last executing test programs:

1m0.319722877s ago: executing program 3 (id=149):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8, 0x8040)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r2 = landlock_create_ruleset(0x0, 0x0, 0x2)
syz_io_uring_setup(0x7071, 0x0, &(0x7f00000004c0), 0x0)
ioctl$VIDIOC_S_STD(r2, 0x40085618, 0x0)
r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000580), &(0x7f00000005c0)=0x10)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000740)={0x1, 0x8, 0xdb, &(0x7f0000000640)=""/219})
syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x90, 0x0, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffffffff7fff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7f}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf0ba}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0xc000}, 0x4000810)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x50, r6, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x50}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0x15f, 0xfffd}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x0, 0x7fe}, @window={0x3, 0x5, 0xfffc}, @timestamp, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

59.420736439s ago: executing program 3 (id=162):
syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400000126000400"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0)
r0 = syz_socket_connect_nvme_tcp()
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0))

59.420550888s ago: executing program 3 (id=163):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24008800) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_socket_connect_nvme_tcp()
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000))
r3 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00)
ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000000)={0x3, "c5c2a91e002b1b80000000003d5eff001000", 0x1, 0xfffffffd, 0x2, 0x200, 0x100, 0x4}) (async)
recvfrom$inet_nvme(r2, &(0x7f00000000c0)=""/145, 0x91, 0x0, &(0x7f0000000200)=@caif=@rfm={0x25, 0x5, "06938555c064659090a061bcd79778e2"}, 0x80) (async)
r4 = socket(0x9, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x10) (async)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000001c140000000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000dc75ad6c8fffd9195cd792d49ce932e86b05a230df414377e24566d064b98258e6991fdd5627d12253323b1644cb9bdfb4d059144bb509c2ec9d89d7b061aaff324f7e670dea9071116f1fe23a63ed9d64b72596a1d008f3678b3de62e64cdd584bb15a12d532dbd6445807a4553", @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a00180003030303030300000c0070000500080001000000"], 0x34}}, 0x48840)

59.331122852s ago: executing program 3 (id=164):
io_uring_setup(0x711f, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x10, 0x0, 0x1})
syz_open_procfs(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
write$tun(r1, &(0x7f0000000400)=ANY=[], 0x22)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
creat(&(0x7f00000002c0)='./file0\x00', 0x6)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
mbind(&(0x7f0000170000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x4, 0x200, 0x1)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$poke(0x4, r5, &(0x7f0000001040), 0x282d)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)

59.330738949s ago: executing program 3 (id=165):
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x1c, 0x8, 0x0, 0x0}}, 0xf361209fb3daf314)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000400)}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
socket(0x10, 0x3, 0x0)
r2 = eventfd2(0x5, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r2})
r3 = syz_io_uring_setup(0x4bf9, &(0x7f0000000280)={0x0, 0x10000000, 0x10100, 0x0, 0x200000}, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000340)=<r5=>0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, r9, &(0x7f000000f000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100"], 0x0, 0x37}, 0x28)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x44, 0x0, @fd, 0x6, 0x8, 0xffffff2b, 0x2, 0x1, {0x3}})
io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

57.515815271s ago: executing program 0 (id=199):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000130a010100000000000000000211000008006b4000000001"], 0x1c}}, 0x4040040)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}}, 0x0, 0x0, 0x40, 0x0, "9082a569059fcc05a20b95b37f646f65584bae301019b49cc2dac8b28e9fceb9b3a19cd73eb7691fc9451b3ccf78f32d4c7bf7d8c55ea80345f58eb2d1722d832fffca7bc8da4666153abff33a981190"}, 0xd8)
syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450e002c0064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60030071907800e701020000"], 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0), 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r2, 0x58, &(0x7f0000000240)={0x0, <r3=>0x0}}, 0x10)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r4 = socket(0x26, 0xa, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000780)={r4})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001200)={r3, 0x4}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)={0x18, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x800, 0xfb)
pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x8000000, 0x50)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001a00010a00000000000000000200000008"], 0x1c}}, 0x0)
r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x160, 0x80})
io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
socket$kcm(0x2, 0x5, 0x0)

56.700482395s ago: executing program 0 (id=207):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x10001}, 0x8) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
creat(&(0x7f0000000000)='./bus\x00', 0x0) (async)
open(&(0x7f0000000240)='./bus\x00', 0x34117e, 0x44) (async, rerun: 64)
getdents64(r1, &(0x7f0000000600)=""/173, 0xad) (rerun: 64)
r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r4 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x6, 0x2b0}) (async, rerun: 32)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32)
mount$overlay(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 32)
pread64(r8, &(0x7f0000002200)=""/89, 0x59, 0x10000) (async, rerun: 32)
close_range(r4, 0xffffffffffffffff, 0x0) (rerun: 32)
getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000003c0)={<r10=>0x0, 0x7, 0x6, 0xffe, 0xe39, 0xd, 0x5, 0x80000001, {0x0, @in6={{0xa, 0x4e25, 0x10, @private2, 0x4}}, 0x6, 0x5, 0x7fff, 0xfffffffd, 0x5}}, &(0x7f00000002c0)=0xb0)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={r10, 0xc}, 0x2)

56.620622514s ago: executing program 0 (id=209):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
socket$kcm(0x2, 0x5, 0x84)

56.567299194s ago: executing program 0 (id=211):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f00000017c0), &(0x7f00000002c0)=""/125, &(0x7f0000000340), 0x0, 0x3, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18dfff0000002577c60020000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0x40010)

55.780886361s ago: executing program 3 (id=224):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, 0x0, 0x0)
recvmsg$unix(r0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000100)=r4, 0x8)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000100)=r2, 0x4)

54.41829626s ago: executing program 0 (id=225):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000cc0)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000740)="27050200000000000600002fb96d02000000000000008100", 0x18}, {&(0x7f0000000180)="ba8788a8", 0x4}, {&(0x7f0000000040)="df431a0ec115", 0x6}], 0x3}, 0x20000000)

54.416111806s ago: executing program 32 (id=224):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, 0x0, 0x0)
recvmsg$unix(r0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000100)=r4, 0x8)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000100)=r2, 0x4)

47.158004969s ago: executing program 0 (id=225):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000cc0)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000740)="27050200000000000600002fb96d02000000000000008100", 0x18}, {&(0x7f0000000180)="ba8788a8", 0x4}, {&(0x7f0000000040)="df431a0ec115", 0x6}], 0x3}, 0x20000000)

40.879764513s ago: executing program 2 (id=382):
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x8000, 0x2, 0xd, 0x44f}, {0x1, 0x2, 0x6, 0x6}, {0x101, 0xc, 0x5, 0x6}, {0x6, 0x3, 0x63, 0xffffffff}, {0x7, 0x84, 0x5b, 0x7}, {0xfe00, 0x7f, 0x0, 0x1}, {0x3ff, 0x8, 0x5, 0x4f4e}]}, 0x10)
r0 = socket$netlink(0x10, 0x3, 0xe)
socket$netlink(0x10, 0x3, 0x15)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x3d0fa122, @remote, 0xe}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x2, 0x6af2, @vifc_lcl_addr=@broadcast, @empty}, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{}, {}, {}, {}]})
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x27, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x1, 0x0, 0x0, {0x0, r3}})
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x80601, 0x0)
ioctl$COMEDI_SUBDINFO(r4, 0x80486402, &(0x7f00000002c0))
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0xfffffffffffffffc)
r6 = syz_create_resource$binfmt(&(0x7f0000000380)='./file0\x00')
execveat$binfmt(r4, r6, &(0x7f0000000480)={[&(0x7f00000003c0)='wlan0\x00', &(0x7f0000000400)='y&!+--^^,#@-.*\x00', &(0x7f0000000440)='\x00']}, &(0x7f0000000540)={[&(0x7f00000004c0)='0.{-[v\x88\x00', &(0x7f0000000500)='^\x00']}, 0x800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1b8, r8, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4080}, 0x40)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r9, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x11, 0x6, @l2={'ib', 0x3a, 'vlan1\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x6d9, 0x8}, 0xc)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@map=r10, 0x9, 0x0, 0x3ff, &(0x7f0000000980), 0x0, 0x0, &(0x7f00000009c0), &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0]}, 0x40)
sendmsg$nl_generic(r4, &(0x7f0000000b80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x8004}, 0x4000880)
syz_io_uring_setup(0x2150, &(0x7f0000000bc0)={0x0, 0x41e8, 0x400, 0x3, 0x45, 0x0, r5}, &(0x7f0000000c40)=<r11=>0x0, &(0x7f0000000c80))
syz_io_uring_submit(r11, 0x0, &(0x7f0000000cc0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x33, 0x0, @fd_index=0x6, 0xffffffff, 0x0, 0x0, 0x10, 0x1, {0x1, r3}})
syz_io_uring_setup(0x4ea8, &(0x7f0000000d00)={0x0, 0x4c94, 0x20000, 0x3, 0x101, 0x0, r4}, &(0x7f0000000d80), &(0x7f0000000dc0)=<r12=>0x0)
syz_io_uring_submit(0x0, r12, &(0x7f0000000e80)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r5, &(0x7f0000000e00)='./file0/file0\x00', &(0x7f0000000e40)='./file0\x00', r4, 0x400})

40.70113333s ago: executing program 2 (id=385):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
close(r1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)

40.70057516s ago: executing program 2 (id=387):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa)
syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @empty, @val, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @echo}}}}, 0x0)

40.609771683s ago: executing program 2 (id=388):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r2, 0x9, 0x78}, 0xc)

