, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x81}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x400c0}, 0x40000)

1.141608134s ago: executing program 2 (id=2169):
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/50, 0x32}], 0x1, 0x0, 0xfffffffffffffeff}, 0x8554dd329a97ecfc)
r1 = socket$kcm(0x1e, 0x4, 0x0)
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000000c0), 0x4d)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef)

1.14097178s ago: executing program 3 (id=2170):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x800)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}, 0x1, 0xe00}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x90000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1ff, 0x5, 0x3acaa292, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040054}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x0, 0x343}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x5c, 0x4, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1c0f}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000880)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xc, 0x3, "e4edf2b75cc7c0a3"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb)
r8 = socket$pppoe(0x18, 0x1, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x4, @broadcast, 'batadv_slave_1\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r8, 0x80047453, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'caif0\x00'}})

1.140826831s ago: executing program 2 (id=2171):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0xa0000, 0x48)
ppoll(&(0x7f00000004c0)=[{r0, 0x6049}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00')
preadv(r4, &(0x7f0000001240)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, 0x0, 0xa3e)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})

1.014627229s ago: executing program 3 (id=2172):
r0 = syz_usb_connect$cdc_ncm(0x1, 0x8e, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x2, 0x1, 0x9, 0x10, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "7be10a"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x39bd, 0x9f0f, 0x1}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x4, 0x1, 0x8, 0x0, 0x7a}, @obex={0x5, 0x24, 0x15, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x40, 0xb746, 0x6, 0x1, 0x401, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x8, 0xb6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x9, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x6, 0x8}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x9, 0xaa, 0x1, 0x20, 0x8b}, 0x4d, &(0x7f0000000100)={0x5, 0xf, 0x4d, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0xcf, 0x0, 0x8000, [0xc695925af6abfc89, 0xfff0, 0xffc0]}, @generic={0x30, 0x10, 0x2, "56290a2e5b019e6380cf6fe5b090300800c12a301792d2298ca1a831224f3892f10f301e58c0c1d0e2d58f5eba"}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x459}}, {0x4a, &(0x7f00000001c0)=@string={0x4a, 0x3, "3b8641e213120a1e8e17349fc4766f964c21c7d3d7f42d2a4aebc4c7d6049b0962e982f7187d98aef56fcab3867b3460f7f3becb95848f65070d94120574686058972e16a3e08311"}}, {0x6, &(0x7f0000000240)=@string={0x6, 0x3, "37534891"}}]}) (async)
syz_usb_connect(0x1, 0xb5b, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0xed, 0x1d, 0x8b, 0x20, 0x413c, 0x81e0, 0x8c32, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb49, 0x3, 0xfd, 0x33, 0x10, 0xb, [{{0x9, 0x4, 0xc1, 0x6, 0x2, 0x34, 0x71, 0x18, 0x1b, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x40, 0x1, 0x3, 0x81, "c9", "8747"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x4, 0x9, 0x6, "f2e4"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x9, 0x3, 0x6, 0x2, "20ed538a60"}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "5ea67e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x9, 0x6586, 0xb}, [@acm={0x4, 0x24, 0x2, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x40, 0x4c, 0x1, 0xc5}]}], [{{0x9, 0x5, 0x4, 0xc, 0x40, 0x7, 0x1, 0x7, [@generic={0x50, 0xa, "c4c346df19101b068a72aaa39ce55f29fc58a9aff676e6c5162a069e8afbeb0959c31fc829da05bb365aeefcdc0d37c877e5a6dd228bfe13486e9739b07e04bf82e877e95038ee65c4d40d98a668"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x79, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x9, 0x5, 0x8a, [@generic={0x2f, 0x23, "ee798e9cb377f1e1543665f3544cac23d03e40606a9c2fd6ba838915de140fad0094b68cf112f8ee2d96e766dc"}]}}]}}, {{0x9, 0x4, 0x3d, 0xff, 0x2, 0xc7, 0x31, 0x1b, 0x1, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x1, 0x7, 0xea, "29be0c95"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x81, 0x3}, @as_header={0x7, 0x24, 0x1, 0x7, 0x2, 0x3}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "4bf4fc41e1d2"}, {0x5, 0x24, 0x0, 0x2def}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xd, 0x81, 0x1}, [@acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0x74, 0x24, 0x13, 0xa, "c34497f6a192ecfcff3321b88e25b9572e35e57851d3c8eb889d0a77f8b2b1b9542af2618e850075a6edb7ae58fbfb0daa71d207b4a4e8c9b1f52665062fab432f06a044a7374bd8acf264613a0765b9a0da6375e7b7c53c4e4d90bb61aeab0b9a8b7b9cb18b866dfc3325ea75ed7906"}, @mbim_extended={0x8, 0x24, 0x1c, 0x1ff, 0x5, 0x7}]}], [{{0x9, 0x5, 0x0, 0x10, 0x400, 0x0, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xb8}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x7fff}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x2, 0xdd, 0x5, [@generic={0x101, 0x11, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}]}}, {{0x9, 0x4, 0x1b, 0x40, 0xf, 0xf6, 0xf9, 0x4f, 0x1, [@generic={0xb5, 0xc, "7a23f1bb8be62479a272bcc799ff374b976661390a9c3f71a5e0e4b974e5c30dcaf622fe626158e9b08b59b354512e739b9536a7ff8a22f498b2f2fd1d6391f5dd6be46fb91ef53d2719d716f51f966498ccfdb0a6467913ceb8aae384499d7aad84ef521a9c02a74dfced2ebfb8a991623d0f10a4658ae18e05dd32647f0dd1d2b4146917a6fa2584d017ed2874f5fdfa9e1c10b9cc2bdc78dc12aada4ff5601ecb928b9ce851ab76e4c4932e0709c4089e0f"}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "c739c36d659a"}, {0x5, 0x24, 0x0, 0xae}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xf6c9, 0xfffd, 0x2}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@mdlm_detail={0x104, 0x24, 0x13, 0x2, "f6064ae72bac136683d72bb8e100e1ff54e405cfebf44ce091a731895b7b6fe5de17f86d4d815e6e85df298e48e109a3e5fb6bc2600fcf856ac022b3672d0ae2f2c549fad9bb5f9f57d884f804308a180e061acc6f32356edceedeebd72c68a33d67ded50c3ea2dd48554e7b8a595ef996182cba824e21e9ccf65db5a55b3960d6b536ebecd6da55de1b6e2ebaf921a210140a422e4ec7885cf129e12fde9f3b809ad108562aa2a82639dfcc43fd06ca144a7d63b5a3d09dcf9bb065a4d3378dfecd446af8945bc658adaf8e2dabc98b06151be1b7b4efa73af885edbdcff2785e6eec2c368a3102154624e7058f5cbb478f8629ab5e75bfcaa0eec51c036fe1"}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x3, 0x4, 0x8}, @mdlm_detail={0x67, 0x24, 0x13, 0x17, "065a11e3475ad7e129e32ee185c2362c89b497ee349827d9aac32ae627284d3e0d57b5262c7b412e82a8329fce1e819528ec638cae211d4ab541e8e3fe315b81da15805fa9c82fe44f657926b32e1922e04ae6d31be201c6c7c98901c1f8c03852f35e"}, @country_functional={0xe, 0x24, 0x7, 0x7, 0x4, [0x7f, 0x1, 0x33f, 0x0]}, @network_terminal={0x7, 0x24, 0xa, 0x10, 0x4, 0x81, 0x2}, @acm={0x4}]}], [{{0x9, 0x5, 0x80, 0x1, 0x400, 0x10, 0xe1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x9, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x390}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x7}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x2c, 0x1, 0xcf, [@generic={0xf2, 0x31, "57d147f34ee36ad6964cca5e1bc5c00fb6125c62da69656478b324312ff621573c8a9592c528fdcb882f8225364f692b5040a242f5d9599ba410a3ea40c37e4bf0046ba441c3e46dde59e86d8b901433c1cf2a12865c79eb501fd3ad442a41883c61083bd03a6aaa4c837c8fa32c16ecdfeb520253893e8d326599824f160d73980fc448e82e366264679f35a08e13372eb5a49efe7b953edaa6a7b850b5475cfdb6696a2cb50c573997cbe448c810dc070ef206bccb1b2ea73fc81558e7dc9b0bbd9e0f54dc8c1ac85552251c6f40984c11927080b43ae183256cdd2e4f3aed75b7fad411000fa7fb530b38d4f99e9b"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xe3, 0xca, 0x15, [@generic={0xe8, 0xc, "94fc58db862783ea19b673beb1bf3c5add075f107be38e69144929b45d96f361da45501c7691788e4ef9f71c05d5dcd3924b1ddf929ccd852d5808cd72068b280e2a556f8e458f42aa3f93e605421a356e38266add70a25f415321a3554cab134b4519a5ee0ead183e4560836bee214e20f13f7953a9b1326e95670c12b68f7153d8714e56de32b623f211cfff45df527bf50bfb06d137d1e3666df82c8395275dafa5e52c71d4aa68e52c1d44fe7807a5132c6eca46041b45f690805407e4239f021de56f3a43c86efdf2b44cb23a74eec532606bc17841a82f4598314f483cf3ad0fd13469"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x7, 0x1, 0x0, [@generic={0x8e, 0x9, "2bc2af50727cfa1a4add7e1a711ced1eb112af4ce616970eb73abb30e96e14797b3c72a4085355872af0167e4558eba585a9f84a7ef63e669e2f47c21afa37f1067c1f6fdd7c2e39829582d03e4f4f5a331fb91e10fec53960b5bec444ae1dd7b0584c7af01078dfde68868218ae5cc8aa4f8bba5064b300c01f4c844332400cb3a0d7a3790711b601dcbbd1"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xfe}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x1, 0xb, 0x4, [@generic={0xaa, 0x22, "f06ae713213c7520ad3b7883c3b743983849d2fb20d4449b00ed0f87ab33482e62870abb571b4339544052184c2fb2c55551dca880b3f879aed9374d3994bb67d687204d7c00bafe72a586d3876089cabc1532c2789485169cde88aad19012695ab38fd2fde1ee975b64a2be7a28a785f65908e751df06763e022f72a218435ab787d8d346c5aeaa2b50840e801bbbd9b6623f5674899f0c1349cd9d48524f258ffbe39111564047"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x618, 0xb5, 0xd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x67}]}}, {{0x9, 0x5, 0x5, 0x3, 0x24, 0x5, 0x1, 0x80}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x4, 0x4, 0xd7}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x41, 0x6, 0x8, [@generic={0x64, 0x11, "f69067b22dfa47d028f8cb0594a69c96293e2d8b3a42cb0c4b335d5aa05208ba7d3037ec4e5a029b0ba593f1494b127031c9a74356b25222d3a55ba049934bcc3c24fd00de4653dbd3c314eb711b6fed18b75e937a0f4ec7d4a07dc6d5ec52770919"}, @generic={0x1c, 0xc, "92fee5b88833c192b16c74b717b3298ee90aa1c55011ffbdab1c"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x2, 0x9, 0xd, [@generic={0x5e, 0x2, "80fffac2db6d3787257138ce6d81a3039555a5ca02ea4ea51d516280702e8fc7d726d171f309e82dd0cdb209c7b561d11d579e32e55070ac7f2ae08726388e9ca2752fea418163d2f854770c249a5fa23a57297f3cabea30f1232afb"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0x1, 0x9, 0x8, [@generic={0x8e, 0x8, "6ed4d488216bfd38497bdb8cad80500989ce6b96a01822a10b62ac975ab120c59a3e9cc6dfaf35e9042a13f6f14f74f966c1d6b716d11eb15659cde9a3552600e3c68c6d274bf2826ab943ae8c3fefbc1c235a1648774d7fd1cc4d0672a1c0f542e566f0c87666e014c01730ed19ec6b4c73d28c15a1dcb2b54cc47fc6a5dcb56bb907fc2d39bbdc81078068"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x8, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x6}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x0, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0x8, 0x80, 0x4, [@generic={0x66, 0xc, "5cb956ef6a77422b140ce68dd129116df17d5331e31f352a1f886f1bba51142545270873747b78691d3e20ba001a351dc49a60f2c9032db12b004eb6efd86b2800217a423537876d9744572e7797f9c20671d4babcfcecbf33ef689632ac6dcfc3d99d15"}, @generic={0x3e, 0xd, "f941205af48ecb295395e039778d11ae0dfa43fa6bd8c42db4b43edd06da6c64746641515ba1683a9d0edfc3647f2d1076fd6a7371e5516f0510f18a"}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x7, 0x7, 0x1, 0xff, 0x9}, 0x71, &(0x7f0000000e80)={0x5, 0xf, 0x71, 0x2, [@generic={0x69, 0x10, 0x2, "05be8b56c9ef06099c1aa1923b9615f280ee315d26bbf67e26c4bcf0912db76e02aeb0805866eb9ac66aeb55f9649a6184ad78dfdfe149353607511f8d890c9e72d50ab8603ee54ca0a6b5f2f93a8e57f4aba6476ffe2ff8d665adfc7d4a134975b879a55df2"}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x40c}}, {0x29, &(0x7f0000000fc0)=@string={0x29, 0x3, "757d916bd1d66b06348e3bc111e691319cc3644829148a64d7c073162fd68bff2d3beb9753abec"}}, {0x83, &(0x7f0000001000)=@string={0x83, 0x3, "c1c957c7ab302d7ad4d3264b1d58237952bf946bf882188a7f10d6036b91bf6467bb2848bf7dcaf9a93aae8f8760398005be2d1ecea3bdfd35f4e894e6c2c5821ce5b516b4264b15007ad991bbbf453b7b28dadaaddc48f0e582a4ebeaf903080ae6ebd2e673d238c10a35947b648584a927e637bd3aac329bd5ebc303d1064830"}}, {0xe7, &(0x7f00000010c0)=@string={0xe7, 0x3, "ae21c2c05977ad8add7701884c2b41591372eb95dc3f15c097554df80e8ce1dc2381a95ce96bd15d6b0a25367ac772a02400948be45d3e52f6d98215b96671894990b6b07092d046da6bb39979a7df416a424b7e25d8eb647f929819503f82950500868c27802c7ab643348662099bb9018502292ec0829b5bd308f9dab9b1583c394e428458d2c14424e3f700df34437484a94b6a1f0d23c9f7340ebc802a2b718021b2bd43d22e6b5d79bdcb3e2cb79c55b5a37bcfea7bee05a959540e574530ceac43ee2c8e529a89afd09af3f4ba01b77a75e01be21660ad761937b99d115b75015c7f"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x440a}}, {0xae, &(0x7f0000001240)=@string={0xae, 0x3, "56aeea72e679ef1753fa7b5e35c8cbe5121f0ed63c2e1b6c48c2f9dc8881f0031b0c53500417b662ce55892a5dcf82a80a62eefc399e765a91a0677a4b9862f207ecfffe46bc4c6c4761d2812750816383030fe66bb0cc27691f39cae91c9c0a593b3130641833da2b8cb94a212dc75a0ff2b59e202226efb158a0be61c5727421d230a83d6e14bafd466049f400592697e8495851530c232f69d1e19741e16e79e786732647aa2d3d900121"}}]}) (async)
r1 = syz_usb_connect(0xbd0ede21476aa2ab, 0x273, &(0x7f00000013c0)={{0x12, 0x1, 0x110, 0xce, 0x54, 0x9c, 0x40, 0x8ca, 0x2040, 0x3728, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x261, 0x1, 0x4, 0x8, 0x80, 0x5, [{{0x9, 0x4, 0x8d, 0x2, 0x9, 0x80, 0xf, 0x22, 0x2, [], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x4, 0x3}}, {{0x9, 0x5, 0x8, 0x4, 0x408, 0xc7, 0x10, 0x7, [@generic={0x41, 0xe, "3e17466fac01ba6da20e6bf9e224715dcd64d82985812ddd578c71a8252cf309a7f4936d5712138435894b3f7e9fc6668b1741fc8a42944a9437b233b8b044"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x1daf}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x3, 0x1, 0x1}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x3, 0x6, 0xff}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0x81, 0x8, 0x6}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x7, 0x2e, 0xed, [@generic={0xdc, 0x6, "36bd8d431a32190c7b3904dbdf856df67c9fada6416f7f9d95d7498522ef03ebdea4f3414beb05416150fb56e53989954c526f367df5c2230ebee8b1988f759a8c47cb2b1019c98163e309d800ce4e2e549c1e01cf838c42fe5721154346032253c93523f726a44360886d990c0f2985f3c97d7a46af56e888b74b6f1313cabe695c7462a7763f09a382a10e8a3fa7334f25e27c3d3730d18b23122b247de82da36e44573de09b88742d7b3932239ee742e3a42e112dede783b652417b1a1629f1f479670058a7f53f00453e672f4067c21ee241f32fb79d318e"}, @generic={0x7d, 0x10, "0348bf9873384383ee25da1d74ac66146ca86d6aa7f708831efd82245d89b9264fead1e01baa3b2403275b896bf2f08e4a4535ec400989c043f442e1166dbce6dfb5f9d1cd11bb710da2076b32e070583ce1f19a23f89cb558939c085bbe6bd6f33034f0fa53d67bc96de1d4451175131f2a16b23789c77384628e"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x8, 0x6, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xff, 0x80, 0x2, [@generic={0x5d, 0x31, "58a4805cd5a60f5a95c4a179b14f0634cb727c9afb8058dc726ae7c7f2cc42a0be3bdfe3cd263879a664a01b3c6797b7af5915cdd0f3e6441b00f0f7d630f34532041ab0dc691385c5bc94f31046c8a0bc33187523e461e0382534"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x9f, 0x5, 0x3}}]}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x110, 0x2, 0x80, 0x8, 0x40, 0x78}, 0x5, &(0x7f0000001680)={0x5, 0xf, 0x5}, 0x1, [{0x42, &(0x7f00000016c0)=@string={0x42, 0x3, "cfef093f6025a0019d8ccbb2fe542cf71898a4541c3d817bcf0257395c30beb3c2cc4f63e8fc5173d7e5255013831aa9927cb58da8d6ea359fc6e8337ddae060"}}]}) (async)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000001780), 0x103000, 0x0) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000017c0), 0x24000, 0x0)
close_range(r2, r3, 0xab1a3a9b268c43df) (async)
syz_usb_ep_write(r0, 0x72, 0xb, &(0x7f0000001800)="432fa960486ce8cf8eec57") (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001840)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) (async)
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001880)='./file1\x00', &(0x7f00000018c0)={0x302002}, 0x18)
r6 = fsmount(r4, 0x1, 0x80)
write$P9_RREADLINK(r6, &(0x7f0000001900)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$sock_ifreq(r6, 0x8924, &(0x7f0000001940)={'ip6gretap0\x00', @ifru_mtu=0xffff5859})
sendto$l2tp6(r6, &(0x7f0000001980)="0a19488c269d3a487306c09244fe6a0d59b69b1f21e095d61b9f1fbcf8dab65a8edca7d9cda0d37c15eefd0f6747b1a0c7481fb5997f3d0399260d9402125a62cb782358218022935b1270ed02d8f2be772c1fdaf3a7a00af364549991a433c16b2e62f4177dc524e6e9e8f578f7ccc279", 0x71, 0x0, &(0x7f0000001a00)={0xa, 0x0, 0x1, @mcast1, 0xfffffff5, 0x2}, 0x20) (async)
r7 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, &(0x7f0000001a40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r7, 0x40089413, &(0x7f0000001c80)=0x5020) (async)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000001cc0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0xa75, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xac, 0xa0, 0x35, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0x248}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb, 0x3, 0x7}}}}}]}}]}}, &(0x7f0000001ec0)={0xa, &(0x7f0000001d00)={0xa, 0x6, 0x300, 0x9, 0x7c, 0xff, 0x8, 0x9}, 0x10, &(0x7f0000001d40)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x36, 0xc, 0x8, 0x1}]}, 0x3, [{0x7a, &(0x7f0000001d80)=@string={0x7a, 0x3, "335e0d503387a8f1fc6f7cdad3885461e0cef7de5b8d5a48d4e8ade721b2fa7d7558a216cbe6a11b71c9ba8ced931841b89ab0cabe3588c08d0b98d08a3e005c359814d350acbf9a59a9247e4b54f07f91d64977d3be18061555c336cab3eee5fa6f61bd408c2b92c690bd42252ac1b494890c95a8987de6"}}, {0x57, &(0x7f0000001e00)=@string={0x57, 0x3, "cd8457513d5e8b2d39f3d1d0cf6e73ee14d13d185238374aa69bd210def888e39a760c2584f199f212a4c5211096ee13d673c1765cb6d510e14fbb4d20acbaf6333319fa556f424f297da4c690db5e624eaf150e8e"}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x41f}}]}) (async)
ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611)
epoll_wait(r6, &(0x7f0000001f00)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x8) (async)
write(r6, &(0x7f0000001f80)="43adafd91dc329a7ec203dbb565461a47f3ebc9e13f3e46bd2a665ead625d669af302d2e81a274f4498b69b01c9a4eaf6ad2b017f595a5b0f2f4361e84231c5766b7706339bd4425d0a576c265fe5648b75dda4fdc391fc7b400582cfedce6ea79b7e4960f9b6e5ebca70e7f0d2185b09fa35d5bf2dea7ac2e31ab5f9b245819f79ac39976b834bfc144cef813335f339170369461946f84", 0x98)
ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000024c0)={&(0x7f0000002440)=[{0x5, 0x8001, 0xa, &(0x7f0000002040)="2db314a1c37f7d2c0d78"}, {0x2, 0xf000, 0xb6, &(0x7f0000002080)="b3c32962f835b57e24858cab76508f722240ce647eec902ef1ab91fad4257f498bcc26c4096a1365c0badfa34ed7eb490f2a61c5604127b0b621de754c2c00824a6133e5822e1b7c151ac47df3368eaf6e7202d360e7684fb9796b2ba245e01378e89eb864e97b4265f1badc6beb41ee6e1d07a2124d817a1937f9436da2a4d047fd6015b1c7fae53490395c2c6da670a5fcc8a8d8af6e3edb97b38dedf6fcb8057cf72cf44338aa1d19b5fe09aa8e4d4aa3741a2812"}, {0x9, 0x3802, 0xd, &(0x7f0000002140)="2c0820473674b8fe1a3c8980dc"}, {0x2, 0x6011, 0xa9, &(0x7f0000002180)="3ee0a102b5fd3c4dea2223ed8d0b36b56afe8bf83fcaf8dcec87839398d5e74a87bb3dd7c4e2c1f72a45321fc6ed6186063a17308293c737240eacdcbdb21c408726361795795eb83b045c4a0d7f56755bc9b0764eb79b557d2710f10e44e47dca9123a9ef5b551432f422602d14ae21d9f95d0b035dc5d538bd0b038319d5241f73f429c30bfd5e9c2cc8cf0998ab902f29f254bc6d148ec50d0254b476554739a1d2a42c40983f4c"}, {0x8, 0x8c00, 0x91, &(0x7f0000002240)="7aa4ad0a5b340e4ba4b99c8283682798368078a3a39b8d1b8e66470fbe4337d8e72b75fa0d3d8109c9fd981b9bfa9ee912f299fe1b0ac799889b4528eafe8c9e9afd68a17b9e9865e960ddd5effd8f6929fde144027a18bbe9bdfd92b91a3621ec3ec825a193ed8dae4e2c23508f0d678b1bdc71af8c028d86a53a6051974a1e111cbe321d1b0d9e9aacd265d8224da03c"}, {0xb, 0x2000, 0xf5, &(0x7f0000002300)="65fdaf17aaef41f1b05209415073ea43fa63a24f1ecf203feac83773c287de1aa4dc13858b57e029dd0e6105e4d00ced2d3be5da5297789bf7476dc68d8d304ac05b47500767a0e86d97d82640e8d6e391d25c54664f9863cf47aebfd86233d5e7911918d735bb9be1f4b96fc16efc7af6e612fb15117a37e5a70ba08b0b3ae5b8fa92db9cdffabe33378e0d1e59e8a0e210a98b469aae766f6d3e1763a2779981317596ce98b59084534ba4e12b81e1d2a885bb319ca20f78ae27786317b87b1630199860c4593253057e6393ab1ade8971b7cb713c2372ca91fac35dbc1588d252512aada73f170782b9e0cdac98e80f3a00d8a4"}, {0x4, 0x0, 0x31, &(0x7f0000002400)="8ae66e29f002849ce798d0bdc45183690daacffb3b0fe9b939ce9dda8cd4e949d28e811fdf27e3b1e136140d6a92897440"}], 0x7}) (async)
syz_usb_ep_write(r1, 0x3, 0x3b, &(0x7f0000002500)="621cf2e711d753324bca119b0c86c01c25f8c7561f3c3eebbfe9174e2cbb605c6480fd55abee78023cd11f0677e2f6c08b7624db9380711ab1c572") (async)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002540), 0x2a0080, 0x0)
ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000002580)=0x1) (async)
syz_usb_connect(0x4, 0x6d4, &(0x7f00000025c0)={{0x12, 0x1, 0x250, 0x1a, 0xac, 0x10, 0xff, 0xbb4, 0xa98, 0x789b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c2, 0x4, 0x8, 0xf, 0x10, 0x6, [{{0x9, 0x4, 0xdb, 0x1, 0xa, 0x2d, 0x7b, 0x1f, 0xf, [], [{{0x9, 0x5, 0x5, 0x8, 0x10, 0x1, 0x4}}, {{0x9, 0x5, 0x9, 0x1, 0xc1211fea036740b8, 0xe, 0x8, 0x7, [@generic={0xf2, 0x25, "66a4b4b19a91fed3c8333853a7977ac7d93f5b83deb3727db531bb9d31f772f4964128e79072846f33cfe70847cf8f482c0f5c0292271f03ac82501d9595b6af75fe58fe201bbf094516cd0505708fd22095957f32b50e85f0ac9e9d7413bf034862609fdf6441bd382becd042bba7251e857939b66211447018cbc9d7aa8f647b1b301e26094b113a76b46bc07c8b8b7b366f39ee9c0ca2d819ca44b42602b79bbc9bdbe10533869470951f3a86f70970e21b840d7656fd10c68efbf1758e49fd9197d9e1503a97673cf4a7d8b42ea8d34ee4ee4d193fd66ce73b1319bed0518c4383a201335f86c2d16862f0c16063"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x1, 0x9}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0x7, 0x8, 0x9a, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x6}, @generic={0xf4, 0x7, "3ec1c6d734fb24b8ad6672abe0023718a8616a70a1e393af74c7460bcd59fe6d269f8066b5ff810b0d81a6660e36d4a6f517be75c56d6d77b74fadcb359b22a7001dc9d6875e5147ec31973d50ee7bf80b8db266a9fdf2e7bc49a8d78a0b513fc057ed570bc4c9e32f877f3c9ad2b5ebc3f4920879413a6a43a831d216e7e3b992d971d81617618f3daac0a3a90fc28b13dcf7429036647c6fc5b902e12d3fd1dbf6ed323be84dbc226a2423252a8a185ba57e9881e85cd16d1a47c7551693f4b7e618245c1c2583fc29a0468de49f98e3ea5b829e1e77d61dcaf968560b7c50bc79ef923e767624b269f55208b45b343aca"}]}}, {{0x9, 0x5, 0x2, 0xd, 0x3ff, 0x0, 0x1, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x66, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0xb1}, @generic={0xed, 0x2, "d2e66dadad1a12a312489b66fb7c4df039eaaa30a301152582f7950c9ed6ac9dc2130c6b4dd4390220450a1114d20dadee47050ac2ddebac4eca82210bc9353cda1949b028207fcf5c5b7b19a2717c54bf7d0821d70f7c82a2d10888431a73950641ae978eb2a38f5f10e44e46fc634459ecef7445f17d7f6051c3fe382ad2749572d2ecb222c1c76ada329194ed1b86acdaae7e841bffb264a7d866e612cc836f8dcaad2e5457a894d920efb24409bba6f91e01b5c1844ab83fe6564033eeda43ba1c53cd2a3c41fc9a66eeb2d9114f421dc893daedb64bd859b4068f6f1675c5118935ca212ab9f6ee3f"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0xe3, 0x4f, 0xbd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x6}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x2, 0x3, 0x3}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xa, 0x1, 0x1}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x2, 0x3, 0x64}}]}}, {{0x9, 0x4, 0xf6, 0x0, 0x4, 0xe, 0x1, 0x0, 0x1, [@hid_hid={0x9, 0x21, 0xff01, 0xc, 0x1, {0x22, 0xa0f}}], [{{0x9, 0x5, 0x0, 0x3, 0x20, 0x0, 0xf8, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xff, 0x5, 0x4}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0xd, 0x1, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7f, 0x5606}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x9, 0x0, 0x7}}]}}, {{0x9, 0x4, 0xbd, 0x0, 0xc, 0x51, 0xc7, 0x74, 0x6, [], [{{0x9, 0x5, 0xf, 0x0, 0x10, 0x6, 0x3, 0x0, [@generic={0xf1, 0x11, "25064879c1ad79e8f913d3a2af7bbc0d8398f2f4f00da239a71545a03c335c9134d8f63c4cea753ff18b6e3e654bc1ae34c7654e45322adcfc0d525410ee90d00423fef017b591050571d532ee42093ef2a00d7ce49c9ab5647a3c0832adf4cd7418577f6911aec7f02dfda24ad22b1093dd15f3077ea91e6ca3910c0a55053842e452da153b2d488e384b3bb92fe8d2fbb7e7381086c50efb0e0d60e4e59ac09159a798ce8ba779ad2844f5e922381b86fc6a9ab59f2c835f7f617911bb2cbc573b5daaa7b0d781b5f3113c14e36aae11d8f904053f6879e3803bca85ba49dc1085325810ed847e0697497834afdb"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x0, 0xe6}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x1, 0x3, 0x50}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x5, 0xd8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0xbc}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0xfff}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x80, 0x81, 0x6}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x7, 0x8, 0x2, [@generic={0xb9, 0xb, "54ac2f4ca95d7dcb9c269045fc62f630e6d2f153fe71008c36baa169225c530434e0fe1026150eab0770ce9f0fdc10818159ee5dd0c13ebb63bc5caefc9f42ae628b47fdd2da8efae6cb6b370218522064ffbd90b275deb039728de9aad0f8016791977f26e1b0c53065fb80dfcb0c00984f1432e7fa17d514e705ca84747c20db15e3796f74e790f4983a8f16ab9de959a2354faa57fee9fff7622b8464a570107de2264afe68cf05462ff6104da1e7712ba558de56b9"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x428, 0x1, 0x0, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xbd, 0xaf7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x81, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x10, 0x5}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x0, 0x0, 0x6b}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x5, 0x1e, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0xb0535b8526c0d80c, 0x6, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xbd, 0x7}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x2, 0x6, 0x6}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x92, 0x10, 0x5}}]}}, {{0x9, 0x4, 0x1a, 0x1, 0x1, 0x31, 0x2b, 0xf3, 0x7, [], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x40, 0x55, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7}, @generic={0xba, 0x5, "c7ab99af3002f6f6b87e3a6b933b855ec5683efa6da4de5b5206f2e6504b54e8b9739befb205c423a43080b0079a26e7acb8881fd4927b09dfacd126f925fc571e54911e2c0965aba03f313da339eaab2a473eee2be169f35ada38ef831a0695a62650926f871250b2b1931151997650b0a2151b9642ff7b512e8290e253385a2e1d41e2b27e126178839cd4784f077d349a5104c1d616de68589c1400f9ad787297838474594e9030351e201f7f16ca82d505d01e7682ec"}]}}]}}]}}]}}, &(0x7f0000002e40)={0xa, &(0x7f0000002cc0)={0xa, 0x6, 0x200, 0xe3, 0x2, 0xc8, 0xff, 0x5}, 0x5, &(0x7f0000002d00)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000002d40)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000002d80)=@lang_id={0x4, 0x3, 0x813}}, {0x48, &(0x7f0000002dc0)=@string={0x48, 0x3, "ce986fe1cca4fa60a7ffe103fda92d2c268dc1c4fca795193b0335d382987222c050af14527ebff2053f1ec49519ad54afea86365abe4bab63a1d07f3de1b890336d0d839bb2"}}]})
r9 = openat$incfs(r5, &(0x7f0000002e80)='.pending_reads\x00', 0x381502, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000002ec0)={0x0, 'pimreg0\x00', {}, 0x74a9}) (async)
ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000002f00)={@mcast1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x6, 0x7, 0x400, 0x2, 0x1000142})

1.014179716s ago: executing program 3 (id=2173):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x2, 0x4, {0xa, 0x4e23, 0x2, @private0, 0xf}}}, 0x80, 0x0}, 0x4de48284fb6ae5ae)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @local})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0)

1.011226233s ago: executing program 2 (id=2174):
r0 = epoll_create(0x5)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00')
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1401, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0)
recvmsg(r2, &(0x7f0000000380)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/102, 0x66}, {&(0x7f0000000280)=""/136, 0x88}], 0x2}, 0x40002142)
r3 = accept4$tipc(r2, &(0x7f00000003c0)=@id, &(0x7f0000000400)=0x10, 0x80800)
getsockname$tipc(r3, &(0x7f0000000440)=@name, &(0x7f0000000480)=0x10)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000004c0)={0xb, <r4=>0xffffffffffffffff, 0x1})
fcntl$setpipe(r4, 0x407, 0x7)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r5, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000010)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x40}, 0x4044840)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r6=>r1, {0x7, 0xb49}}, './file0\x00'})
ioctl$KVM_CAP_DISABLE_QUIRKS(r6, 0x4068aea3, &(0x7f0000000740)={0x74, 0x0, 0x84})
getsockname$packet(r6, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000800)=0x14)
shutdown(r3, 0x1)
getpeername$tipc(r3, &(0x7f0000000840), &(0x7f0000000880)=0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r2)
sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a40), r2)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, r8, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xdd34}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4090)
ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000b80)=0x4)
write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000bc0)={0x30, 0x5, 0x0, {0x0, 0x6, 0x80000001, 0xe}}, 0x30)
r9 = syz_open_dev$hiddev(&(0x7f0000000c00), 0x2, 0x40080)
read$hiddev(r9, &(0x7f0000000c40)=""/1, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x7}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40811)

910.835329ms ago: executing program 2 (id=2177):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x20002, 0x4)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
sendto$inet(r0, 0x0, 0x0, 0x20000010, &(0x7f0000000540)={0x2, 0x400, @empty}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) (async)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x40046103, 0x0)
epoll_create1(0x80000) (async)
r2 = epoll_create1(0x80000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, r4, 0x701, 0x70bd25, 0x25dfdbfc, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
r6 = dup2(r5, r2)
ioctl$CDROMPAUSE(r6, 0x5301)
sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000001640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001600)={&(0x7f00000005c0)={0x1010, 0x464, 0x2, 0x70bd2a, 0x25dfdbfd, "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", ["", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
syz_usbip_server_init(0xaa7f3cec63cbb9d) (async)
syz_usbip_server_init(0xaa7f3cec63cbb9d)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000004c0)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000004c0)={<r7=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000180)={r7, 0x5, 0x7f})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x85, 0xfd, &(0x7f0000000080)="196550a9a83726682df7d098d428861b8efae669f56f43c4545b30e5b791d8de4f2d71ba7b1d70d954a6bedff3d116bc0f2e77233516fcff7766e8a2c83bcbd991f44ae78f834cff460bf889dd8ece1662c9c226dfd1ba242702329913604ed163f69b504bcad5e7331f69c5878145faba695b6fb3f52201e69ba7d2a083290de6b570ed83", &(0x7f0000000180)=""/253, 0x5, 0x0, 0xc3, 0x34, &(0x7f0000000280)="59fc1c572a085a47aa772992e7839b9da807e62ca0231680a70c8662962b93a69aa1d708e1af006929cb74f3d582e017431f8f9f6435c1684976f33feb6c2d87311114e084614998c15fa44a1a514d0d85aa8ae9b1fa5b1dc749b0b6b7813659f4a2308c4c67c134056c0be06b862104b272dd7f1adc2123ba7463392d3918497508b5397e8e31217df2518d5cd351ad2ba16e4d6897f4462b5d7d9894868edf6fac48971a15f1ac1f44a8e475bd07b3cdc4708f3b0a16142625e5c4ed7b4102306379", &(0x7f0000000000)="ecc3b4e06b6700dbaa3d068dd16172c4e99f0274a5b3a7cee007a5df967994409da58d16ec111d9fd19257b6069f629fc15a25a3", 0x7, 0x0, 0xf}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x85, 0xfd, &(0x7f0000000080)="196550a9a83726682df7d098d428861b8efae669f56f43c4545b30e5b791d8de4f2d71ba7b1d70d954a6bedff3d116bc0f2e77233516fcff7766e8a2c83bcbd991f44ae78f834cff460bf889dd8ece1662c9c226dfd1ba242702329913604ed163f69b504bcad5e7331f69c5878145faba695b6fb3f52201e69ba7d2a083290de6b570ed83", &(0x7f0000000180)=""/253, 0x5, 0x0, 0xc3, 0x34, &(0x7f0000000280)="59fc1c572a085a47aa772992e7839b9da807e62ca0231680a70c8662962b93a69aa1d708e1af006929cb74f3d582e017431f8f9f6435c1684976f33feb6c2d87311114e084614998c15fa44a1a514d0d85aa8ae9b1fa5b1dc749b0b6b7813659f4a2308c4c67c134056c0be06b862104b272dd7f1adc2123ba7463392d3918497508b5397e8e31217df2518d5cd351ad2ba16e4d6897f4462b5d7d9894868edf6fac48971a15f1ac1f44a8e475bd07b3cdc4708f3b0a16142625e5c4ed7b4102306379", &(0x7f0000000000)="ecc3b4e06b6700dbaa3d068dd16172c4e99f0274a5b3a7cee007a5df967994409da58d16ec111d9fd19257b6069f629fc15a25a3", 0x7, 0x0, 0xf}, 0x50)