40.609329523s ago: executing program 2 (id=389):
syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x79ad, 0x200, 0x3, 0x400247}, 0x0, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
mlockall(0x4)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x7, 0xffd0, 0x4, 0x25, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x10, 0xe, 0x5, 0x204}, {0x804, 0xfffd, 0x1, 0x48, 0x7, 0x2, 0xd5, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x40}, {0x100005, 0x3, 0x3, 0x5, 0x84, 0xfe, 0x3, 0x2, 0x40, 0x71, 0x0, 0x76, 0x6}], 0x1})
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x5fffffffffe, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68fc, 0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe], 0x100000, 0x202})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

40.440144275s ago: executing program 2 (id=390):
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
r4 = fanotify_init(0x81, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x2, 0x73)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f00000000c0)=0xeeee8000)
socket$kcm(0x2, 0x2, 0x73)
close_range(r5, 0xffffffffffffffff, 0x0)
fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
splice(r0, 0x0, r2, 0x0, 0x200000000001, 0x0)

25.420233763s ago: executing program 33 (id=390):
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
r4 = fanotify_init(0x81, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x2, 0x73)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f00000000c0)=0xeeee8000)
socket$kcm(0x2, 0x2, 0x73)
close_range(r5, 0xffffffffffffffff, 0x0)
fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
splice(r0, 0x0, r2, 0x0, 0x200000000001, 0x0)

14.131217857s ago: executing program 1 (id=655):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)

14.130924298s ago: executing program 1 (id=656):
r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0xec21, 0x10000, 0x1, 0x40000333, 0x0, r0}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x40080c0)

14.050880176s ago: executing program 1 (id=657):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061121400000000809500000000000000a99a"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20)
sendto$inet(r1, &(0x7f0000000400)='X', 0x1, 0x8884, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x25, 0x0, 0x1b}, 0x9c)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)

14.05056997s ago: executing program 1 (id=658):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000280)="9a", 0x1}], 0x1}}], 0x1, 0x4000000)
syz_emit_ethernet(0xdc1, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xd8b, 0x3a, 0xff, @dev, @local, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3, 0x2, "07df82bb6bf7a292c06b1d590f879eaf31"}, {0x1f, 0x6, "e05591082b87569f6bdc58206e027a90058faf478036b7199d92110692e5ea9d0f888c5ce7a7f60bc84789b93ed6dafde1"}, {0x18, 0x1a7, "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"}]}}}}}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r2, 0x9, 0x78}, 0xc)

13.948426912s ago: executing program 1 (id=659):
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xfffffe99)
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098)
chdir(&(0x7f0000000140)='./file1\x00')
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000001880)={{0x1, 0x1, 0x18, r5, {0xf}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="2f0000000020000004000000", @ANYRES32, @ANYBLOB="2e5127040286eb95af80e54964039fff3dbcb9cd7336279e8a42d1435bc8db0c13934b3fd3eb3ea4674a6cce", @ANYRES64=0x0], 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x4, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
lstat(&(0x7f0000000140)='./file0\x00', 0x0)

13.116159869s ago: executing program 1 (id=670):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x1)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000140)=[@code={0x1, 0x50, {"66b888008ed8360f00dcc481755fe946fd430fc7341db5000000670f79b100000000c4a1045899756c3482c4c1157d4c00d566430f382a6f00c4c2ddb87b00"}}, @cpuid={0x2, 0x18, {0x62, 0xd}}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x7a, {"66baf80cb8c4019783ef66bafc0cecc421777c1ca549000000c744240015000000c7442402f4000000ff2c24360f7892005b00000f08360fef7367b9940b00000f3248b807000000000000000f23d80f21f835000000600f23f866673e660f388156c38fa978c74572"}}, @code={0x1, 0x5f, {"65d183be0000002e45ed65f30f1ed266ba4200ecc4210012f9c4e16a5f4ccf7366b889008ec0c7442400e6000000c744240200000000ff2c24410f9dfbb9020a0000b800700000ba000000000f30"}}, @code={0x1, 0x69, {"b93e0b00000f320f01c2460f01c5b9e40b00000f3266baf80cb887020f84ef66bafc0cec48b8feffff7f000000000f23c80f21f835080000000f23f80f00d1c403115d3b00f30f1efd66baf80cb864553883ef66bafc0ced"}}, @cpuid={0x2, 0x18, {0x0, 0xffff}}, @cpuid={0x2, 0x18, {0x526e8215, 0x7}}, @uexit={0x0, 0x18, 0x7ff}], 0x20a})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7fffffffffffffff, 0x1, 0x3, 0x6, 0x84, 0x5, 0x10000, 0x1, 0xffffffffffffff57, 0xe, 0x1, 0x3, 0x4, 0xecf, 0x1, 0x8000000000000000], 0x10000, 0x80001}) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7fffffffffffffff, 0x1, 0x3, 0x6, 0x84, 0x5, 0x10000, 0x1, 0xffffffffffffff57, 0xe, 0x1, 0x3, 0x4, 0xecf, 0x1, 0x8000000000000000], 0x10000, 0x80001})
r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=<r4=>0x0)
sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x91000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r3, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10040800}, 0x10) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10040800}, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r0) (async)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x1) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x1)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb4, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffa}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x5}, 0x40000)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000a40)={@rand_addr, @multicast2, @private}, &(0x7f0000000a80)=0xc)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000ac0), 0x200, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r6, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), r0) (async)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), r0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000e80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c80)={0x1a8, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xcd, 0xa8, @random="eafd4c407139a386a997f69069ccbc7b11bf51ab2a9534350e7aadf1003619e39dae4c49cc1284b742a866b03adc626a3fbc394d4d4e130ef62387bba0aefef99f4d1b08ad003958cea885531fdb9db7522ebd4088ce1460419bba8220e181cc0945e088efe956e21f94a14f2b8ebe5a19cbbeb9141cdb3c117be528b204db6c7b1596bd806ab6fb2575634ddc6fb1a5598baa3f9bc67d5c93b7610713bf70f8f912947f7c96c0fb318aef814601232129ca19381a5139ece309dd61ebb7cc4cce6ef5e6983efa8cc9"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x89, 0xa8, @random="68ec35b8afca66265f6f061caaf77d9067c72d35a25431f95703da26d8f9f501a30125e948edfe379f70701b74f760c6713870188b314623f8ee39e81fed106f7dde095e757b0147d338579bd20f4a6eb9982f13382ff70b0bacf4f70a18d8e37bf7b92da7ab758dbd555a1174320ab018a29a5bc780ad1e47af1b013f0d41cd3b2b561987"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000010)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r7, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x118, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x118}, 0x1, 0x0, 0x0, 0x24040841}, 0x81)
socket$inet6_udp(0xa, 0x2, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001100), r0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x38, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x1c, 0x18, {0x6, @bearer=@l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x44040000}, 0x4041) (async)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x38, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x1c, 0x18, {0x6, @bearer=@l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x44040000}, 0x4041)
mount$9p_virtio(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', &(0x7f0000001280), 0x820, &(0x7f00000012c0)={'trans=virtio,', {[{@cache_none}, {@fscache}, {@cache_loose}], [{@smackfshat={'smackfshat', 0x3d, 'veth0_to_bridge\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}})
stat(&(0x7f0000001380)='./file1\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
quotactl$Q_GETFMT(0x0, &(0x7f0000001340)=@filename='./file0\x00', r10, &(0x7f0000001440))
setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000001480)={0x3, "950a39"}, 0x6)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x40) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x40)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002) (async)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002)

2.020867532s ago: executing program 4 (id=783):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000000014000300686173683a69702c706f72742c697000050001000700000005000500020000000900020073797a300000000005000400010000002f1af3c5e39b35172e82fdb6622cb7cff9d2dbdd0878fc48aff8c866b99d66a1bd26a060de038e57806cb5559e4445e45bc8691096ace5163a520d4fdf3148e2f6c981cd777a174c172e4fca9b9364ef677d4e5531ae16bd9eaa012312c6a1abab79fbcb8d0312425c957c4820acc6198c56a65403f15ae5f5a8432c647a01a32954410c0492411912796c63ad5006991c6238582e2d83dbeff8719916"], 0x4c}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10)

2.020659977s ago: executing program 4 (id=784):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x2, 0x3, 0x6})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
dup(r2)
close_range(r0, 0xffffffffffffffff, 0x0)

1.969592416s ago: executing program 4 (id=785):
r0 = socket$kcm(0x10, 0x2, 0x0)
syz_usbip_server_init(0x3) (async)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

1.400696468s ago: executing program 4 (id=786):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x5, 0xfffffffffffffffd, 0x4, 0x1, 0x0, 0x4002004c7, 0x1000, 0x40, 0x3, 0xfffffffffffffffc, 0x5, 0x2000, 0x3, 0xb4d7, 0x9], 0xeeee8000, 0x2113c2})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x260})
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
io_setup(0x2, &(0x7f0000000200))

1.399762863s ago: executing program 4 (id=787):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
pipe2(&(0x7f0000000200)={<r1=>0x0, <r2=>0x0}, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0x6, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000240)=0xe0ce)
ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000040)={'\x00', 0x1, 0x1, 0x1, 0x0, 0x0, 0xdddd1000, 0x5000, '\x00', 0x5})

569.990851ms ago: executing program 5 (id=799):
setreuid(0xee01, 0xee01)
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000300)={0x0, 0x2458, 0x2000, 0x0, 0x15c}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7f, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0x10})
io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0)

569.697943ms ago: executing program 5 (id=800):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)