690.943822ms ago: executing program 2 (id=2181):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000001c20200009"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700})
setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fdfffd0122050009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400308"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x200, 0x100)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000680)={0x1, 0x0, 0x1, &(0x7f0000000640)={0xa, "600231cfc60eb0ecfc4b360c9762134f30ad53bc35c63daa9d51e5b51c236250b8"}})
getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f00000000c0))
clock_gettime(0x0, &(0x7f00000000c0)={<r5=>0x0, <r6=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0xf, 0x800}, {0x2, 0x7000, 0x1000}, {0x0, 0xfffc}, {0x3, 0x8001, 0x800}], 0x4, &(0x7f0000000100)={r5, r6+60000000})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000180)={0x8, 'gretap0\x00', {'vcan0\x00'}, 0x81})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
write$qrtrtun(r8, &(0x7f0000000000)="7f1e6436e103685593f7f74ec5f5da4ecfcc314e88098bb08c078b0ae724cfa9227d97bab9d7e8ef1cce1435cd6f9164f40234f35afaccc552e34ed6a43a318a7a012daf79527f8146e85a904000730127ccce0f50a32041df5e7d10599f47d70b3ee4d35e42ed4c4b939aa73d2cabd62da85b1b71c1ea2976a23fa5ac07e2e09ff0aaa897", 0x85)
r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7ffffffd, 0x20000006, 0x4d, 0x9, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x1, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x1, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x1, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x409, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0x697, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x2, 0x3, 0x8000, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0xac8, 0xca, 0x2, 0x7, 0x7ff, 0xbe, 0x4, 0x7, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xfffc, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0xab9f, 0x6, 0x16, 0xffffffff, 0x80000000, 0x9, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x201, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r10 = syz_open_dev$media(&(0x7f0000000000), 0x800, 0x20000)
ioctl$FS_IOC_GETFSSYSFSPATH(r10, 0x80811501, 0x0)
write$sndseq(r9, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {0x6}, @addr={0x7, 0x3}}, {0xd, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0xc}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x3, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

690.155338ms ago: executing program 3 (id=2182):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x5, 0x4)

677.936066ms ago: executing program 0 (id=2183):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
r2 = socket(0x200000100000011, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x14}}, 0x98}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r5=>0x0})
bind$packet(r2, &(0x7f0000000080)={0x11, 0x8, r5, 0x1, 0x7, 0x6, @broadcast}, 0x14)
sendmsg$netlink(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0x34}], 0x1, 0x0, 0x0, 0x40000}, 0x20000810)
ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000280)=@buf={0xe6, &(0x7f0000000180)="c7ec95a08317f2be4e51a955eb43b0ee2f0c62a7959a0416f6a269ca05c112c45e8997e3869bf9ebb9b665a98235e870edf21a94e96de90e586470cf603fb5218a1ad6202db49a743a09390397a58414be128587ed1bbcd7f9884271a29c1f4175d00b116226c3d9d0118604f4e3bfdf81507fac8ee32dd45422b4431212266483bfbadddc76a34a9503f3f343232bb8b24da6717ffacf13c47f4c89891bb5cfaad04277b86e820724df4ade3db39b35d0670b9ef57c87ee74d0a94271729a1dc1cd6d55d7d3b6c32b2e79ed5831fec6984b7e14712baf0a1fcb631750df197ad3aecbfff7df"})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x216581, 0x0)
ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000140))
ioctl$TIOCSETD(r1, 0x541b, &(0x7f0000000000))
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)

631.538648ms ago: executing program 3 (id=2184):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000100)={0x1ef, 0xc, &(0x7f0000000600)})
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4b, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6, 0x8, 0x9, 0x0, 0x0, 0x2, 0x2, 0x1, 0x40, 0x7, 0xd0, 0x8, 0x0, 0x101, 0x5, 0xf9, 0xf9, 0x8, 0x4, '\x00', 0x3, 0x10001})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000180)=@urb_type_iso={0x0, {0x4, 0x1}, 0x7, 0x21, &(0x7f0000000080)="f1a9e5", 0x3, 0x3, 0x8, 0x59, 0x40, 0x3, &(0x7f0000000000)="a40ad10abd38ad8301c0d6301e0ea8475fc13b22132d7f2883679dfaced0e19f4ce86dcebc56ce5754fa835aca454c42530f1941bfd8723ec214da1a30bf1e", [{0x5, 0x2, 0x7}, {0x200, 0xfffffffe, 0x10000}, {0x80000001, 0xfffffff9, 0x7}, {0x6, 0x9, 0x9}, {0xb, 0x0, 0x4}, {0x3, 0x0, 0x37dbec5}, {0x6, 0x1, 0xfff}, {0x0, 0x5, 0x6}, {0x1, 0x101, 0x5}, {0x9, 0x0, 0x1ff}, {0x101, 0x2, 0x9}, {0x4, 0x1ff, 0x8}, {0x2, 0xffff, 0x4}, {0x6, 0x9, 0x4}, {0x6, 0x3, 0x3}, {0x7, 0x65a, 0x8}, {0x800, 0x401, 0x1}, {0x6, 0x9, 0x1}, {0x80000000, 0x9, 0x5}, {0xfff, 0x203, 0x6}, {0x10, 0x2, 0xffff}, {0x63, 0x5, 0x10001}, {0x8, 0x10001, 0x3}, {0xfffffff7, 0x4, 0x8}, {0x5e1, 0x3, 0xd}, {0x7, 0x8000, 0x4a9c}, {0x7, 0xffff, 0x71c}, {0x1, 0x57, 0x4}, {0x8, 0x5, 0xb}, {0x57a7, 0x3, 0x2}, {0xc, 0x8, 0xffffffff}, {0x6, 0x4, 0x4}, {0x8, 0x2, 0x4}, {0x2, 0xe, 0x17}, {0x3, 0x1, 0x2}, {0x80000000, 0x2, 0x6}, {0xffff0000, 0x1ff, 0x81}, {0x8000, 0xe}, {0x1, 0x1, 0x6}, {0x0, 0x7, 0x1000}, {0x88d, 0x9, 0x80000001}, {0x1, 0x7f9, 0xfdf}, {0x3, 0x80, 0x10001}, {0xc, 0x101, 0x4}, {0x2, 0x0, 0x7}, {0x7, 0x2a, 0x32}, {0x3, 0x8, 0x10000}, {0x8, 0x6, 0xc}, {0x8, 0x7, 0xd74}, {0x49de, 0x2, 0x9}, {0x16c72f53, 0x11a1, 0x8}, {0xc, 0xcdd, 0x6}, {0x8c4d, 0x9b, 0x6}, {0x5, 0x7, 0x570}, {0x502c, 0x10, 0xd}, {0x401, 0x2, 0xf21}, {0x0, 0x8, 0x4}, {0x124d, 0x80000001, 0x7}, {0xae42, 0x1ff, 0x4}, {0xfffffff8, 0xffff06f8}, {0x8, 0x80000001}, {0x80, 0x7, 0xffff}, {0x1, 0xdc5, 0xd}, {0x9, 0x4, 0x6}, {0x3c, 0x5, 0x4}, {0x0, 0xffff7fff, 0xe72}, {0x10001, 0x10000, 0x7ff}, {0x4, 0x5f18, 0x7fffffff}, {0xfffffff8, 0x5, 0xfff}, {0x40000000, 0x7fffffff, 0xfffffffd}, {0x2, 0x4, 0x2d}, {0x1, 0x7, 0x4}, {0x10, 0x7fff, 0xd1}, {0xa237, 0x8, 0x5}, {0x0, 0x8, 0xfffff800}, {0x3, 0x0, 0x200}, {0x2, 0xd, 0x7}, {0x2e63, 0xffff, 0x9}, {0x101, 0x1ff, 0x40}, {0x9, 0x0, 0x5}, {0x7f422fd1, 0x1, 0xffffffff}, {0x1, 0x9, 0x4}, {0x9, 0xffffffea, 0x304f}, {0x23, 0x8}, {0x0, 0x7321, 0x5}, {0x7, 0x0, 0x45a}, {0x6db, 0x5, 0x1}, {0xff, 0x4, 0x214e}, {0x6, 0xf, 0x3}]})
ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550c, 0x0)

221.373608ms ago: executing program 0 (id=2185):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 64)
r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) (rerun: 64)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}})
ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x2, 0x0, 0x98, &(0x7f00000000c0)={0x400, 0x1000, 0xd}}) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r1, 0x8b2c, &(0x7f0000000040)) (async, rerun: 64)
mkdir(&(0x7f0000000100)='./file0\x00', 0x1bd) (async, rerun: 64)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
dup(r3)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRES64=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r2]) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

149.976923ms ago: executing program 0 (id=2186):
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, <r1=>0x0}, 0x2020)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48014}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

81.621379ms ago: executing program 0 (id=2187):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd27, 0x4, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

1.334625ms ago: executing program 0 (id=2188):
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x300}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
sysfs$1(0x1, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newnexthop={0x24, 0x68, 0x4, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x2}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}]}]}, 0x24}}, 0x8010)
ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, &(0x7f0000000380)={0xa0cf, 0xc2f9, 0x8, 0xfffffffe})
sysfs$1(0x1, &(0x7f0000000400)=')\\!{*\x00')
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
writev(r2, &(0x7f0000000140)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sysfs$1(0x1, &(0x7f00000003c0)='\'\'\x00')
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24)
pselect6(0x40, &(0x7f0000000200)={0x81, 0x62a5, 0xb, 0x5, 0x9, 0xf17, 0x5, 0x8000}, &(0x7f0000000240)={0x0, 0x6, 0x2, 0x4, 0x7fffffffffffffff, 0x0, 0x0, 0xcaa}, &(0x7f0000000280)={0x6, 0x1, 0x2, 0x4, 0x1, 0xcdfa, 0x6}, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000340)={&(0x7f0000000300)={[0x9]}, 0x8})

0s ago: executing program 0 (id=2189):
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042)
writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe)
syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x26, 0x1, 0x0, "4f80ff259b1c2ce2d2226bfb771f00ff065e07079c5e6f426ebb117c0caba25f", 0x47504a4d})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0)
fdatasync(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="f05892b3b0381a65205e94aa94c7bad2281b41acff73642480c4feaf855527ebbddd8438675c825bfbfed778bcfb1333b8cb292533cccf4755d557ae60e46486008581c09c1e1cd4b61b451f5bcac431e8c6549f", @ANYRES16=r5, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x20000000)
syz_io_uring_setup(0x4294, &(0x7f0000000100)={0x0, 0xc47, 0x40, 0x3, 0x324, 0x0, r3}, &(0x7f00000001c0), &(0x7f0000000180))
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x23c, 0x34424752, 0x1, @discrete={0x1, 0x10}})
syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) (async)
writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) (async)
syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) (async)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) (async)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x26, 0x1, 0x0, "4f80ff259b1c2ce2d2226bfb771f00ff065e07079c5e6f426ebb117c0caba25f", 0x47504a4d}) (async)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) (async)
fdatasync(r3) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="f05892b3b0381a65205e94aa94c7bad2281b41acff73642480c4feaf855527ebbddd8438675c825bfbfed778bcfb1333b8cb292533cccf4755d557ae60e46486008581c09c1e1cd4b61b451f5bcac431e8c6549f", @ANYRES16=r5, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x20000000) (async)
syz_io_uring_setup(0x4294, &(0x7f0000000100)={0x0, 0xc47, 0x40, 0x3, 0x324, 0x0, r3}, &(0x7f00000001c0), &(0x7f0000000180)) (async)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x23c, 0x34424752, 0x1, @discrete={0x1, 0x10}}) (async)

kernel console output (not intermixed with test programs):