490.888685ms ago: executing program 5 (id=801):
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/145, 0x91}, {&(0x7f00000000c0)=""/4096, 0x1000}], 0x2)
r1 = socket$inet6(0xa, 0x80000, 0xda411c1)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001100), 0xc0, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000001140)={0x2, 0x2})
syz_open_pts(r0, 0x180801)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000002180)={0x48, 0x8, r0, 0x0, 0x7, 0x1000, &(0x7f0000001180)="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", 0x4})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000002240), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002280)=<r5=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000022c0)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002300)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002340)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002380)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000002480)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x4c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20004800)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000024c0)=0x6)
write$nci(r0, &(0x7f0000002500)=@DATA={0x3, 0x0, 0x0, 0x0, 0x4, "ad1506bdd653a72e3f2c8002e6b2170c105b43fa539bf079ee97d9993cee4b8028e0dd7552ad47561dd31c79bf19480e5452b906e2224c10421dbad90ca925f7b955ef649abc6111af7f13583db653b3df6b95c8f9ad68f84d551295435a"}, 0x61)
fgetxattr(r0, &(0x7f0000002580)=@known='trusted.overlay.origin\x00', &(0x7f00000025c0)=""/149, 0x95)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000002680))
ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000026c0)={0xd, 0x7, 0x2})
writev(r0, &(0x7f0000002880)=[{&(0x7f0000002700)="823d85a43af578f49f1f1ab129e4a6f35ef0ab65f09b0b5240c63621f8888e322ce90b7dafcdc58b0d9cbc169bf9db592c5d8b1182340eefdb3601d9d3b5086e39dffdfbcdb16279a0a0c195ca3e4bba6bd5807c763b8e42504a41ce5451490557afd3f426a1a065a8847a64c35f88437cd481be6cc1d9b224d5f1eddbf38747f36e1a6bcb5f46aab96d269362911a543b6c65d88bf596f2dcbdfb2136585c334e52dd1dbc5fa562067d447fd3e3c076eb4ae5650ed13e368e2569a080d05fd7e3ac4edd9340f4796839f539dc1554ecd40a1c12", 0xd4}, {&(0x7f0000002800)="08de88c123dcf64e0e2833a1f7da223022f4ccc5f5a8e794749dd89f20f3cb73ca65215aeb7b8ed9939b2fd3dd07d496de82e0505483dbc88f104b23ffdb1b606390be204b41322c90f5fbf780bebfdb482d0d915fdf1da50da7f1ab8f67b76429c10364baad85df97ee55c84d6bb70987b8de", 0x73}], 0x2)
ioctl$SNAPSHOT_S2RAM(r0, 0x330b)
r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000028c0), 0x701, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r11, 0x3b86, &(0x7f0000002900)={0x18})
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xfca0315164b81da0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000002940))
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r10, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x3c, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x5c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44048001}, 0x40)

489.971242ms ago: executing program 4 (id=802):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) (async)
syz_open_dev$I2C(&(0x7f0000000040), 0x4, 0x0) (async)
r1 = semget$private(0x0, 0x6, 0x0)
r2 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r3, 0x0) (async)
semtimedop(r1, &(0x7f0000000480)=[{0x0, 0xfffd}], 0x1, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltaction={0x28, 0x30, 0x9, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}}, 0x0) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="eb", 0x1}], 0x1) (async)
bind$qrtr(r5, &(0x7f0000000080)={0x2a, 0x1, 0x7fff}, 0xc)

488.900622ms ago: executing program 5 (id=803):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x44) (async, rerun: 32)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32=r4, @ANYBLOB="08000f"], 0x2c}}, 0x60800)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)

892.036µs ago: executing program 5 (id=804):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x2, 0x1}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={<r3=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r3, 0x80000})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x516, 0xd7, 0x8})
r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2711}, 0x10, 0x80800)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000140)={0x6, 'veth0_to_bridge\x00', {0x9}, 0x9})

0s ago: executing program 5 (id=805):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=<r6=>0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x48000)
recvmmsg$unix(r8, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4090, 0xffa}], 0x1}}], 0x1, 0x10000, 0x0)
pipe2(&(0x7f0000000200)={<r9=>0x0, <r10=>0x0}, 0x0)
r11 = fanotify_init(0x200, 0x0)
fanotify_mark(r11, 0x1, 0x40001043, r9, 0x0)
vmsplice(r9, &(0x7f0000000700)=[{&(0x7f0000000500)="6bf4", 0x2}], 0x1, 0x1)
write$FUSE_INIT(r10, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0xceaf, 0x44008002, 0x9, 0x2, 0x4, 0x6, 0x0, 0x0, 0x80, 0x800}}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$int_in(r12, 0x5452, &(0x7f0000000040)=0x8001)
r13 = getpgid(0x0)
fcntl$setownex(r12, 0xf, &(0x7f0000000140)={0x2, r13})
r14 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r15 = getpid()
process_vm_readv(r15, &(0x7f0000008400)=[{&(0x7f0000000340)=""/69, 0x623c41ea}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000da733da4d249506184eda79c4b1561fc48a01e75852d43806589fa7ba35866fd2d2393006c68e1d02ebc32f7a7623e87585973fb4c1b658048a8bd27907481fe6ecdf96aa3cb2bca6775eb189a0b31a506d42e65febe30967216c19c8a1e8ce9da2932ab99812a2ee2e95988bcdf7119966208d49668d523d6", @ANYRES16=r2, @ANYBLOB="00042cbd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r3, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r4, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r5, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=0x0, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r6, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r13, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r14, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r15, @ANYBLOB], 0x16c}}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0xfd, 0x3, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x40, 0x80, 0x6, 0x2}})

kernel console output (not intermixed with test programs):

1, location=2147483241
[   58.694756][ T6231] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483495, location=2147483495
[   58.697911][ T6231] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2147483239, location=2147483239
[   58.700966][ T6231] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   58.705017][ T6231] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[   58.708478][ T6231] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741823, location=1073741823
[   58.711881][ T6231] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741567, location=1073741567
[   58.714861][ T6231] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741822, location=1073741822
[   58.718753][ T6231] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741566, location=1073741566
[   58.724000][ T6231] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741821, location=1073741821
[   58.729728][ T6231] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741565, location=1073741565
[   58.733104][ T6231] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741673, location=1073741673
[   58.740376][ T6231] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741417, location=1073741417
[   58.743810][ T6231] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741671, location=1073741671
[   58.747629][ T6231] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1073741415, location=1073741415
[   58.751178][ T6231] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[   58.753959][ T6231] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[   59.088398][ T6272] netlink: 'syz.3.70': attribute type 1 has an invalid length.
[   59.287443][   T59] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[   59.360356][ T6296] ieee802154 phy0 wpan0: encryption failed: -22
[   59.453680][   T59] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   59.457484][   T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[   59.460368][   T59] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[   59.463343][   T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.467997][   T59] usb 7-1: config 0 descriptor??
[   59.472243][   T59] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[   59.474960][   T59] dvb-usb: bulk message failed: -22 (3/0)
[   59.482925][   T59] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   59.486742][   T59] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[   59.489194][   T59] usb 7-1: media controller created
[   59.492020][   T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   59.502257][   T59] dvb-usb: bulk message failed: -22 (6/0)
[   59.504289][   T59] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[   59.517932][   T59] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input5
[   59.519574][ T6315] netlink: 'syz.0.84': attribute type 2 has an invalid length.
[   59.525108][   T59] dvb-usb: schedule remote query interval to 150 msecs.
[   59.528747][   T59] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[   59.675551][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.680852][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.698497][   T59] dvb-usb: bulk message failed: -22 (1/0)
[   59.701051][   T59] dvb-usb: error while querying for an remote control event.
[   59.865646][   T59] dvb-usb: bulk message failed: -22 (1/0)
[   59.868045][   T59] dvb-usb: error while querying for an remote control event.
[   59.886860][ T1023] usb 7-1: USB disconnect, device number 3
[   59.901840][ T1023] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[   60.063987][ T6323] capability: warning: `syz.1.86' uses 32-bit capabilities (legacy support in use)
[   60.075416][ T5962] Bluetooth: hci0: command tx timeout
[   60.075995][ T5954] Bluetooth: hci1: command tx timeout
[   60.076017][   T63] Bluetooth: hci2: command tx timeout
[   60.109415][ T6319] Zero length message leads to an empty skb
[   60.192632][ T6333] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[   60.214203][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.216523][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.218699][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.220808][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.222868][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.224997][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.228848][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.231604][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.233881][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.236256][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.238340][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.240637][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.242757][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.244921][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.247563][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.249954][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.252031][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.254726][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.258607][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.260816][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.263351][ T6337] 9pnet_fd: Insufficient options for proto=fd
[   60.311936][ T6343] kvm: kvm [6338]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[   60.316576][ T6343] kvm: kvm [6338]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[   60.527103][ T6373] comedi comedi1: comedi_config --init_data is deprecated
[   61.088084][ T6385] process 'syz.2.102' launched '/dev/fd/8' with NULL argv: empty string added
[   61.557889][ T6402] __nla_validate_parse: 5 callbacks suppressed
[   61.557900][ T6402] netlink: 96 bytes leftover after parsing attributes in process `syz.2.107'.
[   61.641413][   T40] kauditd_printk_skb: 65 callbacks suppressed
[   61.641422][   T40] audit: type=1400 audit(1752710860.237:285): avc:  denied  { map } for  pid=6412 comm="syz.2.109" path="/dev/cuse" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[   61.676678][   T40] audit: type=1400 audit(1752710860.277:286): avc:  denied  { checkpoint_restore } for  pid=6417 comm="syz.2.110" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   61.708159][ T6418] input: syz1 as /devices/virtual/input/input6
[   61.722221][   T40] audit: type=1400 audit(1752710860.317:287): avc:  denied  { ioctl } for  pid=6423 comm="syz.0.112" path="socket:[12401]" dev="sockfs" ino=12401 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   61.745047][ T6398] nvme_fabrics: missing parameter 'transport=%s'
[   61.745066][ T6398] nvme_fabrics: missing parameter 'nqn=%s'
[   61.793561][ T6418] sp0: Synchronizing with TNC
[   61.834952][ T6432] dlm: no locking on control device
[   61.840749][   T40] audit: type=1400 audit(1752710860.437:288): avc:  denied  { create } for  pid=6431 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   61.848977][   T40] audit: type=1400 audit(1752710860.447:289): avc:  denied  { setopt } for  pid=6431 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   61.899874][ T6434] No source specified
[   61.989330][ T6438] netlink: 'syz.1.115': attribute type 1 has an invalid length.
[   62.024685][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'.
[   62.054914][   T40] audit: type=1400 audit(1752710860.647:290): avc:  denied  { append } for  pid=6442 comm="syz.2.117" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   62.055874][ T6443] program syz.2.117 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   62.094408][ T6443] program syz.2.117 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   62.116893][   T40] audit: type=1400 audit(1752710860.717:291): avc:  denied  { create } for  pid=6442 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   62.123626][   T40] audit: type=1400 audit(1752710860.717:292): avc:  denied  { getopt } for  pid=6442 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   62.129691][   T40] audit: type=1400 audit(1752710860.717:293): avc:  denied  { connect } for  pid=6442 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   62.135706][   T40] audit: type=1400 audit(1752710860.727:294): avc:  denied  { write } for  pid=6442 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   63.034085][ T6470] netlink: 'syz.0.125': attribute type 9 has an invalid length.
[   63.038757][ T6470] netlink: 32 bytes leftover after parsing attributes in process `syz.0.125'.
[   63.154929][ T6480] block device autoloading is deprecated and will be removed.
[   63.188198][ T6486] program syz.3.131 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   63.223796][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'.
[   63.303808][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.307714][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.324859][ T6500] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.325262][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.134'.
[   63.335666][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.134'.
[   63.490380][ T6521] input: syz0 as /devices/virtual/input/input7
[   63.719016][ T6544] fuse: Unknown parameter 'allow_oìÍî'
[   63.726895][ T6544] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   63.793546][ T6550] block device autoloading is deprecated and will be removed.
[   63.891299][ T6018] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   64.090468][ T6018] usb 5-1: Using ep0 maxpacket: 8
[   64.131855][ T6018] usb 5-1: config index 0 descriptor too short (expected 3602, got 18)
[   64.135489][ T6018] usb 5-1: config 72 has too many interfaces: 169, using maximum allowed: 32
[   64.139898][ T6018] usb 5-1: config 72 has an invalid descriptor of length 134, skipping remainder of the config
[   64.144291][ T6018] usb 5-1: config 72 has 0 interfaces, different from the descriptor's value: 169
[   64.234661][ T6018] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[   64.238533][ T6018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.242580][ T6018] usb 5-1: Product: syz
[   64.244370][ T6018] usb 5-1: Manufacturer: syz
[   64.259070][ T6018] usb 5-1: SerialNumber: syz
[   64.388986][ T6585] netlink: 72 bytes leftover after parsing attributes in process `syz.1.154'.
[   64.402613][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'.
[   64.441059][ T6591] syz.2.157: attempt to access beyond end of device
[   64.441059][ T6591] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0
[   64.441511][ T6592] netlink: 'syz.2.157': attribute type 5 has an invalid length.
[   64.445089][ T6591] ADFS-fs (nbd2): error: unable to read block 3, try 0
[   64.448169][ T6592] netlink: 'syz.2.157': attribute type 7 has an invalid length.
[   64.457133][ T6592] : entered promiscuous mode
[   64.492699][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'.
[   64.497349][ T6596] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.158'.
[   64.566707][ T6018] usb 5-1: USB disconnect, device number 2
[   64.587053][ T6603] vivid-007: =================  START STATUS  =================
[   64.589588][ T6603] vivid-007: Enable Output Cropping: true
[   64.591418][ T6603] vivid-007: Enable Output Composing: true
[   64.593258][ T6603] vivid-007: Enable Output Scaler: true
[   64.595017][ T6603] vivid-007: Tx RGB Quantization Range: Automatic
[   64.598472][ T6603] vivid-007: Transmit Mode: HDMI
[   64.600761][ T6603] vivid-007: Hotplug Present: 0x00000000
[   64.603242][ T6603] vivid-007: RxSense Present: 0x00000000
[   64.606244][ T6603] vivid-007: EDID Present: 0x00000000
[   64.608525][ T6603] vivid-007: ==================  END STATUS  ==================
[   65.128561][ T6635] netlink: 'syz.0.167': attribute type 11 has an invalid length.
[   65.267556][   T34] cfg80211: failed to load regulatory.db
[   65.471636][ T6664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.479884][ T6664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.490592][ T6664] bond0 (unregistering): Released all slaves
[   65.585337][   T59] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   65.585557][ T5954] Bluetooth: hci0: command 0x0c1a tx timeout
[   65.587595][   T59] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[   65.745977][ T6707] warning: `syz.0.188' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.898151][ T6714] netlink: 'syz.1.187': attribute type 8 has an invalid length.
[   66.065615][ T6724] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   66.086758][ T6724] 9pnet_virtio: no channels available for device syz
[   66.603452][ T6743] __nla_validate_parse: 7 callbacks suppressed
[   66.603466][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'.
[   66.675332][ T6013] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   66.835436][ T6013] usb 7-1: Using ep0 maxpacket: 8
[   66.839954][ T6013] usb 7-1: config index 0 descriptor too short (expected 24929, got 92)
[   66.843314][ T6013] usb 7-1: config 97 has too many interfaces: 97, using maximum allowed: 32
[   66.847763][ T6013] usb 7-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config
[   66.851702][ T6013] usb 7-1: config 97 has 0 interfaces, different from the descriptor's value: 97
[   66.858082][ T6013] usb 7-1: New USB device found, idVendor=f125, idProduct=a488, bcdDevice= 0.40
[   66.861743][ T6013] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.864742][ T6013] usb 7-1: Product: syz
[   66.866569][ T6013] usb 7-1: Manufacturer: syz
[   66.868505][ T6013] usb 7-1: SerialNumber: syz
[   67.067596][ T6752] netlink: 48 bytes leftover after parsing attributes in process `syz.1.201'.