_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  108.729075][   T53] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  108.878867][   T53] usb 6-1: Using ep0 maxpacket: 32
[  108.882618][   T53] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  108.888719][   T53] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  108.894518][   T53] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  108.899050][   T53] usb 6-1: Product: syz
[  108.900841][   T53] usb 6-1: Manufacturer: syz
[  108.902795][   T53] usb 6-1: SerialNumber: syz
[  108.907091][   T53] usb 6-1: config 0 descriptor??
[  108.909634][ T9413] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  108.913409][   T53] hub 6-1:0.0: bad descriptor, ignoring hub
[  108.915656][   T53] hub 6-1:0.0: probe with driver hub failed with error -5
[  108.939196][   T53] usb 6-1: USB disconnect, device number 7
[  109.021779][ T9439] netlink: 'syz.2.1027': attribute type 1 has an invalid length.
[  109.078874][   T53] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  109.115528][ T9447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.120556][ T9447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.136602][ T9450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9450 comm=syz.3.1030
[  109.294828][ T9463] overlayfs: failed to resolve './file1': -2
[  109.413628][ T9474] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer.
[  109.531279][   T40] kauditd_printk_skb: 24 callbacks suppressed
[  109.531295][   T40] audit: type=1400 audit(2000000023.549:921): avc:  denied  { append } for  pid=9491 comm="syz.2.1044" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  109.532926][ T9492] input: syz0 as /devices/virtual/input/input16
[  109.570792][   T40] audit: type=1400 audit(2000000023.589:922): avc:  denied  { mount } for  pid=9496 comm="syz.0.1046" name="/" dev="hugetlbfs" ino=24505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  109.631803][ T9495] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  109.649641][   T40] audit: type=1400 audit(2000000023.669:923): avc:  denied  { accept } for  pid=9505 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  109.656228][   T40] audit: type=1400 audit(2000000023.669:924): avc:  denied  { write } for  pid=9505 comm="syz.2.1050" path="socket:[25513]" dev="sockfs" ino=25513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  109.831125][ T9513] IPv6: NLM_F_CREATE should be specified when creating new route
[  110.123122][   T40] audit: type=1400 audit(2000000024.139:925): avc:  denied  { remove_name } for  pid=9515 comm="syz.1.1054" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  110.131727][   T40] audit: type=1400 audit(2000000024.139:926): avc:  denied  { unlink } for  pid=9515 comm="syz.1.1054" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  110.138737][   T40] audit: type=1400 audit(2000000024.139:927): avc:  denied  { ioctl } for  pid=9515 comm="syz.1.1054" path="socket:[26809]" dev="sockfs" ino=26809 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  110.194727][ T9520] netlink: 'syz.1.1055': attribute type 10 has an invalid length.
[  110.197591][ T9520] dummy0: left promiscuous mode
[  110.207768][ T9520] team0: Port device dummy0 added
[  110.212189][ T9520] netlink: 'syz.1.1055': attribute type 10 has an invalid length.
[  110.215338][ T9520] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  110.222416][ T9520] team0: Failed to send options change via netlink (err -105)
[  110.224853][ T9520] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  110.228491][ T9520] team0: Port device dummy0 removed
[  110.232495][ T9520] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  110.320541][   T40] audit: type=1400 audit(2000000024.329:928): avc:  denied  { write } for  pid=9521 comm="syz.1.1056" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  110.327562][ T9527] tipc: Started in network mode
[  110.330981][ T9527] tipc: Node identity 0631bf5ca3bd, cluster identity 4711
[  110.334144][ T9527] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.337594][ T9527] syzkaller0: entered promiscuous mode
[  110.343472][ T9527] syzkaller0: entered allmulticast mode
[  110.361576][ T9527] tipc: Resetting bearer <eth:syzkaller0>
[  110.374128][ T9527] tipc: Disabling bearer <eth:syzkaller0>
[  110.438397][ T9540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.440848][ T1468] hid-generic 0008:0002:3ECE.0005: unknown main item tag 0x5
[  110.446789][ T1468] hid-generic 0008:0002:3ECE.0005: item fetching failed at offset 26/27
[  110.452043][ T1468] hid-generic 0008:0002:3ECE.0005: probe with driver hid-generic failed with error -22
[  110.486992][ T9543] Cannot find add_set index 1 as target
[  110.578072][ T9556] misc userio: The device must be registered before sending interrupts
[  110.582541][ T9543] netlink: 'syz.2.1061': attribute type 10 has an invalid length.
[  110.641507][ T9566] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  110.648907][   T40] audit: type=1400 audit(2000000024.659:929): avc:  denied  { override_creds } for  pid=9555 comm="syz.3.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  110.685749][   T40] audit: type=1400 audit(2000000024.699:930): avc:  denied  { create } for  pid=9567 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  110.967861][ T9597] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[  110.974046][ T9597] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[  110.977947][ T9597] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[  110.984168][ T9597] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[  110.988020][ T9597] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[  110.992028][ T9597] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[  110.995134][ T9597] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[  110.998285][ T9597] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[  111.002113][ T9597] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[  111.005817][ T9597] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32)
[  111.027372][ T9580] geneve2: entered promiscuous mode
[  111.030412][ T9580] geneve2: entered allmulticast mode
[  111.041414][ T9604] ipt_REJECT: ECHOREPLY no longer supported.
[  111.129886][ T9607] binder: 9606:9607 ioctl c0306201 200000000640 returned -22
[  111.243677][ T9612] ieee802154 phy0 wpan0: encryption failed: -22
[  111.585254][ T9622] __nla_validate_parse: 50 callbacks suppressed
[  111.585265][ T9622] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1090'.
[  111.595238][ T9623] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1090'.
[  111.786512][ T9646] F2FS-fs: Conflicting test_dummy_encryption options
[  111.789925][ T9647] mac80211_hwsim hwsim7 wlan1: Caught tx_queue_len zero misconfig
[  111.885476][ T9650] dvmrp0: entered allmulticast mode
[  111.888628][ T9650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1098'.
[  112.079858][ T9670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1105'.
[  112.083616][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'.
[  112.089225][ T9670] SET target dimension over the limit!
[  112.100450][ T9660] netlink: 'syz.0.1101': attribute type 10 has an invalid length.
[  112.120759][ T9660] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  112.153287][ T9676] netlink: 'syz.3.1105': attribute type 10 has an invalid length.
[  112.193705][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'.
[  112.197494][ T9679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1107'.
[  112.267472][ T9683] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  112.273179][ T9683] omfs: Invalid superblock (0)
[  112.342519][ T9689] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  112.539674][   T60] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  112.584065][ T9706] program syz.2.1116 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  112.661843][ T9715] netlink: 'syz.0.1119': attribute type 13 has an invalid length.
[  112.689390][   T60] usb 6-1: Using ep0 maxpacket: 16
[  112.692697][   T60] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  112.695318][   T60] usb 6-1: config 0 has no interface number 0
[  112.705597][   T60] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  112.708614][   T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.711959][   T60] usb 6-1: Product: syz
[  112.713422][   T60] usb 6-1: Manufacturer: syz
[  112.715160][   T60] usb 6-1: SerialNumber: syz
[  112.720575][   T60] usb 6-1: config 0 descriptor??
[  112.726575][   T60] hub 6-1:0.132: bad descriptor, ignoring hub
[  112.729387][   T60] hub 6-1:0.132: probe with driver hub failed with error -5
[  112.729907][ T9715] netlink: 'syz.0.1119': attribute type 13 has an invalid length.
[  112.733941][   T60] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.132/input/input21
[  112.931536][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'.
[  112.939955][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'.
[  113.020257][ T9742] ip6tnl2: entered promiscuous mode
[  113.097335][ T9744] xt_connbytes: Forcing CT accounting to be enabled
[  113.116767][ T9749] xt_CT: No such helper "snmp_trap"
[  113.160393][ T9744] bond0: option lp_interval: invalid value (18446744073709551611)
[  113.163645][ T9744] bond0: option lp_interval: allowed values 1 - 2147483647
[  113.167399][ T9744] bond0 (unregistering): Released all slaves
[  113.272045][ T9763] geneve2: entered promiscuous mode
[  113.275042][ T9763] geneve2: entered allmulticast mode
[  113.455119][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'.
[  113.509072][ T6587] usb 6-1: USB disconnect, device number 9
[  113.531516][ T9781] xt_bpf: check failed: parse error
[  113.576658][ T9783] netem: incorrect ge model size
[  113.580456][ T9783] netem: change failed
[  113.907171][ T9799] ip6gre1: entered promiscuous mode
[  113.909616][ T9799] ip6gre1: entered allmulticast mode
[  113.913264][   T46] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.913793][ T9799] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.917090][   T46] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.939007][ T1468] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  114.009460][ T9806] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  114.027067][ T9812] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  114.101085][ T9822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9822 comm=syz.2.1145
[  114.110720][ T9822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16128 sclass=netlink_route_socket pid=9822 comm=syz.2.1145
[  114.320955][ T1468] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  114.406408][ T9842] netlink: 'syz.1.1154': attribute type 29 has an invalid length.
[  114.560923][   T40] kauditd_printk_skb: 20 callbacks suppressed
[  114.560940][   T40] audit: type=1400 audit(2000000028.579:951): avc:  denied  { connect } for  pid=9850 comm="syz.1.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  114.569727][   T40] audit: type=1400 audit(2000000028.579:952): avc:  denied  { name_connect } for  pid=9850 comm="syz.1.1157" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  114.855454][ T9749] Set syz1 is full, maxelem 65536 reached
[  115.009031][ T1468] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  115.034106][ T9873] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  115.061958][ T9875] netlink: 'syz.0.1161': attribute type 4 has an invalid length.
[  115.074485][   T40] audit: type=1400 audit(2000000029.089:953): avc:  denied  { append } for  pid=9880 comm="syz.1.1166" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  115.083926][ T9877] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  115.088974][ T9877] bond0 (unregistering): Released all slaves
[  115.112192][ T9878] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  115.118405][ T9878] bond0 (unregistering): Released all slaves
[  115.236428][   T40] audit: type=1400 audit(2000000029.249:954): avc:  denied  { create } for  pid=9883 comm="syz.0.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  115.244998][   T40] audit: type=1400 audit(2000000029.249:955): avc:  denied  { write } for  pid=9884 comm="syz.2.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  115.271719][ T9892] netlink: del zone limit has 4 unknown bytes
[  115.349305][   T40] audit: type=1400 audit(2000000029.369:956): avc:  denied  { watch } for  pid=9905 comm="syz.2.1174" path="/280/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  115.371363][   T40] audit: type=1400 audit(2000000029.379:957): avc:  denied  { watch_sb } for  pid=9905 comm="syz.2.1174" path="/280/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  115.387694][ T9906] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  115.519047][   T40] audit: type=1400 audit(2000000029.529:958): avc:  denied  { getopt } for  pid=9932 comm="syz.3.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  115.527764][   T40] audit: type=1400 audit(2000000029.539:959): avc:  denied  { setattr } for  pid=9935 comm="syz.0.1182" path="pipe:[30196]" dev="pipefs" ino=30196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  115.621724][   T40] audit: type=1400 audit(2000000029.639:960): avc:  denied  { bind } for  pid=9942 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  115.630032][ T9948] macsec0: entered promiscuous mode
[  115.715080][ T9967] hugetlbfs: Bad value 'B%' for mount option 'size'
[  115.715080][ T9967] 
[  115.931296][ T9991] netlink: 'syz.0.1200': attribute type 16 has an invalid length.
[  116.299909][T10009] binder: 10007:10009 ioctl 4018620d 0 returned -22
[  116.468452][T10028] tls_set_device_offload_rx: netdev not found
[  116.562909][T10045] overlay: ./file0 is not a directory
[  116.562953][T10046] overlay: ./file0 is not a directory
[  116.682523][T10059] 
: renamed from bridge_slave_0 (while UP)
[  116.709057][    T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  116.814560][T10071] ALSA: seq fatal error: cannot create timer (-16)
[  116.817408][T10071] binder: 10069:10071 ioctl 4004743a 200000000040 returned -22
[  116.859105][    T9] usb 8-1: Using ep0 maxpacket: 32
[  116.862090][    T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  116.873103][    T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  116.887175][    T9] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  116.890786][    T9] usb 8-1: Product: syz
[  116.892549][    T9] usb 8-1: Manufacturer: syz
[  116.894462][    T9] usb 8-1: SerialNumber: syz
[  116.910870][    T9] usb 8-1: config 0 descriptor??
[  116.919169][    T9] usb 8-1: can't set config #0, error -71
[  116.930965][    T9] usb 8-1: USB disconnect, device number 10
[  116.977843][T10087] overlay: Bad value for 'workdir'
[  117.072304][T10093] netlink: 'syz.3.1229': attribute type 1 has an invalid length.
[  117.084908][T10093] 8021q: adding VLAN 0 to HW filter on device bond5
[  117.093060][T10095] bond5: (slave ip6gretap2): making interface the new active one
[  117.096479][T10095] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link
[  117.278052][T10108] binder: 10106:10108 unknown command 1074029364
[  117.280225][T10108] binder: 10106:10108 ioctl c0306201 2000000004c0 returned -22
[  117.361851][T10123] ttyS ttyS3: ldisc open failed (-12), clearing slot 3
[  117.382541][T10127] 9pnet_virtio: no channels available for device syz
[  117.397428][T10127] ufs: You didn't specify the type of your ufs filesystem
[  117.397428][T10127] 
[  117.397428][T10127] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  117.397428][T10127] 
[  117.397428][T10127] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  117.413735][T10127] ufs: failed to set blocksize
[  117.479686][T10127] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  117.620736][ T6015] IPVS: starting estimator thread 0...
[  117.695440][T10163] bridge0: port 3(veth0_to_bridge) entered blocking state
[  117.697693][T10163] bridge0: port 3(veth0_to_bridge) entered disabled state
[  117.700303][T10163] veth0_to_bridge: entered allmulticast mode
[  117.702825][T10163] veth0_to_bridge: entered promiscuous mode
[  117.704593][T10163] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  117.708477][T10163] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:4094)
[  117.713383][T10147] IPVS: using max 46 ests per chain, 110400 per kthread
[  117.715484][T10163] bridge0: port 3(veth0_to_bridge) entered blocking state
[  117.717528][T10163] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  117.810042][ T5939] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  117.930246][T10181] __nla_validate_parse: 8 callbacks suppressed
[  117.930262][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1255'.
[  117.938923][ T5939] usb 7-1: device descriptor read/64, error -71
[  117.968881][    T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  118.119552][    T9] usb 8-1: too many configurations: 111, using maximum allowed: 8
[  118.123644][    T9] usb 8-1: unable to read config index 0 descriptor/start: -61
[  118.126324][    T9] usb 8-1: can't read configurations, error -61
[  118.143633][T10204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.179006][ T5939] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  118.218947][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  118.260103][    T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  118.318987][ T5939] usb 7-1: device descriptor read/64, error -71
[  118.419625][    T9] usb 8-1: too many configurations: 111, using maximum allowed: 8
[  118.426141][    T9] usb 8-1: unable to read config index 0 descriptor/start: -61
[  118.429258][    T9] usb 8-1: can't read configurations, error -61
[  118.433527][ T5939] usb usb7-port1: attempt power cycle
[  118.436648][    T9] usb usb8-port1: attempt power cycle
[  118.767050][T10229] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  118.788946][ T5939] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  118.793247][    T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  118.807983][T10231] trusted_key: syz.1.1268 sent an empty control message without MSG_MORE.
[  118.820899][ T5939] usb 7-1: device descriptor read/8, error -71
[  118.826428][    T9] usb 8-1: too many configurations: 111, using maximum allowed: 8
[  118.831577][    T9] usb 8-1: unable to read config index 0 descriptor/start: -61
[  118.834948][    T9] usb 8-1: can't read configurations, error -61
[  118.884106][T10237] binder: 10236:10237 unknown command 0
[  118.885895][T10237] binder: 10236:10237 ioctl c0306201 200000000080 returned -22
[  118.971160][    T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  118.990042][    T9] usb 8-1: too many configurations: 111, using maximum allowed: 8
[  118.994276][    T9] usb 8-1: unable to read config index 0 descriptor/start: -61
[  118.996980][    T9] usb 8-1: can't read configurations, error -61
[  119.000169][    T9] usb usb8-port1: unable to enumerate USB device
[  119.024071][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1273'.
[  119.026870][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1273'.
[  119.030000][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'.
[  119.058955][ T5939] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  119.079861][ T5939] usb 7-1: device descriptor read/8, error -71
[  119.098332][T10251] lo speed is unknown, defaulting to 1000
[  119.101974][T10251] lo speed is unknown, defaulting to 1000
[  119.105326][T10251] lo speed is unknown, defaulting to 1000
[  119.110510][T10251] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  119.124036][T10251] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  119.138559][T10251] lo speed is unknown, defaulting to 1000
[  119.142441][T10251] lo speed is unknown, defaulting to 1000
[  119.145003][T10251] lo speed is unknown, defaulting to 1000
[  119.148705][T10251] lo speed is unknown, defaulting to 1000
[  119.191174][ T5939] usb usb7-port1: unable to enumerate USB device
[  119.413007][T10260] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22)
[  119.764680][T10279] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.1281'.
[  119.767660][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'.
[  119.768177][T10277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1283'.
[  119.774871][T10277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1283'.
[  119.797774][T10277] lo speed is unknown, defaulting to 1000
[  120.177743][   T40] kauditd_printk_skb: 20 callbacks suppressed
[  120.177755][   T40] audit: type=1400 audit(2000000034.189:981): avc:  denied  { connect } for  pid=10306 comm="syz.0.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  120.375016][T10320] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10320 comm=syz.0.1297
[  120.587592][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1302'.
[  120.598610][T10337] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1302'.
[  120.605190][T10337] netlink: 'syz.1.1302': attribute type 21 has an invalid length.
[  120.641259][T10342] netlink: 'syz.1.1304': attribute type 3 has an invalid length.
[  120.668566][T10344] QAT: Device 2 not found
[  120.734689][T10355] sctp: [Deprecated]: syz.1.1308 (pid 10355) Use of int in max_burst socket option.
[  120.734689][T10355] Use struct sctp_assoc_value instead
[  120.747921][T10358] SELinux:  Context � is not valid (left unmapped).
[  120.772422][T10367] Can't find a SQUASHFS superblock on nullb0
[  120.775900][T10367] Can't find a SQUASHFS superblock on nullb0
[  120.782833][T10366] vlan3: entered promiscuous mode
[  120.784458][T10366] bridge0: entered promiscuous mode
[  120.852376][   T40] audit: type=1400 audit(2000000034.869:982): avc:  denied  { mounton } for  pid=10380 comm="syz.2.1317" path="/proc/912/task" dev="proc" ino=31993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  120.863017][   T40] audit: type=1400 audit(2000000034.869:983): avc:  denied  { mount } for  pid=10380 comm="syz.2.1317" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  120.910165][   T40] audit: type=1400 audit(2000000034.929:984): avc:  denied  { ioctl } for  pid=10385 comm="syz.3.1318" path="socket:[30519]" dev="sockfs" ino=30519 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  120.945694][T10388] lo speed is unknown, defaulting to 1000
[  120.979317][T10391] netlink: zone id is out of range
[  120.981022][T10391] netlink: zone id is out of range
[  120.982637][T10391] netlink: zone id is out of range
[  120.984234][T10391] netlink: zone id is out of range
[  120.985885][T10391] netlink: zone id is out of range
[  120.987595][T10391] netlink: zone id is out of range
[  120.989792][T10391] netlink: zone id is out of range
[  120.991472][T10391] netlink: zone id is out of range
[  120.992883][T10391] netlink: zone id is out of range
[  120.994511][T10391] netlink: zone id is out of range
[  121.009556][   T40] audit: type=1400 audit(2000000035.029:985): avc:  denied  { connect } for  pid=10385 comm="syz.3.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  121.084161][   T40] audit: type=1400 audit(2000000035.099:986): avc:  denied  { append } for  pid=10400 comm="syz.2.1321" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  121.644017][T10459] netlink: 'syz.1.1340': attribute type 4 has an invalid length.
[  121.728426][   T40] audit: type=1400 audit(2000000035.729:987): avc:  denied  { map } for  pid=10460 comm="syz.0.1341" path="socket:[31075]" dev="sockfs" ino=31075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  121.805993][T10468] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  121.974149][T10490] netlink: 'syz.1.1351': attribute type 10 has an invalid length.
[  121.976517][   T40] audit: type=1400 audit(2000000035.989:988): avc:  denied  { ioctl } for  pid=10489 comm="syz.3.1350" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x4b6d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  122.103030][T10513] xfrm0 speed is unknown, defaulting to 1000
[  122.105362][   T40] audit: type=1400 audit(2000000036.119:989): avc:  denied  { nlmsg_read } for  pid=10510 comm="syz.1.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  122.106284][T10513] xfrm0 speed is unknown, defaulting to 1000
[  122.109080][T10514] siw: device registration error -23
[  122.117383][T10513] xfrm0 speed is unknown, defaulting to 1000
[  122.127918][T10513] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  122.141931][T10513] xfrm0 speed is unknown, defaulting to 1000
[  122.145013][T10513] xfrm0 speed is unknown, defaulting to 1000
[  122.150850][T10513] xfrm0 speed is unknown, defaulting to 1000
[  122.154223][T10513] xfrm0 speed is unknown, defaulting to 1000
[  122.160919][T10518] xt_nfacct: accounting object `syz0' does not exist
[  122.239579][   T40] audit: type=1400 audit(2000000036.259:990): avc:  denied  { setopt } for  pid=10526 comm="syz.3.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  122.268338][T10529] mac80211_hwsim hwsim5 : renamed from wlan1
[  122.659619][T10554] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  122.829530][T10565] binder: Bad value for 'max'
[  122.937590][T10575] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10575 comm=syz.2.1380
[  122.977364][T10579] ip6tnl0: Caught tx_queue_len zero misconfig
[  122.979661][T10579] netlink: 'syz.0.1381': attribute type 3 has an invalid length.
[  123.110384][T10602] __nla_validate_parse: 15 callbacks suppressed
[  123.110402][T10602] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.1389'.
[  123.154207][T10608] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1390'.
[  123.268742][T10622] tmpfs: Bad value for 'huge'
[  123.300135][T10627] libceph: resolve '
[  123.300135][T10627] -&���f�Y�ǝ�a���2i�
[  123.300135][T10627] .���?��&�*��&' (ret=-3): failed
[  123.305566][T10634] libceph: resolve '
[  123.305566][T10634] -&���f�Y�ǝ�a���2i�
[  123.305566][T10634] .���?��&�*��&' (ret=-3): failed
[  123.354618][T10638] kvm: kvm [10636]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111
[  123.384293][T10650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=10650 comm=syz.1.1402
[  123.398397][T10654] netlink: 'syz.0.1404': attribute type 1 has an invalid length.
[  123.464758][T10663] netlink: 'syz.3.1407': attribute type 1 has an invalid length.
[  123.467187][T10663] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1407'.
[  123.470646][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'.
[  123.605996][T10678] netlink: 'syz.3.1414': attribute type 1 has an invalid length.
[  123.620032][T10678] 8021q: adding VLAN 0 to HW filter on device bond7
[  123.625154][T10678] bond7: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  123.634523][ T5939] IPVS: starting estimator thread 0...
[  123.635303][T10678] bond7: entered allmulticast mode
[  123.637141][T10676] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  123.646182][T10676] syzkaller1: entered promiscuous mode
[  123.648011][T10676] syzkaller1: entered allmulticast mode
[  123.720945][T10685] tipc: Can't bind to reserved service type 0
[  123.740683][T10682] IPVS: using max 46 ests per chain, 110400 per kthread
[  123.837540][T10693] netlink: 'syz.3.1417': attribute type 12 has an invalid length.
[  123.840372][T10693] netlink: 'syz.3.1417': attribute type 12 has an invalid length.
[  123.933929][T10698] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  124.462499][T10717] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  124.465862][T10717] UDF-fs: Scanning with blocksize 2048 failed
[  124.473739][T10717] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  124.476089][T10717] UDF-fs: Scanning with blocksize 4096 failed
[  124.521500][T10717] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  124.930587][T10701] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  124.949011][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'.
[  124.956409][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'.
[  125.000046][T10738] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1430'.
[  125.036802][T10742] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1432'.
[  125.043740][T10748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1434'.
[  125.047151][T10748] bridge0: entered allmulticast mode
[  125.069760][T10748] xt_CT: No such helper "pptp"
[  125.072936][T10753] Cannot find add_set index 65532 as target
[  125.075287][T10753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1433'.
[  125.096366][T10757] /dev/sg0: Can't lookup blockdev
[  127.409028][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  132.533956][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.536089][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  138.348623][   T40] kauditd_printk_skb: 555 callbacks suppressed
[  138.348638][   T40] audit: type=1400 audit(2000000052.359:1546): avc:  denied  { setattr } for  pid=10762 comm="syz.3.1441" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  138.356262][T10764] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1441'.
[  138.452059][   T40] audit: type=1400 audit(2000000052.469:1547): avc:  denied  { mount } for  pid=10795 comm="syz.0.1447" name="/" dev="configfs" ino=3217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  138.503988][T10801] validate_nla: 34 callbacks suppressed
[  138.504009][T10801] netlink: 'syz.0.1447': attribute type 63 has an invalid length.
[  138.509332][T10801] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  138.750462][   T40] audit: type=1400 audit(2000000052.769:1548): avc:  denied  { getopt } for  pid=10826 comm="syz.2.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  138.816332][T10833] syzkaller1: entered promiscuous mode
[  138.889004][T10839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54743 sclass=netlink_route_socket pid=10839 comm=syz.3.1457
[  138.901818][T10841] netlink: 'syz.2.1459': attribute type 1 has an invalid length.
[  138.926715][T10841] bond0: (slave bridge2): making interface the new active one
[  138.931541][T10841] bond0: (slave bridge2): Enslaving as an active interface with an up link
[  139.120868][T10856] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1462'.
[  139.208033][T10869] netlink: 'syz.2.1467': attribute type 2 has an invalid length.
[  139.212063][   T40] audit: type=1400 audit(2000000053.229:1549): avc:  denied  { getopt } for  pid=10865 comm="syz.3.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  139.261298][T10874] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1468'.
[  139.264978][T10874] Cannot find del_set index 4 as target
[  139.318705][   T40] audit: type=1400 audit(2000000053.329:1550): avc:  denied  { getattr } for  pid=10880 comm="syz.0.1471" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  139.348045][ T1145] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  139.391394][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'.
[  139.394640][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'.
[  139.401523][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'.
[  139.456502][ T6871] tipc: Subscription rejected, illegal request
[  139.486394][T10912] lo: Caught tx_queue_len zero misconfig
[  139.541504][T10928] /dev/nbd0: Can't lookup blockdev
[  139.607524][   T40] audit: type=1400 audit(2000000053.619:1551): avc:  denied  { map } for  pid=10936 comm="syz.1.1489" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  139.616407][   T40] audit: type=1400 audit(2000000053.619:1552): avc:  denied  { execute } for  pid=10936 comm="syz.1.1489" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  139.634395][T10944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10944 comm=syz.0.1492
[  139.643710][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'.
[  139.646527][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'.
[  139.678196][   T40] audit: type=1400 audit(2000000053.689:1553): avc:  denied  { setopt } for  pid=10949 comm="syz.0.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  139.769254][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1497'.
[  139.772054][T10963] net_ratelimit: 6 callbacks suppressed
[  139.772062][T10963] openvswitch: netlink: Flow actions attr not present in new flow.
[  139.810966][T10970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1499'.
[  139.837862][T10973] openvswitch: netlink: Missing key (keys=40, expected=100)
[  139.846584][   T40] audit: type=1400 audit(2000000309.869:1554): avc:  denied  { bind } for  pid=10974 comm="syz.1.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  139.871223][   T53] usb 8-1: new full-speed USB device number 15 using dummy_hcd
[  139.906176][T10979] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  139.910236][T10977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  139.963876][   T40] audit: type=1400 audit(2000000309.979:1555): avc:  denied  { write } for  pid=10981 comm="syz.2.1504" name="file0" dev="tmpfs" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  140.008963][   T53] usb 8-1: device descriptor read/64, error -71
[  140.278838][   T53] usb 8-1: new full-speed USB device number 16 using dummy_hcd
[  140.418938][   T53] usb 8-1: device descriptor read/64, error -71
[  140.539821][   T53] usb usb8-port1: attempt power cycle
[  140.898852][   T53] usb 8-1: new full-speed USB device number 17 using dummy_hcd
[  140.929634][   T53] usb 8-1: device descriptor read/8, error -71
[  141.189000][   T53] usb 8-1: new full-speed USB device number 18 using dummy_hcd
[  141.219700][   T53] usb 8-1: device descriptor read/8, error -71
[  141.303045][T11031] veth0: entered promiscuous mode
[  141.310643][T11033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11033 comm=syz.2.1520
[  141.315328][T11033] netlink: 'syz.2.1520': attribute type 1 has an invalid length.
[  141.330145][   T53] usb usb8-port1: unable to enumerate USB device
[  141.395063][T11039] fuse: Unknown parameter 'n�70x0000000000000005'
[  141.398279][T11039] overlayfs: overlapping lowerdir path
[  141.402416][T11031] bond1: (slave vlan0): Releasing active interface
[  141.425372][T11037] bond2: (slave bridge3): making interface the new active one
[  141.428389][T11037] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  141.513625][T11049] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  141.580928][T11059] : entered promiscuous mode
[  141.973127][T11101] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  142.182492][T11114] netlink: 'syz.1.1545': attribute type 13 has an invalid length.
[  142.710948][T11132] bond0 (unregistering): Released all slaves
[  143.145200][T11145] autofs4:pid:11145:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374)
[  143.149740][T11145] autofs4:pid:11145:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374)
[  143.237837][T11151] netlink: 'syz.1.1559': attribute type 10 has an invalid length.
[  143.242936][T11151] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  143.322803][T11156] atomic_op ffff888057c23998 conn xmit_atomic 0000000000000000
[  143.402387][   T40] kauditd_printk_skb: 11 callbacks suppressed
[  143.402398][   T40] audit: type=1400 audit(2000000313.419:1567): avc:  denied  { listen } for  pid=11159 comm="syz.1.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  143.410727][   T40] audit: type=1400 audit(2000000313.419:1568): avc:  denied  { accept } for  pid=11159 comm="syz.1.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  143.411369][T11162] __nla_validate_parse: 7 callbacks suppressed
[  143.411380][T11162] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1563'.
[  143.422231][T11162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  143.429505][T11162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1563'.
[  143.488967][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  143.611932][   T40] audit: type=1400 audit(2000000313.629:1569): avc:  denied  { unmount } for  pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  143.634650][T11173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60193 sclass=netlink_route_socket pid=11173 comm=syz.2.1568
[  143.669753][T11176] SELinux: failed to load policy
[  143.841559][T11186] fuse: Unknown parameter 'group}�spt�@D�X��9U�S��;��}�p�I������&(zmd����'
[  143.937312][T11190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1574'.
[  144.051919][T11192] netlink: 'syz.2.1575': attribute type 64 has an invalid length.
[  144.054412][T11192] netlink: 'syz.2.1575': attribute type 4 has an invalid length.
[  144.056850][T11192] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1575'.
[  144.091306][T11194] nfs4: Unknown parameter ':'
[  144.284566][T11207] program syz.1.1582 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  144.338682][T11209] netlink: 'syz.2.1583': attribute type 30 has an invalid length.
[  144.339387][ T1114] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[  144.344257][ T1114] ata1.00: irq_stat 0x40000000
[  144.345896][ T1114] ata1.00: failed command: ZAC MANAGEMENT OUT
[  144.347836][ T1114] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 24
[  144.347836][ T1114]          res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error)
[  144.355034][ T1114] ata1.00: status: { DRDY ERR }
[  144.357090][ T1114] ata1.00: error: { ABRT }
[  144.359434][ T1114] ata1.00: device reported invalid CHS sector 0
[  144.445777][T11203] netlink: 'syz.0.1580': attribute type 1 has an invalid length.
[  144.455290][T11214] erspan0: entered promiscuous mode
[  144.456875][T11215] comedi comedi0: No channels found!
[  144.489974][T11203] 8021q: adding VLAN 0 to HW filter on device bond6
[  144.494691][T11226] netlink: 'syz.2.1587': attribute type 1 has an invalid length.
[  144.495005][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1580'.
[  144.510297][T11229] max out of range
[  144.512513][   T40] audit: type=1400 audit(2000000314.529:1570): avc:  denied  { remount } for  pid=11227 comm="syz.3.1588" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  144.517935][T11226] 8021q: adding VLAN 0 to HW filter on device bond3
[  144.526736][T11226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1587'.
[  144.579085][   T40] audit: type=1400 audit(2000000314.589:1571): avc:  denied  { bind } for  pid=11230 comm="syz.3.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  144.593702][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'.
[  144.614489][T11203] bond6 (unregistering): Released all slaves
[  144.628273][T11226] bond3: entered allmulticast mode
[  144.680583][T11237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1590'.
[  144.683406][T11237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1590'.
[  144.852875][T11252] random: crng reseeded on system resumption
[  144.852877][   T40] audit: type=1400 audit(2000000314.869:1572): avc:  denied  { ioctl } for  pid=11250 comm="syz.3.1595" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  144.880272][   T40] audit: type=1400 audit(2000000314.899:1573): avc:  denied  { attach_queue } for  pid=11251 comm="syz.2.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  144.889965][   T40] audit: type=1400 audit(2000000314.909:1574): avc:  denied  { mount } for  pid=11251 comm="syz.2.1596" name="/" dev="pstore" ino=4549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  144.954323][   T40] audit: type=1400 audit(2000000314.969:1575): avc:  denied  { write } for  pid=11261 comm="syz.3.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  144.961446][T11263] sock: sock_set_timeout: `syz.3.1599' (pid 11263) tries to set negative timeout
[  145.046176][   T40] audit: type=1400 audit(2000000315.059:1576): avc:  denied  { ioctl } for  pid=11284 comm="syz.0.1605" path="socket:[38030]" dev="sockfs" ino=38030 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  145.060462][T11278] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1603'.
[  145.080596][T11290] netlink: 'syz.1.1606': attribute type 15 has an invalid length.
[  145.099374][T11295] xt_recent: Unsupported userspace flags (000000b2)
[  145.196500][T11299] netlink: 'syz.1.1610': attribute type 3 has an invalid length.
[  145.282063][T11310] ipvlan2: entered allmulticast mode
[  145.283745][T11310] team0: entered allmulticast mode
[  145.285630][T11310] team_slave_0: entered allmulticast mode
[  145.287414][T11310] team_slave_1: entered allmulticast mode
[  145.290441][T11310] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  145.341006][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.439831][T11325] vlan5: entered promiscuous mode
[  145.442258][T11325] bridge0: entered promiscuous mode
[  145.480017][T11328] fuse: Bad value for 'fd'
[  145.571290][    C2] ata1: illegal qc_active transition (00000000->00040000)
[  145.903291][ T1114] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  145.906622][ T1114] ata1.00: configured for UDMA/100
[  146.676784][T11398] macvlan0: entered promiscuous mode
[  146.678555][T11398] macvlan0: entered allmulticast mode
[  146.680405][T11398] veth1_vlan: entered allmulticast mode
[  146.689164][T11402] netlink: zone id is out of range
[  146.690763][T11402] netlink: zone id is out of range
[  146.693942][T11402] netlink: set zone limit has 8 unknown bytes
[  146.694416][T11400] 8021q: adding VLAN 0 to HW filter on device bond8
[  146.707794][T11400] bond8: (slave batadv1): Opening slave failed
[  146.759909][T11390] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  146.842684][T11412] netlink: 'syz.3.1642': attribute type 21 has an invalid length.
[  146.845814][T11412] IPv6: NLM_F_CREATE should be specified when creating new route
[  146.882546][T11416] comedi comedi3: aio_aio12_8: a I/O base address must be specified
[  146.985159][T11438] team0: left allmulticast mode
[  146.987239][T11438] team_slave_1: left allmulticast mode
[  146.989590][T11438] dummy0: left allmulticast mode
[  146.991286][T11438] bridge0: port 1(team0) entered disabled state
[  146.994857][T11438] dummy0: left promiscuous mode
[  146.997549][T11438] team0: Port device dummy0 removed
[  147.000165][T11438] bridge_slave_1: left allmulticast mode
[  147.002493][T11438] bridge_slave_1: left promiscuous mode
[  147.005013][T11438] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.011194][T11438] team_slave_1: left promiscuous mode
[  147.013636][T11438] team0: Port device team_slave_1 removed
[  147.016079][T11438] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.019180][T11438] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.022103][T11438] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  147.030760][T11442] bond0: (slave dummy0): Releasing backup interface
[  147.040565][T11442] bond0: (slave bond_slave_0): Releasing backup interface
[  147.045909][T11442] bond0: (slave bond_slave_1): Releasing backup interface
[  147.050649][T11442] team_slave_0: left allmulticast mode
[  147.056857][T11442] team0: Port device team_slave_0 removed
[  147.060163][T11442] team_slave_1: left allmulticast mode
[  147.065426][T11442] team0: Port device team_slave_1 removed
[  147.068723][T11442] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.072017][T11442] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.077614][T11442] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.080338][T11442] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.084399][T11442] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  147.096045][T11440] netlink: 'syz.0.1652': attribute type 2 has an invalid length.
[  147.126434][T11443] team0: Mode changed to "loadbalance"
[  147.132786][T11442] vlan0: entered promiscuous mode
[  147.137843][T11442] vlan0: entered allmulticast mode
[  147.140028][T11442] veth0_vlan: entered allmulticast mode
[  147.143115][T11442] team0: Port device vlan0 added
[  147.215894][T11443] tipc: Enabled bearer <eth:team0>, priority 0
[  147.259182][T11455] overlay: filesystem on ./file0 not supported as upperdir
[  147.310612][T11462] btrfs: Unknown parameter 'acl'
[  147.352350][T11468] syzkaller0: entered promiscuous mode
[  147.354024][T11468] syzkaller0: entered allmulticast mode
[  147.379090][ T5931] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  147.539689][ T5931] usb 8-1: Using ep0 maxpacket: 32
[  147.542455][ T5931] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  147.547583][ T5931] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  147.550443][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  147.552892][ T5931] usb 8-1: Product: syz
[  147.554200][ T5931] usb 8-1: Manufacturer: syz
[  147.555615][ T5931] usb 8-1: SerialNumber: syz
[  147.567947][ T5931] usb 8-1: config 0 descriptor??
[  147.570841][T11448] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  147.632242][ T5933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  147.637379][ T5933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  147.641144][ T5933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  147.645804][ T5933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  147.648665][ T5933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  147.662460][ T5946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  147.670175][ T5946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  147.676051][ T5946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  147.679885][T11509] 9pnet_fd: Insufficient options for proto=fd
[  147.685312][ T5946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  147.688399][ T5946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  147.705982][T11506] lo speed is unknown, defaulting to 1000
[  147.708581][T11506] xfrm0 speed is unknown, defaulting to 1000
[  147.724616][T11503] syz.1.1671 (11503) used greatest stack depth: 19544 bytes left
[  147.780894][    T9] usb 8-1: USB disconnect, device number 19
[  147.815271][T11506] chnl_net:caif_netlink_parms(): no params data found
[  147.915535][T11506] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.917817][T11506] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.920407][T11506] bridge_slave_0: entered allmulticast mode
[  147.922980][T11506] bridge_slave_0: entered promiscuous mode
[  147.926205][T11506] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.928413][T11506] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.930860][T11506] bridge_slave_1: entered allmulticast mode
[  147.933405][T11506] bridge_slave_1: entered promiscuous mode
[  147.974521][T11506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.981292][T11506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.021204][T11506] team0: Port device team_slave_0 added
[  148.024589][T11506] team0: Port device team_slave_1 added
[  148.055255][T11506] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.057950][T11506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  148.066658][T11506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.070744][T11506] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.072763][T11506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  148.080573][T11506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.118133][T11506] hsr_slave_0: entered promiscuous mode
[  148.121779][T11506] hsr_slave_1: entered promiscuous mode
[  148.123806][T11506] debugfs: 'hsr0' already exists in 'hsr'
[  148.125664][T11506] Cannot create hsr debugfs directory
[  148.249933][T11506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.253212][T11506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.336456][T11506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.341541][T11506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.349534][T11540] bridge_slave_0: default FDB implementation only supports local addresses
[  148.411575][T11547] ntfs3(sr0): Primary boot signature is not NTFS.
[  148.414108][T11547] ntfs3(sr0): try to read out of volume at offset 0xf800
[  148.449654][T11506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.452803][T11506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.481921][T11547] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  148.562321][   T40] kauditd_printk_skb: 20 callbacks suppressed
[  148.562335][   T40] audit: type=1400 audit(2000000318.579:1597): avc:  denied  { read } for  pid=11564 comm="syz.3.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  148.590444][T11567] __nla_validate_parse: 12 callbacks suppressed
[  148.590458][T11567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1691'.
[  148.596698][T11567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1691'.