[   67.087673][   T40] kauditd_printk_skb: 71 callbacks suppressed
[   67.087683][   T40] audit: type=1400 audit(1752710865.687:366): avc:  denied  { nlmsg_read } for  pid=6751 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   67.088607][ T6013] usb 7-1: USB disconnect, device number 4
[   67.370908][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'.
[   67.483122][   T40] audit: type=1400 audit(1752710866.077:367): avc:  denied  { mount } for  pid=6770 comm="syz.0.207" name="/" dev="ramfs" ino=12852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   67.666401][   T59] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[   67.668399][ T5954] Bluetooth: hci1: command 0x0c1a tx timeout
[   67.669166][   T59] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[   67.824665][ T6792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.216'.
[   67.829928][ T6791] netlink: 60 bytes leftover after parsing attributes in process `syz.1.216'.
[   69.740387][   T40] audit: type=1400 audit(1752710868.337:368): avc:  denied  { execute } for  pid=6813 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   69.749100][   T40] audit: type=1400 audit(1752710868.337:369): avc:  denied  { execute_no_trans } for  pid=6813 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[   69.827981][ T6816] Illegal XDP return value 4294967274 on prog  (id 80) dev N/A, expect packet loss!
[   69.892978][ T5962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.903218][ T5962] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.906768][ T5962] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.909774][ T5962] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.912733][ T5962] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.936333][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.939410][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.941802][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.944544][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.950815][   T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.955781][ T5962] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   69.961115][ T5962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   69.963773][ T5962] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   69.967759][ T5962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   69.970753][ T5962] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   70.019087][ T6831] netlink: 48 bytes leftover after parsing attributes in process `syz.2.232'.
[   70.866680][ T6821] chnl_net:caif_netlink_parms(): no params data found
[   71.082223][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.245'.
[   71.110870][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.112617][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.116515][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.119675][ T6821] bridge_slave_0: entered allmulticast mode
[   71.123574][ T6821] bridge_slave_0: entered promiscuous mode
[   71.133386][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.138687][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.141176][ T6821] bridge_slave_1: entered allmulticast mode
[   71.144291][ T6821] bridge_slave_1: entered promiscuous mode
[   71.164001][   T40] audit: type=1400 audit(1752710869.757:370): avc:  denied  { create } for  pid=6868 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   71.175330][   T40] audit: type=1400 audit(1752710869.767:371): avc:  denied  { bind } for  pid=6868 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   71.214119][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'.
[   71.269544][ T6827] chnl_net:caif_netlink_parms(): no params data found
[   71.278578][ T6821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.283245][ T6821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.389263][ T6821] team0: Port device team_slave_0 added
[   71.392670][ T6821] team0: Port device team_slave_1 added
[   71.516783][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.521029][ T6887] delete_channel: no stack
[   71.526913][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.535002][ T6821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.539816][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.542010][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.569414][ T6821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.575161][ T6827] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.579865][   T40] audit: type=1400 audit(1752710870.177:372): avc:  denied  { create } for  pid=6898 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   71.587119][ T6827] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.589987][ T6827] bridge_slave_0: entered allmulticast mode
[   71.596112][ T6827] bridge_slave_0: entered promiscuous mode
[   71.668539][ T6827] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.670839][ T6827] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.673124][ T6827] bridge_slave_1: entered allmulticast mode
[   71.676783][ T6827] bridge_slave_1: entered promiscuous mode
[   71.718925][ T6821] hsr_slave_0: entered promiscuous mode
[   71.721383][ T6821] hsr_slave_1: entered promiscuous mode
[   71.723692][ T6821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.727335][ T6821] Cannot create hsr debugfs directory
[   71.804066][ T6827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.876626][   T40] audit: type=1400 audit(1752710870.477:373): avc:  denied  { write } for  pid=6910 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   71.892978][ T6827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.920203][   T40] audit: type=1400 audit(1752710870.517:374): avc:  denied  { create } for  pid=6912 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   71.928070][   T40] audit: type=1400 audit(1752710870.517:375): avc:  denied  { connect } for  pid=6912 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   71.985414][ T5954] Bluetooth: hci3: command tx timeout
[   71.985629][ T5962] Bluetooth: hci2: command tx timeout
[   72.026232][ T6827] team0: Port device team_slave_0 added
[   72.034407][ T6827] team0: Port device team_slave_1 added
[   72.100926][ T6923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.267'.
[   72.166780][ T6827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.169005][ T6827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.178953][ T6827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.193404][ T6827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.198578][ T6827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.205404][ T6922] sctp: [Deprecated]: syz.1.268 (pid 6922) Use of int in maxseg socket option.
[   72.205404][ T6922] Use struct sctp_assoc_value instead
[   72.208719][ T6827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.315401][ T6930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.333791][ T6827] hsr_slave_0: entered promiscuous mode
[   72.336202][ T6827] hsr_slave_1: entered promiscuous mode
[   72.338743][ T6827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.341856][ T6827] Cannot create hsr debugfs directory
[   72.391046][ T6935] tipc: Started in network mode
[   72.392646][ T6935] tipc: Node identity b2e0c4614235, cluster identity 4711
[   72.394947][ T6935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.452211][ T6935] syzkaller0: entered promiscuous mode
[   72.453968][ T6935] syzkaller0: entered allmulticast mode
[   72.456906][ T6935] tipc: Resetting bearer <eth:syzkaller0>
[   72.472507][ T6934] tipc: Resetting bearer <eth:syzkaller0>
[   73.447686][ T6037] tipc: Node number set to 4040541281
[   73.516991][ T6934] tipc: Disabling bearer <eth:syzkaller0>
[   73.575370][ T6821] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   73.593493][ T6821] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   73.604046][ T6821] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   73.623720][ T6821] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   73.750662][   T34] IPVS: starting estimator thread 0...
[   73.767126][ T6827] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.829591][ T6956] sctp: [Deprecated]: syz.2.280 (pid 6956) Use of int in maxseg socket option.
[   73.829591][ T6956] Use struct sctp_assoc_value instead
[   73.845732][ T6957] IPVS: using max 43 ests per chain, 103200 per kthread
[   73.880647][ T6827] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.927894][ T6821] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.946231][ T6821] 8021q: adding VLAN 0 to HW filter on device team0
[   73.968186][ T6827] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.980055][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.983184][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.991227][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.993525][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.008548][ T6972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.287'.
[   74.026670][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'.
[   74.065454][ T5962] Bluetooth: hci3: command tx timeout
[   74.065534][ T5954] Bluetooth: hci2: command tx timeout
[   74.070694][ T6827] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.167224][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'.
[   74.167668][   T40] kauditd_printk_skb: 2 callbacks suppressed
[   74.167677][   T40] audit: type=1400 audit(1752710872.757:378): avc:  denied  { create } for  pid=6980 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   74.204321][   T40] audit: type=1400 audit(1752710872.797:379): avc:  denied  { bind } for  pid=6983 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   74.234917][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'.
[   74.304200][ T6827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.317846][ T6821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.320744][ T6827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.329434][ T6827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.332577][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'.
[   74.334511][ T6827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.397960][ T6827] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.409521][ T6827] 8021q: adding VLAN 0 to HW filter on device team0
[   74.417079][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.420262][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.430002][   T40] audit: type=1400 audit(1752710873.027:380): avc:  denied  { connect } for  pid=7006 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   74.450895][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.453149][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.455834][   T40] audit: type=1400 audit(1752710873.047:381): avc:  denied  { setopt } for  pid=7006 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   74.465592][   T40] audit: type=1400 audit(1752710873.047:382): avc:  denied  { create } for  pid=7006 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[   74.481839][ T7006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.517416][ T6821] veth0_vlan: entered promiscuous mode
[   74.522638][ T6821] veth1_vlan: entered promiscuous mode
[   74.541840][ T6821] veth0_macvtap: entered promiscuous mode
[   74.549056][ T6821] veth1_macvtap: entered promiscuous mode
[   74.559351][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.567245][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.572606][ T6821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.575711][ T6821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.578665][ T6821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.581401][ T6821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.659932][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.662415][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.687808][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.691017][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.701794][   T40] audit: type=1400 audit(1752710873.297:383): avc:  denied  { mounton } for  pid=6821 comm="syz-executor" path="/syzkaller.vLLfiH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   74.713121][ T6827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.786478][ T6827] veth0_vlan: entered promiscuous mode
[   74.791834][ T6827] veth1_vlan: entered promiscuous mode
[   74.819648][ T7026] tipc: Started in network mode
[   74.821266][ T7026] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[   74.824362][ T7026] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   74.829986][ T6827] veth0_macvtap: entered promiscuous mode
[   74.836718][ T6827] veth1_macvtap: entered promiscuous mode
[   74.851200][ T6827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.862963][ T6827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.869986][ T6827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.873251][ T6827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.880440][ T6827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.884038][ T6827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.954058][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.960630][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.983962][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.988966][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.449980][ T7060] ufs: You didn't specify the type of your ufs filesystem
[   75.449980][ T7060] 
[   75.449980][ T7060] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[   75.449980][ T7060] 