[  148.598043][T11506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.604397][T11506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.708207][T11506] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  148.712223][T11506] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  148.717386][T11506] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  148.721398][T11506] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  148.785936][T11506] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.801125][T11506] 8021q: adding VLAN 0 to HW filter on device team0
[  148.808165][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.810440][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.819636][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.821834][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.843990][   T40] audit: type=1400 audit(2000000318.859:1598): avc:  denied  { egress } for  pid=9 comm="kworker/0:0" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  148.852026][   T40] audit: type=1400 audit(2000000318.859:1599): avc:  denied  { sendto } for  pid=9 comm="kworker/0:0" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  148.968509][T11506] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.997431][T11506] veth0_vlan: entered promiscuous mode
[  149.003795][T11506] veth1_vlan: entered promiscuous mode
[  149.026565][T11506] veth0_macvtap: entered promiscuous mode
[  149.033181][T11506] veth1_macvtap: entered promiscuous mode
[  149.046707][T11506] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.056436][T11585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1694'.
[  149.056631][T11506] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.069808][ T6889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.073584][ T6889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.076626][ T6889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.083068][ T6889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.104223][T11587] IPv6: addrconf: prefix option has invalid lifetime
[  149.135823][ T6879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.138190][ T6879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.165767][ T6879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.169439][ T6879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.177997][   T40] audit: type=1400 audit(2000000319.189:1600): avc:  denied  { mounton } for  pid=11506 comm="syz-executor" path="/syzkaller.PA9seP/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  149.186684][   T40] audit: type=1400 audit(2000000319.199:1601): avc:  denied  { mounton } for  pid=11506 comm="syz-executor" path="/syzkaller.PA9seP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  149.189670][T11591] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  149.196887][   T40] audit: type=1400 audit(2000000319.199:1602): avc:  denied  { mounton } for  pid=11506 comm="syz-executor" path="/syzkaller.PA9seP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  149.211591][   T40] audit: type=1400 audit(2000000319.219:1603): avc:  denied  { mounton } for  pid=11506 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  149.220936][   T40] audit: type=1400 audit(2000000319.219:1604): avc:  denied  { mounton } for  pid=11506 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  149.245740][   T40] audit: type=1400 audit(2000000319.259:1605): avc:  denied  { setopt } for  pid=11592 comm="syz.0.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  149.259494][   T40] audit: type=1400 audit(2000000319.279:1606): avc:  denied  { map } for  pid=11597 comm="syz.1.1698" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  149.339896][T11604] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  149.420749][    C0] vkms_vblank_simulate: vblank timer overrun
[  149.603331][T11624] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  149.729272][ T5946] Bluetooth: hci4: command tx timeout
[  149.743577][T11628] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  149.752162][T11628] CIFS mount error: No usable UNC path provided in device string!
[  149.752162][T11628] 
[  149.755318][T11628] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  149.810979][T11627] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  150.005535][T11642] netlink: 'syz.0.1714': attribute type 2 has an invalid length.
[  150.016547][T11647] 9p: Unknown Cache mode or invalid value fs
[  150.216420][T11664] gfs2: error -5 reading superblock
[  150.221529][T11660] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1719'.
[  150.295841][T11674] kvm: kvm [11673]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x23
[  150.301488][T11674] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.1723'.
[  150.402547][T11688] kernel profiling enabled (shift: 34)
[  150.405375][T11688] profiling shift: 34 too large
[  150.412591][T11688] mkiss: ax0: crc mode is auto.
[  150.458325][T11696] xt_hashlimit: size too large, truncated to 1048576
[  150.458359][T11697] xt_hashlimit: size too large, truncated to 1048576
[  150.526454][T11697] macvlan2: entered promiscuous mode
[  150.528089][T11697] macvlan2: entered allmulticast mode
[  150.538591][T11697] bond0: (slave macvlan2): Opening slave failed
[  150.668885][ T1468] usb 8-1: new full-speed USB device number 20 using dummy_hcd
[  150.791787][T11710] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1735'.
[  150.822917][ T1468] usb 8-1: unable to get BOS descriptor or descriptor too short
[  150.826680][ T1468] usb 8-1: unable to read config index 0 descriptor/start: -71
[  150.829271][ T1468] usb 8-1: can't read configurations, error -71
[  150.955287][T11726] ptrace attach of "/syz-executor exec"[5927] was attempted by ""[11726]
[  151.001964][T11731] netlink: 'syz.0.1739': attribute type 1 has an invalid length.
[  151.199900][T11736] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  151.203858][T11736] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  151.599061][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[  151.601716][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[  152.016738][ T5946] Bluetooth: hci4: command tx timeout
[  152.022470][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  152.025668][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  152.028425][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  152.031979][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  152.239387][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  152.269269][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  152.378933][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  152.735391][T11773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1752'.
[  152.825988][T11778] kvm: pic: non byte read
[  152.828696][T11778] kvm: pic: non byte read
[  153.026227][T11787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1758'.
[  153.078447][T11802] veth1_vlan: left allmulticast mode
[  153.103135][   T46] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.106410][   T46] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.111189][   T46] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.114749][   T46] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.115022][T11802] netlink: 'syz.2.1761': attribute type 7 has an invalid length.
[  153.120886][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'.
[  153.185527][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'.
[  153.188259][T11804] netlink: 'syz.3.1762': attribute type 11 has an invalid length.
[  153.191488][T11804] netlink: 'syz.3.1762': attribute type 13 has an invalid length.
[  153.222223][T11814] sit0: entered promiscuous mode
[  153.224375][T11814] netlink: 'syz.2.1765': attribute type 1 has an invalid length.
[  153.253909][T11824] cgroup: Invalid name
[  153.406518][T11834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11834 comm=syz.0.1771
[  153.602615][T11847] CIFS mount error: No usable UNC path provided in device string!
[  153.602615][T11847] 
[  153.605689][T11847] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  153.610150][T11848] CIFS mount error: No usable UNC path provided in device string!
[  153.610150][T11848] 
[  153.613224][T11848] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  153.626251][T11851] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  153.628754][T11851] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  153.633367][T11851] netlink: 'syz.0.1776': attribute type 10 has an invalid length.
[  153.640028][T11851] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  153.647496][T11853] overlay: ./file0 is not a directory
[  153.828170][T11860] team0 (unregistering): Port device team_slave_0 removed
[  153.839312][T11860] team0 (unregistering): Port device team_slave_1 removed
[  153.944488][T11886] overlayfs: failed to resolve './file0': -2
[  153.949763][T11887] binder: BINDER_SET_CONTEXT_MGR already set
[  153.952028][T11887] binder: 11883:11887 ioctl 4018620d 200000000100 returned -16
[  154.050799][ T5946] Bluetooth: hci4: command tx timeout
[  154.103679][T11903] overlayfs: conflicting lowerdir path
[  154.113725][   T40] kauditd_printk_skb: 16 callbacks suppressed
[  154.113735][   T40] audit: type=1400 audit(2000000324.129:1623): avc:  denied  { setattr } for  pid=11904 comm="syz.0.1790" path="/dev/video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  154.428203][T11916] netlink: 'syz.2.1794': attribute type 1 has an invalid length.
[  154.432945][T11916] __nla_validate_parse: 4 callbacks suppressed
[  154.432979][T11916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1794'.
[  154.521244][   T40] audit: type=1400 audit(2000000324.539:1624): avc:  denied  { append } for  pid=11920 comm="syz.2.1796" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  154.532491][T11921] devpts: Bad value for 'max'
[  154.539286][T11923] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1797'.
[  154.540472][T11921] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  154.547752][   T40] audit: type=1400 audit(2000000324.559:1625): avc:  denied  { append } for  pid=11922 comm="syz.1.1797" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  154.597569][T11927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.601423][T11927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.605749][T11927] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1798'.
[  154.609047][T11928] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1798'.
[  154.762721][T11931] tipc: Resetting bearer <eth:team0>
[  154.829763][T11934] netlink: 'syz.1.1799': attribute type 7 has an invalid length.
[  154.834616][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1799'.
[  154.991656][ T6879] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.994729][ T6879] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.997516][ T6879] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.008420][ T6879] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.011511][ T6879] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.014302][ T6879] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.017110][ T6879] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.020347][ T6879] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.023573][T11941] netlink: 'syz.0.1802': attribute type 21 has an invalid length.
[  155.023721][T11942] Malformed UNC in devname
[  155.023721][T11942] 
[  155.026093][T11941] IPv6: NLM_F_CREATE should be specified when creating new route
[  155.029095][T11942] CIFS: VFS: Malformed UNC in devname
[  155.101210][T11953] dlm: no locking on control device
[  155.104698][T11954] program syz.1.1806 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  155.229840][T11976] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.232401][T11976] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.263189][   T40] audit: type=1400 audit(2000000325.279:1626): avc:  denied  { getopt } for  pid=11974 comm="syz.3.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  155.289488][T11988] netlink: 'syz.0.1812': attribute type 7 has an invalid length.
[  155.292716][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'.
[  155.316558][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.326312][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.428516][ T6889] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.431903][ T6889] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.435175][ T6889] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.438100][ T6889] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.489270][ T7509] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  155.550078][   T40] audit: type=1400 audit(2000000325.559:1627): avc:  denied  { lock } for  pid=12002 comm="syz.0.1820" path="/28/file0/cpuset.effective_cpus" dev="9p" ino=71827925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  155.557850][   T40] audit: type=1400 audit(2000000325.569:1628): avc:  denied  { setopt } for  pid=12004 comm="syz.3.1821" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1
[  155.613330][T12007] netdevsim netdevsim2: Direct firmware load for .
[  155.613330][T12007]  failed with error -2
[  155.616906][T12007] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  155.616906][T12007] 
[  155.650065][ T7509] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  155.653527][ T7509] usb 6-1: config 0 interface 0 has no altsetting 0
[  155.657327][ T7509] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  155.660526][ T7509] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  155.663123][ T7509] usb 6-1: Product: syz
[  155.664550][ T7509] usb 6-1: Manufacturer: syz
[  155.666164][ T7509] usb 6-1: SerialNumber: syz
[  155.669632][ T7509] usb 6-1: config 0 descriptor??
[  155.676594][ T7509] usb 6-1: selecting invalid altsetting 0
[  155.874178][ T5939] usb 6-1: USB disconnect, device number 10
[  155.939862][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1824'.
[  155.943785][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1824'.
[  155.948108][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1824'.
[  155.952014][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1824'.
[  155.995366][T12020] netlink: 'syz.3.1825': attribute type 1 has an invalid length.
[  156.015604][T12020] bond8: entered promiscuous mode
[  156.018277][T12020] 8021q: adding VLAN 0 to HW filter on device bond8
[  156.034096][T12020] bond8: (slave bridge5): making interface the new active one
[  156.037352][T12020] bridge5: entered promiscuous mode
[  156.041172][T12020] bond8: (slave bridge5): Enslaving as an active interface with an up link
[  156.138959][ T5946] Bluetooth: hci4: command tx timeout
[  156.254764][T12033] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  156.267151][T12033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12033 comm=syz.3.1829
[  156.426587][T12046] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  156.429711][T12046] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  156.639771][T12069] FAT-fs (nullb0): bogus number of reserved sectors
[  156.642072][T12069] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  156.644962][T12069] netlink: 'syz.2.1841': attribute type 10 has an invalid length.
[  156.674642][   T40] audit: type=1326 audit(2000000326.689:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.1838" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254cb8efc9 code=0x7ffc0000
[  156.682307][   T40] audit: type=1326 audit(2000000326.689:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.1838" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254cb8efc9 code=0x7ffc0000
[  156.690319][   T40] audit: type=1326 audit(2000000326.689:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.1838" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f254cb8efc9 code=0x7ffc0000
[  156.697855][   T40] audit: type=1326 audit(2000000326.689:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12061 comm="syz.1.1838" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254cb8efc9 code=0x7ffc0000
[  156.859724][T12071] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  156.942237][T12092] comedi comedi1: bad chanlist[0]=0x04000003 chan=3 range length=0
[  157.149954][T12102] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  157.152552][T12102] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  157.155453][T12102] vhci_hcd vhci_hcd.0: Device attached
[  157.158345][T12103] vhci_hcd: connection closed
[  157.158589][   T46] vhci_hcd: stop threads
[  157.163126][   T46] vhci_hcd: release socket
[  157.164648][   T46] vhci_hcd: disconnect device
[  157.730265][T12124] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  158.922049][T12156] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  158.925620][T12156] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  158.932356][T12158] netlink: 'syz.0.1872': attribute type 1 has an invalid length.
[  158.954112][T12158] 8021q: adding VLAN 0 to HW filter on device bond1
[  159.207164][T12188] cgroup: Unknown subsys name 'cpuset'
[  159.222791][T12190] loop6: detected capacity change from 0 to 2640
[  159.227180][T12190] buffer_io_error: 311 callbacks suppressed
[  159.227192][T12190] Buffer I/O error on dev loop6, logical block 0, async page read
[  159.232866][T12190] Buffer I/O error on dev loop6, logical block 0, async page read
[  159.236271][T12190] Buffer I/O error on dev loop6, logical block 0, async page read
[  159.239943][T12190] Buffer I/O error on dev loop6, logical block 0, async page read
[  159.243153][T12190] Buffer I/O error on dev loop6, logical block 0, async page read
[  159.245972][T12190] Buffer I/O error on dev loop6, logical block 0, async page read
[  159.251058][T12190] Buffer I/O error on dev loop6, logical block 0, async page read
[  159.254122][T12190] Buffer I/O error on dev loop6, logical block 0, async page read
[  159.256962][T12190] ldm_validate_partition_table(): Disk read failed.
[  159.259946][T12190] Buffer I/O error on dev loop6, logical block 0, async page read
[  159.263152][T12190] Buffer I/O error on dev loop6, logical block 0, async page read
[  159.266534][T12190] Dev loop6: unable to read RDB block 0
[  159.269280][T12190]  loop6: unable to read partition table
[  159.271229][T12190] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  159.361337][T12191] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  159.560561][T12220] __nla_validate_parse: 8 callbacks suppressed
[  159.560572][T12220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1893'.
[  159.730407][T12234] loop6: detected capacity change from 0 to 2640
[  159.735416][T12234] ldm_validate_partition_table(): Disk read failed.
[  159.738609][T12234] Dev loop6: unable to read RDB block 0
[  159.741573][T12234]  loop6: unable to read partition table
[  159.744253][T12234] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  160.164333][T12243] SELinux:  Context system_u:object_r:ld_so_t:s0 is not valid (left unmapped).
[  160.169654][   T40] kauditd_printk_skb: 68 callbacks suppressed
[  160.169668][   T40] audit: type=1400 audit(2000000330.189:1701): avc:  denied  { relabelto } for  pid=12242 comm="syz.1.1901" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ld_so_t:s0"
[  160.186459][   T40] audit: type=1400 audit(2000000330.199:1702): avc:  denied  { associate } for  pid=12242 comm="syz.1.1901" name="kvm" dev="devtmpfs" ino=84 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ld_so_t:s0"
[  160.198299][   T40] audit: type=1400 audit(2000000330.199:1703): avc:  denied  { ioctl } for  pid=12242 comm="syz.1.1901" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ld_so_t:s0"
[  160.474811][   T40] audit: type=1400 audit(2000000330.479:1704): avc:  denied  { map } for  pid=12256 comm="syz.1.1907" path="/411/file0/memory.events" dev="9p" ino=71827979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  160.650006][ T5939] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  160.664557][   T40] audit: type=1400 audit(2000000330.679:1705): avc:  denied  { read } for  pid=12260 comm="syz.1.1908" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ld_so_t:s0"
[  160.675439][   T40] audit: type=1400 audit(2000000330.679:1706): avc:  denied  { open } for  pid=12260 comm="syz.1.1908" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ld_so_t:s0"
[  160.701659][   T40] audit: type=1400 audit(2000000330.719:1707): avc:  denied  { write } for  pid=12260 comm="syz.1.1908" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ld_so_t:s0"
[  160.810595][ T5939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.815173][ T5939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.819757][ T5939] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  160.825249][ T5939] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  160.829095][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.840689][ T5939] usb 7-1: config 0 descriptor??
[  161.248111][ T5939] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.251410][ T5939] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.254658][ T5939] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.258095][ T5939] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.262113][ T5939] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.265314][ T5939] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.268401][ T5939] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.272833][ T5939] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.275787][ T5939] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.279213][ T5939] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.291090][ T5939] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  161.570008][T12274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1911'.
[  161.738975][ T5933] Bluetooth: hci2: command 0xfc11 tx timeout
[  161.739196][ T5946] Bluetooth: hci2: Entering manufacturer mode failed (-110)
[  161.743246][T12279] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  161.783837][T12281] 9p: Unknown Cache mode or invalid value fscacle
[  161.810110][T12283] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  161.902073][T12287] libceph: resolve '4' (ret=-3): failed
[  161.906622][T12287] netlink: 'syz.1.1916': attribute type 1 has an invalid length.
[  161.910682][T12287] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1916'.
[  161.915888][T12287] netlink: 'syz.1.1916': attribute type 1 has an invalid length.
[  161.930363][T12287] 8021q: adding VLAN 0 to HW filter on device bond9
[  161.944984][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1916'.
[  162.163146][T12292] 9pnet: Could not find request transport: xen
[  162.417108][T12302] sit0: entered promiscuous mode
[  162.564263][T12257] usb 7-1: string descriptor 0 read error: -71
[  162.869715][T12330] binder: 12329:12330 ioctl c0306201 200000000140 returned -14
[  162.873352][T12330] trusted_key: encrypted_key: insufficient parameters specified
[  163.001989][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1931'.
[  163.234435][   T40] audit: type=1400 audit(2000000333.249:1708): avc:  denied  { map } for  pid=12353 comm="syz.2.1935" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  163.244684][   T40] audit: type=1400 audit(2000000333.249:1709): avc:  denied  { execute } for  pid=12353 comm="syz.2.1935" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  163.355433][   T10] usb 7-1: USB disconnect, device number 10
[  163.385820][   T40] audit: type=1400 audit(2000000333.399:1710): avc:  denied  { setattr } for  pid=12361 comm="syz.3.1937" path="/dev/audio" dev="devtmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  163.781607][T12370] lo speed is unknown, defaulting to 1000
[  163.786266][T12370] xfrm0 speed is unknown, defaulting to 1000
[  163.886643][T12374] lo speed is unknown, defaulting to 1000
[  163.890329][T12374] xfrm0 speed is unknown, defaulting to 1000
[  163.908932][   T60] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  164.060942][   T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  164.068379][   T60] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  164.072376][   T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.075808][   T60] usb 5-1: Product: syz
[  164.077681][   T60] usb 5-1: Manufacturer: syz
[  164.079766][   T60] usb 5-1: SerialNumber: syz
[  164.084836][   T60] usb 5-1: config 0 descriptor??
[  164.827740][T12406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12406 comm=syz.1.1950
./file0/file0������������������@��
 
 
/dev/fusefd=0x0000000000000007,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)��@s����
$������$ @,@([  165.520007][T12436] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  165.523371][T12436] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  165.526832][T12436] overlayfs: failed to get uuid (467/file0, err=-13); falling back to uuid=null.
[  165.673863][T12452] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1963'.
[  166.009151][   T53] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  166.139064][   T53] usb 6-1: device descriptor read/64, error -71
[  166.142324][T12469] lo speed is unknown, defaulting to 1000
[  166.146253][T12469] xfrm0 speed is unknown, defaulting to 1000
[  166.316562][   T40] kauditd_printk_skb: 1 callbacks suppressed
[  166.316573][   T40] audit: type=1400 audit(2000000336.329:1712): avc:  denied  { append } for  pid=12475 comm="syz.2.1969" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  166.316606][T12476] random: crng reseeded on system resumption
[  166.336801][T12476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1969'.
[  166.340005][T12476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1969'.
[  166.399009][   T53] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  166.548940][   T53] usb 6-1: device descriptor read/64, error -71
[  166.670696][   T53] usb usb6-port1: attempt power cycle
[  166.684364][ T6015] usb 5-1: USB disconnect, device number 3
[  166.713152][T12503] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20003
[  166.937732][   T40] audit: type=1400 audit(2000000336.949:1713): avc:  denied  { mounton } for  pid=12505 comm="syz.3.1979" path="/398/file0" dev="tmpfs" ino=2184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  166.994093][T12515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1980'.
[  166.996932][T12515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1980'.
[  166.999862][T12515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1980'.
[  167.002678][T12515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1980'.
[  167.009158][   T53] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  167.010277][T12515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1980'.
[  167.010289][T12515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1980'.
[  167.010298][T12515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1980'.
[  167.036707][T12520] 9pnet_virtio: no channels available for device syz
[  167.039743][   T53] usb 6-1: device descriptor read/8, error -71
[  167.289959][   T53] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  167.319386][   T53] usb 6-1: device descriptor read/8, error -71
[  167.430577][   T53] usb usb6-port1: unable to enumerate USB device
[  167.470005][T12536] macvlan2: entered promiscuous mode
[  167.471549][T12536] macvlan2: entered allmulticast mode
[  167.473990][T12536] bond4: entered promiscuous mode
[  167.475772][T12536] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  167.480717][T12536] bond4: left promiscuous mode
[  167.524677][T12538] gtp0: entered promiscuous mode
[  167.526716][T12538] team0: Port device gtp0 added
[  167.561277][   T40] audit: type=1400 audit(2000000337.579:1714): avc:  denied  { ioctl } for  pid=12544 comm="syz.0.1988" path="socket:[44784]" dev="sockfs" ino=44784 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  167.838988][   T60] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  167.968916][   T60] usb 6-1: device descriptor read/64, error -71
[  168.208927][   T60] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  168.338884][   T60] usb 6-1: device descriptor read/64, error -71
[  168.449233][   T60] usb usb6-port1: attempt power cycle
[  168.557643][T12569] ip6t_srh: unknown srh invflags 4000
[  168.565836][T12569] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  168.794100][T12576] netlink: 'syz.1.1998': attribute type 21 has an invalid length.
[  169.677639][T12591] xt_hashlimit: invalid interval
[  169.746826][T12596] misc userio: No port type given on /dev/userio
[  169.833102][T12602] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  169.836255][T12602] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  169.865230][T12604] FAULT_INJECTION: forcing a failure.
[  169.865230][T12604] name failslab, interval 1, probability 0, space 0, times 1
[  169.869306][T12604] CPU: 2 UID: 0 PID: 12604 Comm: syz.2.2008 Not tainted syzkaller #0 PREEMPT(full) 
[  169.869320][T12604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  169.869326][T12604] Call Trace:
[  169.869338][T12604]  <TASK>
[  169.869342][T12604]  dump_stack_lvl+0x16c/0x1f0
[  169.869370][T12604]  should_fail_ex+0x512/0x640
[  169.869387][T12604]  ? fs_reclaim_acquire+0xae/0x150
[  169.869400][T12604]  should_failslab+0xc2/0x120
[  169.869412][T12604]  __kmalloc_noprof+0xdd/0x880
[  169.869427][T12604]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  169.869442][T12604]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  169.869453][T12604]  tomoyo_realpath_from_path+0xc2/0x6e0
[  169.869466][T12604]  ? tomoyo_profile+0x47/0x60
[  169.869480][T12604]  tomoyo_path_number_perm+0x245/0x580
[  169.869496][T12604]  ? tomoyo_path_number_perm+0x237/0x580
[  169.869513][T12604]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  169.869530][T12604]  ? find_held_lock+0x2b/0x80
[  169.869554][T12604]  ? find_held_lock+0x2b/0x80
[  169.869566][T12604]  ? hook_file_ioctl_common+0x145/0x410
[  169.869583][T12604]  ? __fget_files+0x20e/0x3c0
[  169.869596][T12604]  security_file_ioctl+0x9b/0x240
[  169.869608][T12604]  __x64_sys_ioctl+0xb7/0x210
[  169.869624][T12604]  do_syscall_64+0xcd/0xfa0
[  169.869639][T12604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.869650][T12604] RIP: 0033:0x7f5b2e78efc9
[  169.869658][T12604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.869668][T12604] RSP: 002b:00007f5b2f63c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  169.869678][T12604] RAX: ffffffffffffffda RBX: 00007f5b2e9e5fa0 RCX: 00007f5b2e78efc9
[  169.869684][T12604] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000003
[  169.869690][T12604] RBP: 00007f5b2f63c090 R08: 0000000000000000 R09: 0000000000000000
[  169.869696][T12604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.869702][T12604] R13: 00007f5b2e9e6038 R14: 00007f5b2e9e5fa0 R15: 00007ffe3137c2b8
[  169.869715][T12604]  </TASK>
[  169.869720][T12604] ERROR: Out of memory at tomoyo_realpath_from_path.
[  169.948540][T12604] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  169.950970][T12604] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  170.025692][T12609] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.030282][T12609] tipc: Resetting bearer <eth:syzkaller0>
[  170.035182][T12609] bond_slave_1: entered promiscuous mode
[  170.037023][T12609] bond_slave_1: entered allmulticast mode
[  170.042968][T12609] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  170.046140][T12609] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  170.054199][T12608] tipc: Disabling bearer <eth:syzkaller0>
[  170.190601][T12614] gfs2: gfs2 mount does not exist
[  170.277597][   T40] audit: type=1400 audit(2000000340.289:1715): avc:  denied  { append } for  pid=12619 comm="syz.2.2015" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  170.277912][T12620] openvswitch: netlink: Flow key attr not present in new flow.
[  170.284755][   T40] audit: type=1400 audit(2000000340.289:1716): avc:  denied  { append } for  pid=12619 comm="syz.2.2015" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  170.412778][T12628] FAULT_INJECTION: forcing a failure.
[  170.412778][T12628] name failslab, interval 1, probability 0, space 0, times 0
[  170.416736][T12628] CPU: 2 UID: 0 PID: 12628 Comm: syz.2.2018 Not tainted syzkaller #0 PREEMPT(full) 
[  170.416750][T12628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  170.416756][T12628] Call Trace:
[  170.416760][T12628]  <TASK>
[  170.416764][T12628]  dump_stack_lvl+0x16c/0x1f0
[  170.416784][T12628]  should_fail_ex+0x512/0x640
[  170.416796][T12628]  ? fs_reclaim_acquire+0xae/0x150
[  170.416828][T12628]  should_failslab+0xc2/0x120
[  170.416840][T12628]  __kmalloc_noprof+0xdd/0x880
[  170.416854][T12628]  ? tomoyo_encode2+0x100/0x3e0
[  170.416869][T12628]  ? tomoyo_encode2+0x100/0x3e0
[  170.416879][T12628]  tomoyo_encode2+0x100/0x3e0
[  170.416892][T12628]  tomoyo_encode+0x29/0x50
[  170.416903][T12628]  tomoyo_realpath_from_path+0x18f/0x6e0
[  170.416918][T12628]  tomoyo_path_number_perm+0x245/0x580
[  170.416933][T12628]  ? tomoyo_path_number_perm+0x237/0x580
[  170.416951][T12628]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  170.416967][T12628]  ? find_held_lock+0x2b/0x80
[  170.416992][T12628]  ? find_held_lock+0x2b/0x80
[  170.417004][T12628]  ? hook_file_ioctl_common+0x145/0x410
[  170.417020][T12628]  ? __fget_files+0x20e/0x3c0
[  170.417033][T12628]  security_file_ioctl+0x9b/0x240
[  170.417045][T12628]  __x64_sys_ioctl+0xb7/0x210
[  170.417061][T12628]  do_syscall_64+0xcd/0xfa0
[  170.417077][T12628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.417087][T12628] RIP: 0033:0x7f5b2e78efc9
[  170.417096][T12628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.417106][T12628] RSP: 002b:00007f5b2f63c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  170.417117][T12628] RAX: ffffffffffffffda RBX: 00007f5b2e9e5fa0 RCX: 00007f5b2e78efc9
[  170.417123][T12628] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000003
[  170.417129][T12628] RBP: 00007f5b2f63c090 R08: 0000000000000000 R09: 0000000000000000
[  170.417135][T12628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.417140][T12628] R13: 00007f5b2e9e6038 R14: 00007f5b2e9e5fa0 R15: 00007ffe3137c2b8
[  170.417154][T12628]  </TASK>
[  170.417163][T12628] ERROR: Out of memory at tomoyo_realpath_from_path.
[  170.485351][T12628] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  170.487785][T12628] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  170.514224][T12633] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  170.516571][T12633] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  170.564828][T12640] lo speed is unknown, defaulting to 1000
[  170.567329][T12640] xfrm0 speed is unknown, defaulting to 1000
[  170.591765][T12643] netlink: 'syz.1.2023': attribute type 1 has an invalid length.
[  170.596925][   T40] audit: type=1326 audit(2000000340.609:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12642 comm="syz.1.2023" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f254cb8efc9 code=0x0
[  170.608046][T12648] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.778620][T12655] __nla_validate_parse: 5 callbacks suppressed
[  170.778631][T12655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2024'.
[  170.920134][T12660] vlan4: entered promiscuous mode
[  170.921956][T12660] syz_tun: entered promiscuous mode
[  171.002381][T12667] FAULT_INJECTION: forcing a failure.
[  171.002381][T12667] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  171.006463][T12667] CPU: 0 UID: 0 PID: 12667 Comm: syz.3.2028 Not tainted syzkaller #0 PREEMPT(full) 
[  171.006477][T12667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  171.006483][T12667] Call Trace:
[  171.006487][T12667]  <TASK>
[  171.006491][T12667]  dump_stack_lvl+0x16c/0x1f0
[  171.006510][T12667]  should_fail_ex+0x512/0x640
[  171.006525][T12667]  _copy_from_user+0x2e/0xd0
[  171.006539][T12667]  usbdev_ioctl+0x2cce/0x4070
[  171.006552][T12667]  ? __pfx_usbdev_ioctl+0x10/0x10
[  171.006565][T12667]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  171.006580][T12667]  ? do_vfs_ioctl+0x128/0x14f0
[  171.006594][T12667]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  171.006608][T12667]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  171.006625][T12667]  ? hook_file_ioctl_common+0x145/0x410
[  171.006643][T12667]  ? selinux_file_ioctl+0x180/0x270
[  171.006653][T12667]  ? selinux_file_ioctl+0xb4/0x270
[  171.006664][T12667]  ? __pfx_usbdev_ioctl+0x10/0x10
[  171.006675][T12667]  __x64_sys_ioctl+0x18e/0x210
[  171.006690][T12667]  do_syscall_64+0xcd/0xfa0
[  171.006706][T12667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.006717][T12667] RIP: 0033:0x7fcd4778efc9
[  171.006726][T12667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.006735][T12667] RSP: 002b:00007fcd4854a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  171.006745][T12667] RAX: ffffffffffffffda RBX: 00007fcd479e5fa0 RCX: 00007fcd4778efc9
[  171.006752][T12667] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000003
[  171.006758][T12667] RBP: 00007fcd4854a090 R08: 0000000000000000 R09: 0000000000000000
[  171.006764][T12667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.006769][T12667] R13: 00007fcd479e6038 R14: 00007fcd479e5fa0 R15: 00007ffeae7d17d8
[  171.006783][T12667]  </TASK>
[  171.069382][    C0] vkms_vblank_simulate: vblank timer overrun
[  171.105663][T12669] xt_hashlimit: size too large, truncated to 1048576
[  171.210499][T12675] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  171.212958][T12675] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  171.593179][T12685] netlink: 'syz.1.2035': attribute type 29 has an invalid length.
[  171.596188][T12685] netlink: 'syz.1.2035': attribute type 29 has an invalid length.
[  171.599218][T12685] program syz.1.2035 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  171.604323][   T40] audit: type=1400 audit(2000000341.619:1718): avc:  denied  { getopt } for  pid=12684 comm="syz.1.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  171.616091][T12687] netlink: 'syz.2.2036': attribute type 1 has an invalid length.
[  171.631892][T12687] 8021q: adding VLAN 0 to HW filter on device bond5
[  171.636816][T12687] bond5: (slave wlan0): Opening slave failed
[  171.640104][T12687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2036'.
[  171.741781][   T40] audit: type=1800 audit(2000000341.759:1719): pid=12699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2040" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  171.891874][T12710] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2043'.
[  171.895407][T12710] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2043'.
[  171.899923][T12710] netlink: 'syz.0.2043': attribute type 5 has an invalid length.
[  171.902690][T12710] netlink: 'syz.0.2043': attribute type 6 has an invalid length.
[  171.905193][T12710] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2043'.
[  171.908750][T12710] hsr0: entered allmulticast mode
[  171.910690][T12710] hsr_slave_0: entered allmulticast mode
[  171.912853][T12710] hsr_slave_1: entered allmulticast mode
[  172.062767][T12722] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  172.065294][T12722] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  172.068615][T12722] SELinux:  Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped).
[  172.072660][   T40] audit: type=1400 audit(2000000342.089:1720): avc:  denied  { relabelto } for  pid=12721 comm="syz.1.2049" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0"
[  172.081604][   T40] audit: type=1400 audit(2000000342.089:1721): avc:  denied  { associate } for  pid=12721 comm="syz.1.2049" name="cgroup.procs" dev="cgroup" ino=62 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0"
[  172.132925][T12726] binder: BINDER_SET_CONTEXT_MGR already set
[  172.134839][T12726] binder: 12725:12726 ioctl 4018620d 200000000100 returned -16
[  172.138130][T12726] binder: BINDER_SET_CONTEXT_MGR already set
[  172.140759][T12726] binder: 12725:12726 ioctl 4018620d 200000004a80 returned -16
[  172.208932][   T10] usb 8-1: new low-speed USB device number 22 using dummy_hcd
[  172.360158][   T10] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  172.363912][   T10] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.367885][   T10] usb 8-1: config 0 interface 0 has no altsetting 0
[  172.370727][   T10] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  172.373923][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.377582][   T10] usb 8-1: config 0 descriptor??
[  172.991125][T12736] netlink: 'syz.1.2055': attribute type 1 has an invalid length.
[  173.005857][T12736] 8021q: adding VLAN 0 to HW filter on device bond10
[  173.021331][T12736] bond10: (slave wlan0): Enslaving as an active interface with a down link
[  173.027511][   T10] usbhid 8-1:0.0: can't add hid device: -71
[  173.028643][T12736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2055'.
[  173.029747][   T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  173.038013][   T10] usb 8-1: USB disconnect, device number 22
[  173.071648][T12741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2057'.
[  173.074525][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2057'.
[  173.105638][T12743] cgroup: subsys name conflicts with all
[  173.108288][T12743] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  173.111998][T12743] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  173.412580][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'.
[  173.415620][T12752] netlink: 'syz.2.2060': attribute type 14 has an invalid length.
[  173.418253][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2060'.
[  173.422276][T12752] netlink: 'syz.2.2060': attribute type 14 has an invalid length.
[  173.490986][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  173.496164][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  173.500211][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  173.504224][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  173.508948][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  173.513060][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  173.517127][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  173.521133][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  173.838868][T11990] usb 8-1: new low-speed USB device number 23 using dummy_hcd
[  174.000296][T11990] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  174.002930][T11990] usb 8-1: config 0 has no interface number 0
[  174.004904][T11990] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  174.008457][T11990] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  174.013970][T11990] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  174.016893][T11990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.022124][T11990] usb 8-1: config 0 descriptor??
[  174.024133][T12759] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  174.031474][T11990] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  174.173335][T12771] netlink: 'syz.0.2065': attribute type 1 has an invalid length.
[  174.186954][T12771] 8021q: adding VLAN 0 to HW filter on device bond2
[  174.200251][T12771] bond2: (slave wlan0): Enslaving as an active interface with a down link
[  174.409056][T11990] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  174.581393][T11990] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  174.584432][T11990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.586960][T11990] usb 6-1: Product: syz
[  174.588279][T11990] usb 6-1: Manufacturer: syz
[  174.591632][T11990] usb 6-1: SerialNumber: syz
[  174.881989][T11990] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  174.886234][T11990] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  174.892985][T11990] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  174.901784][T11990] usb 6-1: USB disconnect, device number 18
[  175.010999][T12792] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  175.278908][    C0] net_ratelimit: 15392 callbacks suppressed
[  175.278920][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  175.284873][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  175.288730][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  175.292687][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  175.296549][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  175.300554][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  175.304450][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  175.308302][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  175.312228][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  175.316205][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  175.378922][T11990] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  175.538864][T11990] usb 6-1: Using ep0 maxpacket: 8
[  175.544251][T11990] usb 6-1: config 1 has an invalid descriptor of length 235, skipping remainder of the config
[  175.548265][T11990] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  175.551846][T11990] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  175.560937][T11990] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  175.564502][T11990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.567589][T11990] usb 6-1: Product: Г
[  175.569080][T11990] usb 6-1: Manufacturer: 꿵텔룠랑ⅆ䤻缤꒐납鱭役劦Ị
[  175.571525][T11990] usb 6-1: SerialNumber: 褚ꏚ쩴縶祆꣒駠䯿峌飝ৗ흍བž৹폥䗟얂똣ጢ䇅趶आ럡剩䝑胐룽珧㐽鸲顟鳥噑迅๾傑툎Dͭ爺蕦쉷㫉ﱱ곅䬿嬚编흆䴙쬝酆笪谵蛸덧굹軛牽椼杺੾舐ᶼ鱟嫢ᶍᧉ୤뎲霒졉ዼ⇠ᄩ趱㮓䈋㋺颤禮㵩쿥閵먯伃ᚵ䟇職ꊹ虵⟖噅ⴸ齥顀魰
[  175.789274][T11990] cdc_ncm 6-1:1.0: invalid descriptor buffer length
[  175.791435][T11990] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  175.793693][T11990] cdc_ncm 6-1:1.0: bind() failure
[  175.799142][T11990] usb 6-1: USB disconnect, device number 19
[  176.000241][T12800] overlay: ./file0 is not a directory
[  176.322228][   T40] audit: type=1400 audit(2000000346.339:1722): avc:  denied  { getopt } for  pid=12818 comm="syz.1.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  176.361234][T12821] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  176.363557][T12821] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  176.528531][T12826] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  176.598183][   T53] usb 8-1: USB disconnect, device number 23
[  176.647770][T12832] __nla_validate_parse: 5 callbacks suppressed
[  176.647781][T12832] netlink: 4220 bytes leftover after parsing attributes in process `syz.0.2080'.
[  176.653036][T12832] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12832 comm=syz.0.2080
[  176.658904][   T40] audit: type=1400 audit(2000000346.669:1723): avc:  denied  { lock } for  pid=12831 comm="syz.0.2080" path="socket:[48146]" dev="sockfs" ino=48146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  176.710905][T12835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2080'.
[  176.738370][   T40] audit: type=1400 audit(2000000346.749:1724): avc:  denied  { connect } for  pid=12836 comm="syz.3.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  176.806426][   T40] audit: type=1400 audit(2000000346.819:1725): avc:  denied  { write } for  pid=12836 comm="syz.3.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  176.877229][T12838] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  176.879691][T12838] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  176.970874][T12842] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2084'.
[  177.521117][T12850] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  177.523640][T12850] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  177.553804][   T40] audit: type=1400 audit(2000000347.569:1726): avc:  denied  { ioctl } for  pid=12851 comm="syz.0.2087" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x64a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  177.553973][T12852] tmpfs: Bad value for 'mpol'
[  177.594535][T12854] all: renamed from lo
[  177.796930][T12870] pimreg: entered allmulticast mode
[  177.851206][   T60] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  177.949291][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2097'.
[  177.999073][   T60] usb 5-1: Using ep0 maxpacket: 32
[  178.002425][   T60] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  178.003275][    C3] sr 2:0:0:0: [sr0] tag#9 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  178.007009][   T60] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  178.008550][    C3] sr 2:0:0:0: [sr0] tag#9 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5
[  178.014020][   T60] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  178.017356][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2094'.
[  178.017525][   T60] usb 5-1: Product: syz
[  178.022843][T12888] overlayfs: failed to resolve './file0': -2
[  178.025873][   T60] usb 5-1: Manufacturer: syz
[  178.027319][   T60] usb 5-1: SerialNumber: syz
[  178.030049][   T60] usb 5-1: config 0 descriptor??
[  178.033568][T12854] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  178.036443][   T60] hub 5-1:0.0: bad descriptor, ignoring hub
[  178.038240][   T60] hub 5-1:0.0: probe with driver hub failed with error -5
[  178.063351][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2101'.
[  178.066216][T12903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2101'.
[  178.069367][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2101'.
[  178.072209][T12903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2101'.
[  178.101442][   T40] audit: type=1804 audit(2000000348.119:1727): pid=12907 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2102" name="/newroot/414/file0" dev="tmpfs" ino=2270 res=1 errno=0
[  178.101984][T12908] syz.1.2103 (12908): /proc/12905/oom_adj is deprecated, please use /proc/12905/oom_score_adj instead.
[  178.150979][   T40] audit: type=1400 audit(2000000348.159:1728): avc:  denied  { setattr } for  pid=12918 comm="syz.1.2106" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0"
[  178.290037][T12940] netlink: 'syz.2.2113': attribute type 1 has an invalid length.
[  178.290320][   T40] audit: type=1400 audit(2000000348.309:1729): avc:  denied  { nlmsg_read } for  pid=12937 comm="syz.1.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  178.292431][T12940] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2113'.
[  178.298612][   T40] audit: type=1400 audit(2000000348.309:1730): avc:  denied  { listen } for  pid=12937 comm="syz.1.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  178.301591][T12940] NCSI netlink: No device for ifindex 0
[  178.349065][   T60] usb 5-1: USB disconnect, device number 4
[  178.366308][T12946] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  178.407604][T12948] bond9: entered promiscuous mode
[  178.410295][T12948] 8021q: adding VLAN 0 to HW filter on device bond9
[  178.414673][T12948] bond0: (slave bond9): Enslaving as a backup interface with a down link
[  178.536141][T12967] binder: 12966:12967 ioctl 4018620d 0 returned -22
[  178.668689][T12973] overlayfs: failed to resolve './file1': -2
[  178.778864][   T53] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  178.919436][   T53] usb 6-1: device descriptor read/64, error -71
[  179.066951][   T40] audit: type=1400 audit(2000000349.079:1731): avc:  denied  { accept } for  pid=13004 comm="syz.2.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  179.107718][T13007] exFAT-fs (nullb0): invalid boot record signature
[  179.110738][T13007] exFAT-fs (nullb0): failed to read boot sector
[  179.112813][T13007] exFAT-fs (nullb0): failed to recognize exfat type
[  179.160545][   T53] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  179.205419][T13023] QAT: Invalid ioctl -2144835806
[  179.271564][   T40] audit: type=1400 audit(2000000349.289:1732): avc:  denied  { shutdown } for  pid=13025 comm="syz.2.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  179.300358][   T53] usb 6-1: device descriptor read/64, error -71
[  179.416529][   T53] usb usb6-port1: attempt power cycle
[  179.758909][   T53] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  179.779540][   T53] usb 6-1: device descriptor read/8, error -71
[  179.833954][T13034] xt_l2tp: missing protocol rule (udp|l2tpip)
[  179.948763][T13040] sctp: [Deprecated]: syz.0.2143 (pid 13040) Use of int in maxseg socket option.
[  179.948763][T13040] Use struct sctp_assoc_value instead
[  179.957035][T13040] macsec2: entered promiscuous mode
[  179.959252][T13040] macsec2: entered allmulticast mode
[  180.019792][   T53] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  180.049658][   T53] usb 6-1: device descriptor read/8, error -71
[  180.159625][   T53] usb usb6-port1: unable to enumerate USB device
[  180.288846][    C2] net_ratelimit: 59969 callbacks suppressed
[  180.288850][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  180.288857][    C2] bridge0: received packet on 
 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:4094)
[  180.288978][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:4094)
[  180.290947][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  180.294715][    C2] bridge0: received packet on 
 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:4094)
[  180.298171][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  180.301933][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:4094)
[  180.305762][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:de:1f:af:c7:01:5c, vlan:4094)
[  180.309030][T11990] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  180.309179][    C2] bridge0: received packet on 
 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:4094)
[  180.309295][    C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:4094)
[  180.321203][T13058] fuse: Bad value for 'fd'
[  180.323276][T13056] netlink: 'syz.0.2149': attribute type 21 has an invalid length.
[  180.478875][T11990] usb 6-1: device descriptor read/64, error -71
[  180.718853][T11990] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  180.849031][T11990] usb 6-1: device descriptor read/64, error -71
[  180.959148][T11990] usb usb6-port1: attempt power cycle
[  181.112380][ T5946] block nbd0: Receive control failed (result -32)
[  181.211563][T13089] futex_wake_op: syz.3.2157 tries to shift op by -1; fix this program
[  181.298912][T11990] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  181.329422][T11990] usb 6-1: device descriptor read/8, error -71
[  181.421719][T13106] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  181.573020][T13110] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.2163' sets config #1
[  181.589578][T11990] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  181.755566][T13126] ip6t_REJECT: ECHOREPLY is not supported
[  181.809541][T11990] usb 6-1: device not accepting address 27, error -71
[  181.812415][T11990] usb usb6-port1: unable to enumerate USB device
[  181.875156][T13134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=13134 comm=syz.3.2170
[  181.886630][T13134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=13134 comm=syz.3.2170
[  181.890651][T13134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13134 comm=syz.3.2170
[  182.146987][T13157] QAT: failed to copy from user.
[  182.216887][T13162] Cannot find add_set index 0 as target
[  182.250831][T13162] geneve1: entered allmulticast mode
[  182.253028][T13162] __nla_validate_parse: 8 callbacks suppressed
[  182.253036][T13162] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2180'.
[  182.343559][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2183'.
[  182.568890][T11990] usb 7-1: new low-speed USB device number 11 using dummy_hcd
[  182.756685][T11990] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  182.760305][T11990] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.763388][T11990] usb 7-1: config 0 interface 0 has no altsetting 0
[  182.765472][T11990] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  182.768354][T11990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.775118][T11990] usb 7-1: config 0 descriptor??
[  182.833835][T11511] udevd[11511]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory
[  182.858251][T13183] netlink: 'syz.0.2186': attribute type 11 has an invalid length.
[  182.863280][T13183] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.2186'.
[  183.018514][T13189] ==================================================================
[  183.018523][T13189] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60
[  183.018572][T13189] Write of size 8 at addr ffffc900054513e0 by task syz.0.2189/13189
[  183.018582][T13189] 
[  183.018587][T13189] CPU: 3 UID: 0 PID: 13189 Comm: syz.0.2189 Not tainted syzkaller #0 PREEMPT(full) 
[  183.018599][T13189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  183.018605][T13189] Call Trace:
[  183.018609][T13189]  <TASK>
[  183.018613][T13189]  dump_stack_lvl+0x116/0x1f0
[  183.018636][T13189]  print_report+0xcd/0x630
[  183.018647][T13189]  ? __virt_addr_valid+0x81/0x610
[  183.018663][T13189]  ? sys_imageblit+0x1a6f/0x1e60
[  183.018676][T13189]  kasan_report+0xe0/0x110
[  183.018687][T13189]  ? sys_imageblit+0x1a6f/0x1e60
[  183.018703][T13189]  sys_imageblit+0x1a6f/0x1e60
[  183.018718][T13189]  ? __queue_work+0x83b/0x1160
[  183.018729][T13189]  ? __pfx_sys_imageblit+0x10/0x10
[  183.018743][T13189]  ? __queue_work+0x416/0x1160
[  183.018754][T13189]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  183.018772][T13189]  ? queue_work_on+0x12a/0x1f0
[  183.018783][T13189]  ? drm_fb_helper_damage_area+0xaa/0xd0
[  183.018795][T13189]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  183.018809][T13189]  soft_cursor+0x524/0xa10
[  183.018822][T13189]  ? fb_get_color_depth+0x120/0x250
[  183.018833][T13189]  bit_cursor+0xe8c/0x17e0
[  183.018846][T13189]  ? __pfx_bit_cursor+0x10/0x10
[  183.018859][T13189]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  183.018873][T13189]  ? get_color+0x1da/0x450
[  183.018882][T13189]  ? __pfx_bit_cursor+0x10/0x10
[  183.018898][T13189]  fbcon_cursor+0x40c/0x5a0
[  183.018908][T13189]  ? add_softcursor+0x81/0x290
[  183.018921][T13189]  set_cursor+0x1db/0x250
[  183.018932][T13189]  vcs_write+0xb3d/0xdb0
[  183.018947][T13189]  ? __pfx_vcs_write+0x10/0x10
[  183.018958][T13189]  ? bpf_lsm_file_permission+0x9/0x10
[  183.018969][T13189]  ? security_file_permission+0x71/0x210
[  183.018981][T13189]  ? iov_iter_advance+0x1e3/0x6c0
[  183.018992][T13189]  ? rw_verify_area+0xcf/0x6c0
[  183.019007][T13189]  ? __pfx_vcs_write+0x10/0x10
[  183.019018][T13189]  vfs_writev+0x5df/0xde0
[  183.019033][T13189]  ? __pfx_vfs_writev+0x10/0x10
[  183.019048][T13189]  ? kmem_cache_free+0x2d4/0x6c0
[  183.019057][T13189]  ? putname+0x154/0x1a0
[  183.019072][T13189]  ? __fget_files+0x20e/0x3c0
[  183.019083][T13189]  ? do_writev+0x132/0x340
[  183.019097][T13189]  do_writev+0x132/0x340
[  183.019110][T13189]  ? __pfx_do_writev+0x10/0x10
[  183.019127][T13189]  do_syscall_64+0xcd/0xfa0
[  183.019142][T13189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.019152][T13189] RIP: 0033:0x7f6e9e78efc9
[  183.019160][T13189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.019170][T13189] RSP: 002b:00007f6e9f6bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  183.019180][T13189] RAX: ffffffffffffffda RBX: 00007f6e9e9e5fa0 RCX: 00007f6e9e78efc9
[  183.019187][T13189] RDX: 000000000000000e RSI: 0000200000000c40 RDI: 0000000000000003
[  183.019193][T13189] RBP: 00007f6e9e811f91 R08: 0000000000000000 R09: 0000000000000000
[  183.019199][T13189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.019205][T13189] R13: 00007f6e9e9e6038 R14: 00007f6e9e9e5fa0 R15: 00007ffe2c5df8e8
[  183.019214][T13189]  </TASK>
[  183.019218][T13189] 
[  183.019220][T13189] The buggy address belongs to a vmalloc virtual mapping
[  183.019228][T13189] Memory state around the buggy address:
[  183.019234][T13189]  ffffc90005451280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  183.019241][T13189]  ffffc90005451300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  183.019248][T13189] >ffffc90005451380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  183.019253][T13189]                                                        ^
[  183.019258][T13189]  ffffc90005451400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  183.019265][T13189]  ffffc90005451480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  183.019271][T13189] ==================================================================
[  183.020597][T13189] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  183.020606][T13189] CPU: 3 UID: 0 PID: 13189 Comm: syz.0.2189 Not tainted syzkaller #0 PREEMPT(full) 
[  183.020618][T13189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  183.020624][T13189] Call Trace:
[  183.020628][T13189]  <TASK>
[  183.020632][T13189]  dump_stack_lvl+0x3d/0x1f0
[  183.020648][T13189]  vpanic+0x640/0x6f0
[  183.020664][T13189]  panic+0xca/0xd0
[  183.020678][T13189]  ? __pfx_panic+0x10/0x10
[  183.020720][T13189]  ? sys_imageblit+0x1a6f/0x1e60
[  183.020737][T13189]  ? preempt_schedule_common+0x44/0xc0
[  183.020752][T13189]  ? preempt_schedule_thunk+0x16/0x30
[  183.020768][T13189]  ? check_panic_on_warn+0x1f/0xb0
[  183.020783][T13189]  check_panic_on_warn+0xab/0xb0
[  183.020799][T13189]  end_report+0x107/0x170
[  183.020810][T13189]  kasan_report+0xee/0x110
[  183.020821][T13189]  ? sys_imageblit+0x1a6f/0x1e60
[  183.020836][T13189]  sys_imageblit+0x1a6f/0x1e60
[  183.020851][T13189]  ? __queue_work+0x83b/0x1160
[  183.020862][T13189]  ? __pfx_sys_imageblit+0x10/0x10
[  183.020876][T13189]  ? __queue_work+0x416/0x1160
[  183.020887][T13189]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  183.020909][T13189]  ? queue_work_on+0x12a/0x1f0
[  183.020920][T13189]  ? drm_fb_helper_damage_area+0xaa/0xd0
[  183.020931][T13189]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  183.020946][T13189]  soft_cursor+0x524/0xa10
[  183.020959][T13189]  ? fb_get_color_depth+0x120/0x250
[  183.020970][T13189]  bit_cursor+0xe8c/0x17e0
[  183.020983][T13189]  ? __pfx_bit_cursor+0x10/0x10
[  183.020997][T13189]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  183.021010][T13189]  ? get_color+0x1da/0x450
[  183.021020][T13189]  ? __pfx_bit_cursor+0x10/0x10
[  183.021031][T13189]  fbcon_cursor+0x40c/0x5a0
[  183.021041][T13189]  ? add_softcursor+0x81/0x290
[  183.021054][T13189]  set_cursor+0x1db/0x250
[  183.021066][T13189]  vcs_write+0xb3d/0xdb0
[  183.021080][T13189]  ? __pfx_vcs_write+0x10/0x10
[  183.021091][T13189]  ? bpf_lsm_file_permission+0x9/0x10
[  183.021101][T13189]  ? security_file_permission+0x71/0x210
[  183.021113][T13189]  ? iov_iter_advance+0x1e3/0x6c0
[  183.021125][T13189]  ? rw_verify_area+0xcf/0x6c0
[  183.021139][T13189]  ? __pfx_vcs_write+0x10/0x10
[  183.021150][T13189]  vfs_writev+0x5df/0xde0
[  183.021166][T13189]  ? __pfx_vfs_writev+0x10/0x10
[  183.021180][T13189]  ? kmem_cache_free+0x2d4/0x6c0
[  183.021189][T13189]  ? putname+0x154/0x1a0
[  183.021204][T13189]  ? __fget_files+0x20e/0x3c0
[  183.021216][T13189]  ? do_writev+0x132/0x340
[  183.021230][T13189]  do_writev+0x132/0x340
[  183.021244][T13189]  ? __pfx_do_writev+0x10/0x10
[  183.021260][T13189]  do_syscall_64+0xcd/0xfa0
[  183.021275][T13189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.021286][T13189] RIP: 0033:0x7f6e9e78efc9
[  183.021293][T13189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.021304][T13189] RSP: 002b:00007f6e9f6bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  183.021313][T13189] RAX: ffffffffffffffda RBX: 00007f6e9e9e5fa0 RCX: 00007f6e9e78efc9
[  183.021320][T13189] RDX: 000000000000000e RSI: 0000200000000c40 RDI: 0000000000000003
[  183.021326][T13189] RBP: 00007f6e9e811f91 R08: 0000000000000000 R09: 0000000000000000
[  183.021333][T13189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.021339][T13189] R13: 00007f6e9e9e6038 R14: 00007f6e9e9e5fa0 R15: 00007ffe2c5df8e8
[  183.021349][T13189]  </TASK>
[  183.021998][T13189] Kernel Offset: disabled