[   75.449980][ T7060] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[   75.465618][ T7060] ufs: ufstype=old is supported read-only
[   75.467734][ T7060] syz.1.306: attempt to access beyond end of device
[   75.467734][ T7060] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0
[   75.525104][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.528227][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.651978][ T7077] syz.2.310: attempt to access beyond end of device
[   75.651978][ T7077] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0
[   75.662992][ T7077] syz.2.310: attempt to access beyond end of device
[   75.662992][ T7077] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0
[   75.674812][ T7077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[   75.678865][ T7077] syz.2.310: attempt to access beyond end of device
[   75.678865][ T7077] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0
[   75.682878][ T7077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[   75.686191][ T7077] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[   75.688740][ T7077] UDF-fs: Scanning with blocksize 512 failed
[   75.691245][ T7080] netlink: 596 bytes leftover after parsing attributes in process `syz.4.311'.
[   75.697247][ T7077] syz.2.310: attempt to access beyond end of device
[   75.697247][ T7077] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0
[   75.705034][ T7077] syz.2.310: attempt to access beyond end of device
[   75.705034][ T7077] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0
[   75.709749][ T7077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[   75.712923][ T7077] syz.2.310: attempt to access beyond end of device
[   75.712923][ T7077] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0
[   75.717214][ T7077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[   75.720277][ T7077] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[   75.722677][ T7077] UDF-fs: Scanning with blocksize 1024 failed
[   75.724940][ T7077] syz.2.310: attempt to access beyond end of device
[   75.724940][ T7077] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0
[   75.729363][ T7077] syz.2.310: attempt to access beyond end of device
[   75.729363][ T7077] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0
[   75.734110][ T7077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[   75.737610][ T7077] syz.2.310: attempt to access beyond end of device
[   75.737610][ T7077] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0
[   75.741688][ T7077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[   75.744706][ T7077] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[   75.748076][ T7077] UDF-fs: Scanning with blocksize 2048 failed
[   75.750316][ T7077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[   75.753434][ T7077] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[   75.756648][ T7077] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[   75.759144][ T7077] UDF-fs: Scanning with blocksize 4096 failed
[   75.761061][ T7077] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1)
[   75.815661][   T40] audit: type=1400 audit(1752710874.417:384): avc:  denied  { accept } for  pid=7086 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   75.874407][ T7091] netlink: 72 bytes leftover after parsing attributes in process `syz.2.313'.
[   75.978303][   T40] audit: type=1400 audit(1752710874.577:385): avc:  denied  { mounton } for  pid=7096 comm="syz.4.316" path="/11/file0" dev="9p" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   76.155493][ T6037] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   76.155962][ T5954] Bluetooth: hci2: command tx timeout
[   76.211264][   T40] audit: type=1400 audit(1752710874.807:386): avc:  denied  { ioctl } for  pid=7100 comm="syz.2.319" path="socket:[15058]" dev="sockfs" ino=15058 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   76.318204][ T6037] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   76.321393][ T6037] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   76.324388][ T6037] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   76.328314][ T6037] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   76.333050][ T6037] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   76.341678][ T6037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.345757][ T6037] usb 6-1: config 0 descriptor??
[   76.768756][ T6037] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max
[   76.772564][   T40] audit: type=1400 audit(1752710875.367:387): avc:  denied  { create } for  pid=7115 comm="syz.4.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   76.785561][ T6037] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   76.831821][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.323'.
[   76.842862][ T7118] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.845631][ T7118] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.848334][ T7118] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.850945][ T7118] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.854035][ T7118] vxlan0: entered promiscuous mode
[   76.897716][ T7118] tmpfs: Unknown parameter ''
[   76.965568][ T7095] netlink: 60 bytes leftover after parsing attributes in process `syz.1.315'.
[   77.057676][   T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.237896][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.245647][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.248240][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.250718][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.253745][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.257406][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.260126][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.262741][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.266456][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.269291][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.271773][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.274513][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.277490][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.280287][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.282964][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.287758][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.290472][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.293149][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.296111][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.298730][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.301450][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.303899][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.306804][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.309797][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.311715][ T5962] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   77.312424][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.318097][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.318777][ T5962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   77.320729][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.324025][ T5962] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.326149][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.329096][ T5962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.330756][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.333471][ T5962] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.335880][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.340560][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.343080][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.346538][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.349240][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.352631][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.355906][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.358715][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.361942][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.365043][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.367741][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.370812][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.373605][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.376291][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.379094][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.381851][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.385505][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.388466][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.391745][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.395304][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.398330][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.401344][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.403916][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.406747][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.409456][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.412764][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.416224][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.419616][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.423027][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.426645][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.429948][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.433234][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.436722][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.440019][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.443295][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.446924][ T7128] trusted_key: encrypted_key: insufficient parameters specified
[   77.599084][ T7137] mkiss: ax0: crc mode is auto.
[   77.615709][ T7137] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   77.630849][ T7137] netlink: 36 bytes leftover after parsing attributes in process `syz.2.328'.
[   77.791564][ T7130] chnl_net:caif_netlink_parms(): no params data found
[   77.963670][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.966507][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.968795][ T7130] bridge_slave_0: entered allmulticast mode
[   77.971409][ T7130] bridge_slave_0: entered promiscuous mode
[   77.974665][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.977210][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.979643][ T7130] bridge_slave_1: entered allmulticast mode
[   77.986007][ T7130] bridge_slave_1: entered promiscuous mode
[   78.054673][ T7130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.062154][ T7130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.167473][ T7130] team0: Port device team_slave_0 added
[   78.173249][ T7130] team0: Port device team_slave_1 added
[   78.226126][ T5962] Bluetooth: hci2: command tx timeout
[   78.231289][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.234168][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.245123][ T7130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.252861][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.256061][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.266592][ T7130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.463309][   T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.527038][ T7130] hsr_slave_0: entered promiscuous mode
[   78.530092][ T7130] hsr_slave_1: entered promiscuous mode
[   78.532940][ T7130] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.545279][ T7130] Cannot create hsr debugfs directory
[   78.563797][ T7172] netlink: 'syz.2.338': attribute type 11 has an invalid length.
[   78.569702][ T7173] netlink: 'syz.2.338': attribute type 11 has an invalid length.
[   78.573061][ T7172] netlink: 36 bytes leftover after parsing attributes in process `syz.2.338'.
[   78.577116][ T7173] netlink: 36 bytes leftover after parsing attributes in process `syz.2.338'.
[   78.708628][   T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.750303][ T7180] bond1: entered allmulticast mode
[   78.752807][ T7180] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.758876][ T6013] usb 6-1: USB disconnect, device number 2
[   78.780782][ T7180] Malformed UNC in devname
[   78.780782][ T7180] 
[   78.784513][ T7180] CIFS: VFS: Malformed UNC in devname
[   78.960555][ T7193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.007778][   T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.177213][ T7208] Bluetooth: MGMT ver 1.23
[   79.202486][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'.
[   79.241798][   T12] smc: removing ib device syz1
[   79.272648][  T835] syz1: Port: 1 Link DOWN
[   79.291672][ T7215] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=7215 comm=syz.2.352
[   79.425647][ T5962] Bluetooth: hci3: command tx timeout
[   79.430654][   T46] bridge_slave_1: left allmulticast mode
[   79.433771][   T46] bridge_slave_1: left promiscuous mode
[   79.448355][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.481772][   T46] bridge_slave_0: left allmulticast mode
[   79.484159][   T46] bridge_slave_0: left promiscuous mode
[   79.488270][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.035245][    C1] sched: DL replenish lagged too much
[   80.142521][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'.
[   80.373422][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.383618][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.391410][   T46] bond0 (unregistering): Released all slaves
[   80.585269][   T40] kauditd_printk_skb: 6 callbacks suppressed
[   80.585286][   T40] audit: type=1400 audit(1752710879.177:394): avc:  denied  { read } for  pid=7227 comm="syz.2.357" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   80.585328][   T40] audit: type=1400 audit(1752710879.177:395): avc:  denied  { open } for  pid=7227 comm="syz.2.357" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   80.585366][   T40] audit: type=1400 audit(1752710879.177:396): avc:  denied  { ioctl } for  pid=7227 comm="syz.2.357" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   80.825325][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'.
[   80.893801][ T7262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.900991][ T7262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.904596][   T40] audit: type=1400 audit(1752710879.497:397): avc:  denied  { getopt } for  pid=7257 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   80.941958][   T46] hsr_slave_0: left promiscuous mode
[   80.947560][   T46] hsr_slave_1: left promiscuous mode
[   80.949687][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.952269][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.956714][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.959093][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.984503][   T46] veth1_macvtap: left promiscuous mode
[   80.986992][   T46] veth0_macvtap: left promiscuous mode
[   80.988864][   T46] veth1_vlan: left promiscuous mode
[   80.990628][   T46] veth0_vlan: left promiscuous mode
[   81.073580][ T7270] netlink: 204988 bytes leftover after parsing attributes in process `syz.1.368'.
[   81.082980][ T7270] binder: 7269:7270 ioctl c0585609 200000000280 returned -22
[   81.125482][ T6013] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   81.335320][ T6013] usb 7-1: config index 0 descriptor too short (expected 45, got 36)
[   81.338602][ T6013] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   81.348208][ T6013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   81.352489][ T6013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   81.358654][ T6013] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   81.362937][ T6013] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   81.365681][ T6013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.375091][ T6013] usb 7-1: config 0 descriptor??
[   81.384993][ T7263] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   81.505505][ T5962] Bluetooth: hci3: command tx timeout
[   81.799963][ T6013] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd
[   81.813068][ T6013] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   81.840899][ T7270] syz.1.368 (7270): drop_caches: 2
[   82.066874][  T836] usb 7-1: USB disconnect, device number 5
[   82.178330][   T46] team0 (unregistering): Port device team_slave_1 removed
[   82.258245][   T46] team0 (unregistering): Port device team_slave_0 removed
[   83.151779][ T7130] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.183342][ T7130] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.200220][ T7300] vlan0: entered promiscuous mode
[   83.210401][ T7130] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.210666][   T40] audit: type=1400 audit(1752710881.807:398): avc:  denied  { setopt } for  pid=7299 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[   83.225862][   T40] audit: type=1400 audit(1752710881.807:399): avc:  denied  { map } for  pid=7299 comm="syz.2.377" path="/dev/comedi0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   83.237134][ T7130] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.296590][ T7130] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.306167][ T7130] 8021q: adding VLAN 0 to HW filter on device team0
[   83.311141][   T40] audit: type=1400 audit(1752710881.907:400): avc:  denied  { create } for  pid=7316 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[   83.311467][   T89] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.320289][   T89] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.337217][   T89] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.339615][   T89] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.368202][   T40] audit: type=1400 audit(1752710881.967:401): avc:  denied  { append } for  pid=7316 comm="syz.2.382" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   83.383010][   T40] audit: type=1400 audit(1752710881.967:402): avc:  denied  { open } for  pid=7316 comm="syz.2.382" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   83.388343][ T7327] netlink: 'syz.4.384': attribute type 1 has an invalid length.
[   83.392343][   T40] audit: type=1400 audit(1752710881.977:403): avc:  denied  { ioctl } for  pid=7316 comm="syz.2.382" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x6402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   83.402945][ T7327] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.421932][ T7327] vlan2: entered allmulticast mode
[   83.423865][ T7327] veth1: entered allmulticast mode
[   83.435619][ T7327] bond1: (slave vlan2): making interface the new active one
[   83.439318][ T7327] bond1: (slave vlan2): Enslaving as an active interface with an up link
[   83.551807][ T7130] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.583522][ T7130] veth0_vlan: entered promiscuous mode
[   83.586876][ T5962] Bluetooth: hci3: command tx timeout
[   83.589327][ T7130] veth1_vlan: entered promiscuous mode
[   83.608443][ T7342] program syz.4.386 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   83.612710][ T7130] veth0_macvtap: entered promiscuous mode
[   83.621247][ T7130] veth1_macvtap: entered promiscuous mode
[   83.632762][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.642698][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.653801][ T7130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.656580][ T7130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.659296][ T7130] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.661993][ T7130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.713129][   T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.717168][   T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.740137][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.743862][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.763650][ T7357] : entered promiscuous mode
[   84.477666][ T7365] loop6: detected capacity change from 0 to 524287999
[   84.895345][  T835] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   85.048690][  T835] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   85.051363][  T835] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   85.054590][  T835] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[   85.057486][  T835] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   85.060868][  T835] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   85.065660][  T835] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   85.068530][  T835] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   85.070987][  T835] usb 9-1: Product: syz
[   85.072317][  T835] usb 9-1: Manufacturer: syz
[   85.078488][  T835] cdc_wdm 9-1:1.0: skipping garbage
[   85.080229][  T835] cdc_wdm 9-1:1.0: skipping garbage
[   85.084814][  T835] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[   85.086806][  T835] cdc_wdm 9-1:1.0: Unknown control protocol
[   85.234836][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.238277][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.283339][  T835] usb 9-1: USB disconnect, device number 2
[   85.659307][   T40] kauditd_printk_skb: 9 callbacks suppressed
[   85.659317][   T40] audit: type=1400 audit(1752710884.257:413): avc:  denied  { read } for  pid=7386 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   85.679191][ T5954] Bluetooth: hci3: command tx timeout
[   85.719038][   T40] audit: type=1400 audit(1752710884.317:414): avc:  denied  { module_request } for  pid=7386 comm="syz.1.404" kmod="nf-flowtable-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   85.883774][ T7400] Bluetooth: MGMT ver 1.23
[   85.943029][ T7402] kvm: Disabled LAPIC found during irq injection
[   86.177102][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'.
[   86.189983][ T7406] netlink: 'syz.4.410': attribute type 5 has an invalid length.
[   86.248833][ T7410] Cannot find add_set index 0 as target
[   86.252777][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'.
[   86.540544][   T40] audit: type=1400 audit(1752710885.137:415): avc:  denied  { associate } for  pid=7414 comm="syz.1.413" name="0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   86.576787][ T7417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7417 comm=syz.1.414
[   86.875515][   T89] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   86.920208][ T7423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.416'.
[   87.148029][   T40] audit: type=1400 audit(1752710885.747:416): avc:  denied  { accept } for  pid=7428 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   87.278819][   T89] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   87.398296][ T7451] xt_hashlimit: max too large, truncated to 1048576
[   87.400676][ T7451] xt_bpf: check failed: parse error
[   87.521853][ T7462] IPv6: sit1: Disabled Multicast RS
[   87.541360][ T7464] pvfs2: Unknown parameter 'u{rXc¶ïSuov'
[   87.564436][ T7464] No control pipe specified
[   87.569337][ T7464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.433'.
[   87.613607][ T7467] tmpfs: Bad value for 'mpol'
[   87.731227][ T7476] kvm: pic: non byte write
[   87.735105][ T7476] kvm: pic: non byte write
[   87.739086][ T7476] kvm: pic: non byte write
[   87.743660][ T7476] kvm: pic: non byte write
[   87.748054][ T7476] kvm: pic: non byte write
[   87.751750][ T7476] kvm: pic: non byte write
[   87.754137][ T7476] kvm: pic: non byte write
[   87.799149][   T40] audit: type=1400 audit(1752710886.397:417): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=35624 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[   87.807525][   T40] audit: type=1400 audit(1752710886.397:418): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=127.0.0.1 src=35624 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[   87.953255][   T40] audit: type=1400 audit(1752710886.547:419): avc:  denied  { mount } for  pid=7487 comm="syz.1.443" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   87.961080][   T40] audit: type=1400 audit(1752710886.547:420): avc:  denied  { mounton } for  pid=7487 comm="syz.1.443" path="/144/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[   87.967538][   T40] audit: type=1400 audit(1752710886.557:421): avc:  denied  { remount } for  pid=7487 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   87.993959][   T40] audit: type=1400 audit(1752710886.587:422): avc:  denied  { unmount } for  pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   88.095928][ T7504] SELinux:  policydb string SE  does not match my string SE Linux
[   88.099251][ T7504] SELinux: failed to load policy
[   88.141673][ T7507] FAULT_INJECTION: forcing a failure.
[   88.141673][ T7507] name failslab, interval 1, probability 0, space 0, times 1
[   88.150447][ T7507] CPU: 3 UID: 0 PID: 7507 Comm: syz.4.449 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[   88.150471][ T7507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   88.150482][ T7507] Call Trace:
[   88.150488][ T7507]  <TASK>
[   88.150495][ T7507]  dump_stack_lvl+0x16c/0x1f0
[   88.150526][ T7507]  should_fail_ex+0x512/0x640
[   88.150549][ T7507]  ? __kmalloc_noprof+0xbf/0x510
[   88.150574][ T7507]  ? rds_message_alloc+0x42/0x230
[   88.150601][ T7507]  should_failslab+0xc2/0x120
[   88.150627][ T7507]  __kmalloc_noprof+0xd2/0x510
[   88.150649][ T7507]  ? rds_sendmsg+0x747/0x31f0
[   88.150672][ T7507]  rds_message_alloc+0x42/0x230
[   88.150698][ T7507]  rds_sendmsg+0xb5d/0x31f0
[   88.150730][ T7507]  ? __pfx_rds_sendmsg+0x10/0x10
[   88.150747][ T7507]  ? __pfx_sock_has_perm+0x10/0x10
[   88.150771][ T7507]  ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10
[   88.150797][ T7507]  ? __might_fault+0xe3/0x190
[   88.150835][ T7507]  ? __sys_sendto+0x4a3/0x520
[   88.150856][ T7507]  __sys_sendto+0x4a3/0x520
[   88.150878][ T7507]  ? __pfx___sys_sendto+0x10/0x10
[   88.150922][ T7507]  ? ksys_write+0x1ac/0x250
[   88.150945][ T7507]  ? __pfx_ksys_write+0x10/0x10
[   88.150971][ T7507]  __x64_sys_sendto+0xe0/0x1c0
[   88.150992][ T7507]  ? do_syscall_64+0x91/0x4c0
[   88.151016][ T7507]  ? lockdep_hardirqs_on+0x7c/0x110
[   88.151038][ T7507]  do_syscall_64+0xcd/0x4c0
[   88.151064][ T7507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.151082][ T7507] RIP: 0033:0x7f745018e929
[   88.151097][ T7507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.151113][ T7507] RSP: 002b:00007f7451031038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   88.151130][ T7507] RAX: ffffffffffffffda RBX: 00007f74503b5fa0 RCX: 00007f745018e929
[   88.151142][ T7507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[   88.151152][ T7507] RBP: 00007f7451031090 R08: 0000200000000040 R09: 000000000000001c
[   88.151162][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   88.151172][ T7507] R13: 0000000000000000 R14: 00007f74503b5fa0 R15: 00007fff403cd5a8
[   88.151197][ T7507]  </TASK>
[   88.241622][ T7509] SELinux: ebitmap: truncated map
[   88.248420][ T7509] SELinux: failed to load policy
[   88.299073][ T7518] SELinux: ebitmap: truncated map
[   88.304874][ T7518] SELinux: failed to load policy