VM DIAGNOSIS:
17:52:00  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000010100 RBX=0000000000000000 RCX=ffffffff81617a93 RDX=ffff88801da8c900
RSI=ffffffff81617adb RDI=ffffffff93a67fe0 RBP=ffff88806a420000 RSP=ffffc90000007fd0
R8 =0000000000000001 R9 =fffffbfff274cffc R10=ffffffff93a67fe7 R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81617adc RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c01300
GS =0000 ffff8880d6a0a000 ffffffff 00c01300
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f6e9e7b6d60 CR3=000000000e182000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fffefff0 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2c5dfc70 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e812fdb
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e812fe8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e812fe2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e812ff6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e81307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e81315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81617a93 RDX=ffff888024dda480
RSI=ffffffff81617adb RDI=ffffffff93a67fe0 RBP=ffff88806a520000 RSP=ffffc900006a0fd0
R8 =0000000000000001 R9 =fffffbfff274cffc R10=ffffffff93a67fe7 R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81617adc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007f1b70b05c80 ffffffff 00c00000
GS =0000 ffff8880d6b0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fc1661bf000 CR3=0000000031627000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd47812fdb
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd47812fe8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd47812fe2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd47812ff6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd4781307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd4781315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ebf301ada14c23e 72d8bf41190f5342 4c45ca5a83fa5457 ce56bcce6de84c9f
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd4851d100 00007fcd479b7460 00007fcd479b0004 0000000b000c000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd479b74b8 00007fcd479b74b0 00007fcd479b74a8 00007fcd479b74a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000010100 RBX=0000000000000000 RCX=ffffffff81617a93 RDX=ffff88801ded0000
RSI=ffffffff81617adb RDI=ffffffff93a67fe0 RBP=ffff88806a620000 RSP=ffffc90000648fd0
R8 =0000000000000001 R9 =fffffbfff274cffc R10=ffffffff93a67fe7 R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81617adc RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6c0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000555555883588 CR3=000000000e182000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e812fdb
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e812fe8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e812fe2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e812ff6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e81307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e81315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e9b74a8 00007f6e9e9b74a0 00007f6e9e9b7498 00007f6e9e9b7470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9f51d100 00007f6e9e9b7460 00007f6e9e9b7478 00007f6e9e9b74c0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e9b74b8 00007f6e9e9b74b0 00007f6e9e9b74a8 00007f6e9e9b74a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85294dd5 RDI=ffffffff9add6740 RBP=ffffffff9add6700 RSP=ffffc9000371f1f0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666657
R12=0000000000000000 R13=000000000000000a R14=ffffffff9add6700 R15=ffffffff85294d70
RIP=ffffffff85294dff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6e9f6bc6c0 ffffffff 00c00000
GS =0000 ffff8880d6d0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000001b33463fff CR3=000000004b8be000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e812fdb
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e812fe8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e812fe2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e812ff6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e81307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e81315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e9b74a8 00007f6e9e9b74a0 00007f6e9e9b7498 00007f6e9e9b7470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9f51d100 00007f6e9e9b7460 00007f6e9e9b7478 00007f6e9e9b74c0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e9e9b74b8 00007f6e9e9b74b0 00007f6e9e9b74a8 00007f6e9e9b74a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000