[   90.465573][ T5954] Bluetooth: hci2: command 0x0c1a tx timeout
[   90.466021][ T7528] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[   91.365819][ T7528] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   91.386276][ T7528] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   91.504753][   T40] kauditd_printk_skb: 9 callbacks suppressed
[   91.504765][   T40] audit: type=1400 audit(1752710890.097:432): avc:  denied  { execmem } for  pid=7536 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   91.514926][ T7537] mac80211_hwsim hwsim3 `ëÿÿ: renamed from wlan1
[   91.542508][ T7540] FAULT_INJECTION: forcing a failure.
[   91.542508][ T7540] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   91.546929][ T7540] CPU: 3 UID: 0 PID: 7540 Comm: syz.4.459 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[   91.546952][ T7540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   91.546964][ T7540] Call Trace:
[   91.546970][ T7540]  <TASK>
[   91.546976][ T7540]  dump_stack_lvl+0x16c/0x1f0
[   91.546996][ T7540]  should_fail_ex+0x512/0x640
[   91.547013][ T7540]  _copy_to_user+0x32/0xd0
[   91.547030][ T7540]  simple_read_from_buffer+0xcb/0x170
[   91.547047][ T7540]  proc_fail_nth_read+0x197/0x270
[   91.547062][ T7540]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   91.547078][ T7540]  ? rw_verify_area+0xcf/0x680
[   91.547091][ T7540]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   91.547105][ T7540]  vfs_read+0x1e1/0xc60
[   91.547121][ T7540]  ? __pfx___mutex_lock+0x10/0x10
[   91.547137][ T7540]  ? __pfx_vfs_read+0x10/0x10
[   91.547154][ T7540]  ? __fget_files+0x20e/0x3c0
[   91.547174][ T7540]  ksys_read+0x12a/0x250
[   91.547188][ T7540]  ? __pfx_ksys_read+0x10/0x10
[   91.547206][ T7540]  do_syscall_64+0xcd/0x4c0
[   91.547223][ T7540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.547235][ T7540] RIP: 0033:0x7f745018d33c
[   91.547244][ T7540] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   91.547255][ T7540] RSP: 002b:00007f7451031030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   91.547265][ T7540] RAX: ffffffffffffffda RBX: 00007f74503b5fa0 RCX: 00007f745018d33c
[   91.547272][ T7540] RDX: 000000000000000f RSI: 00007f74510310a0 RDI: 0000000000000004
[   91.547279][ T7540] RBP: 00007f7451031090 R08: 0000000000000000 R09: 000000000000001c
[   91.547285][ T7540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.547291][ T7540] R13: 0000000000000000 R14: 00007f74503b5fa0 R15: 00007fff403cd5a8
[   91.547305][ T7540]  </TASK>
[   91.623106][ T7543] vlan2: entered promiscuous mode
[   91.624757][ T7543] bridge0: entered promiscuous mode
[   91.691393][   T40] audit: type=1400 audit(1752710890.287:433): avc:  denied  { mounton } for  pid=7546 comm="syz.4.462" path="mnt:[4026532878]" dev="nsfs" ino=4026532878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   91.702213][   T40] audit: type=1400 audit(1752710890.287:434): avc:  denied  { create } for  pid=7546 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   91.704915][ T7547] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   91.709532][   T40] audit: type=1400 audit(1752710890.297:435): avc:  denied  { mounton } for  pid=7546 comm="syz.4.462" path="/bus" dev="ramfs" ino=19431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   91.711259][ T7547] overlayfs: failed to set xattr on upper
[   91.720961][ T7547] overlayfs: ...falling back to redirect_dir=nofollow.
[   91.723152][ T7547] overlayfs: ...falling back to index=off.
[   91.725083][ T7547] overlayfs: ...falling back to uuid=null.
[   91.727019][ T7547] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[   92.545507][ T5954] Bluetooth: hci2: command 0x0c1a tx timeout
[   92.904389][   T40] audit: type=1400 audit(1752710891.497:436): avc:  denied  { block_suspend } for  pid=7556 comm="syz.1.466" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   93.044007][ T7547] Set syz1 is full, maxelem 65536 reached
[   93.064798][   T40] audit: type=1400 audit(1752710891.657:437): avc:  denied  { getopt } for  pid=7561 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   93.087989][   T40] audit: type=1400 audit(1752710891.687:438): avc:  denied  { append } for  pid=7567 comm="syz.4.469" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   93.124874][   T40] audit: type=1400 audit(1752710891.717:439): avc:  denied  { write } for  pid=7569 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   93.131665][   T40] audit: type=1400 audit(1752710891.727:440): avc:  denied  { execstack } for  pid=7569 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   93.195325][ T7575] xt_hashlimit: overflow, rate too high: 0
[   93.501621][ T7593] syz.1.477: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[   93.509812][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.1.477 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[   93.509837][ T7593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   93.509848][ T7593] Call Trace:
[   93.509854][ T7593]  <TASK>
[   93.509860][ T7593]  dump_stack_lvl+0x16c/0x1f0
[   93.509891][ T7593]  warn_alloc+0x248/0x3a0
[   93.509917][ T7593]  ? __pfx_warn_alloc+0x10/0x10
[   93.509951][ T7593]  ? hashlimit_mt_check_common+0x8bb/0x1460
[   93.509975][ T7593]  ? __vmalloc_node_noprof+0xad/0xf0
[   93.509999][ T7593]  __vmalloc_node_range_noprof+0x101b/0x14b0
[   93.510028][ T7593]  ? hashlimit_mt_check_common+0x8bb/0x1460
[   93.510052][ T7593]  ? rcu_is_watching+0x12/0xc0
[   93.510079][ T7593]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   93.510101][ T7593]  ? __alloc_pages_noprof+0xb/0x1b0
[   93.510123][ T7593]  ? ___kmalloc_large_node+0x84/0x1e0
[   93.510146][ T7593]  __kvmalloc_node_noprof+0x30a/0x620
[   93.510169][ T7593]  ? hashlimit_mt_check_common+0x8bb/0x1460
[   93.510192][ T7593]  ? net_generic+0xea/0x2a0
[   93.510210][ T7593]  ? hashlimit_mt_check_common+0x8bb/0x1460
[   93.510236][ T7593]  ? hashlimit_mt_check_common+0x8bb/0x1460
[   93.510257][ T7593]  hashlimit_mt_check_common+0x8bb/0x1460
[   93.510293][ T7593]  hashlimit_mt_check_v1+0x2fc/0x370
[   93.510314][ T7593]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[   93.510336][ T7593]  ? find_held_lock+0x2b/0x80
[   93.510366][ T7593]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[   93.510388][ T7593]  xt_check_match+0x283/0xa50
[   93.510408][ T7593]  ? mem_cgroup_css_alloc+0x1d38/0x1e80
[   93.510430][ T7593]  ? __pfx_xt_check_match+0x10/0x10
[   93.510449][ T7593]  ? pcpu_memcg_post_alloc_hook+0x1e/0x690
[   93.510481][ T7593]  ? xt_find_match+0x1f6/0x290
[   93.510508][ T7593]  find_check_entry.constprop.0+0x317/0x9b0
[   93.510539][ T7593]  ? __pfx_find_check_entry.constprop.0+0x10/0x10
[   93.510568][ T7593]  ? lockdep_hardirqs_on+0x7c/0x110
[   93.510595][ T7593]  ? kfree+0x2b4/0x4d0
[   93.510613][ T7593]  ? translate_table+0xba1/0x1720
[   93.510638][ T7593]  translate_table+0xc98/0x1720
[   93.510671][ T7593]  ? __pfx_translate_table+0x10/0x10
[   93.510702][ T7593]  do_ipt_set_ctl+0x570/0xae0
[   93.510724][ T7593]  ? nf_sockopt_find.constprop.0+0x222/0x290
[   93.510743][ T7593]  ? find_held_lock+0x2b/0x80
[   93.510768][ T7593]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[   93.510790][ T7593]  ? lockdep_hardirqs_on+0x7c/0x110
[   93.510813][ T7593]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   93.510851][ T7593]  ? nf_sockopt_find.constprop.0+0x222/0x290
[   93.510874][ T7593]  nf_setsockopt+0x8d/0xf0
[   93.510893][ T7593]  ip_setsockopt+0xcb/0xf0
[   93.510918][ T7593]  udp_setsockopt+0x7d/0xd0
[   93.510945][ T7593]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   93.510975][ T7593]  do_sock_setsockopt+0x224/0x470
[   93.511003][ T7593]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   93.511078][ T7593]  __sys_setsockopt+0x1a0/0x230
[   93.511106][ T7593]  __x64_sys_setsockopt+0xbd/0x160
[   93.511126][ T7593]  ? do_syscall_64+0x91/0x4c0
[   93.511149][ T7593]  ? lockdep_hardirqs_on+0x7c/0x110
[   93.511172][ T7593]  do_syscall_64+0xcd/0x4c0
[   93.511200][ T7593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.511219][ T7593] RIP: 0033:0x7fe55f38e929
[   93.511235][ T7593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.511252][ T7593] RSP: 002b:00007fe5601ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   93.511269][ T7593] RAX: ffffffffffffffda RBX: 00007fe55f5b6080 RCX: 00007fe55f38e929
[   93.511280][ T7593] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004
[   93.511292][ T7593] RBP: 00007fe55f410ca1 R08: 0000000000000448 R09: 0000000000000000
[   93.511301][ T7593] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000
[   93.511311][ T7593] R13: 0000000000000000 R14: 00007fe55f5b6080 R15: 00007ffc3f38eea8
[   93.511337][ T7593]  </TASK>
[   93.511345][ T7593] Mem-Info:
[   93.658890][ T7593] active_anon:9442 inactive_anon:0 isolated_anon:0
[   93.658890][ T7593]  active_file:3624 inactive_file:49822 isolated_file:0
[   93.658890][ T7593]  unevictable:1768 dirty:37 writeback:0
[   93.658890][ T7593]  slab_reclaimable:8386 slab_unreclaimable:81025
[   93.658890][ T7593]  mapped:24721 shmem:2397 pagetables:1251
[   93.658890][ T7593]  sec_pagetables:303 bounce:0
[   93.658890][ T7593]  kernel_misc_reclaimable:0
[   93.658890][ T7593]  free:441062 free_pcp:21807 free_cma:0
[   93.679498][ T7593] Node 0 active_anon:37760kB inactive_anon:0kB active_file:14496kB inactive_file:199084kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98880kB dirty:148kB writeback:0kB shmem:6052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13392kB pagetables:4600kB sec_pagetables:1212kB all_unreclaimable? no Balloon:0kB
[   93.692932][ T7593] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   93.703555][ T7593] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   93.714433][ T7593] lowmem_reserve[]: 0 1234 1234 1234 1234
[   93.716876][ T7593] Node 0 DMA32 free:157016kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37760kB inactive_anon:0kB active_file:14496kB inactive_file:199084kB unevictable:3536kB writepending:148kB present:2080628kB managed:1264184kB mlocked:0kB bounce:0kB free_pcp:58316kB local_pcp:12184kB free_cma:0kB
[   93.729318][ T7593] lowmem_reserve[]: 0 0 0 0 0
[   93.731317][ T7593] Node 1 Normal free:1596544kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:26320kB local_pcp:3728kB free_cma:0kB
[   93.743324][ T7593] lowmem_reserve[]: 0 0 0 0 0
[   93.745709][ T7593] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   93.750498][ T7593] Node 0 DMA32: 190*4kB (UME) 580*8kB (UME) 291*16kB (UME) 288*32kB (UME) 354*64kB (UME) 121*128kB (UME) 49*256kB (UME) 47*512kB (UME) 19*1024kB (UME) 5*2048kB (UME) 8*4096kB (UM) = 156488kB
[   93.757406][ T7593] Node 1 Normal: 4*4kB (UME) 9*8kB (UME) 5*16kB (UME) 13*32kB (UME) 9*64kB (UME) 10*128kB (UME) 3*256kB (E) 6*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 387*4096kB (M) = 1596552kB
[   93.764204][ T7593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   93.767988][ T7593] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.771412][ T7593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   93.774899][ T7593] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.778528][ T7593] 55839 total pagecache pages
[   93.780377][ T7593] 0 pages in swap cache
[   93.782074][ T7593] Free swap  = 124996kB
[   93.783751][ T7593] Total swap = 124996kB
[   93.785917][ T7593] 1048443 pages RAM
[   93.787624][ T7593] 0 pages HighMem/MovableOnly
[   93.789546][ T7593] 283068 pages reserved
[   93.791255][ T7593] 0 pages cma reserved
[   93.831324][   T40] audit: type=1400 audit(1752710892.427:441): avc:  denied  { read } for  pid=7599 comm="syz.1.479" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   94.208765][ T7622] overlay: ./file0 is not a directory
[   94.218504][ T7622] overlay: ./file0 is not a directory
[   94.625791][ T5954] Bluetooth: hci2: command 0x0c1a tx timeout
[   94.847696][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'.
[   94.851709][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'.
[   94.898763][ T7652] 9pnet_fd: Insufficient options for proto=fd
[   95.155708][ T7676] bond0: option ad_select: unable to set because the bond device is up
[   95.234376][ T7681] netlink: 40 bytes leftover after parsing attributes in process `syz.4.505'.
[   95.267441][ T7675] team0: Device gtp0 is of different type
[   95.497583][   T59] usb 9-1: new low-speed USB device number 3 using dummy_hcd
[   95.657943][   T59] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[   95.661188][   T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   95.665787][   T59] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   95.670611][   T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   95.675450][   T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   95.685771][   T59] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[   95.690937][   T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   95.695640][   T59] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   95.700483][   T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   95.705089][   T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   95.710872][   T59] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[   95.714070][   T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   95.718782][   T59] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   95.723664][   T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   95.728561][   T59] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   95.736165][   T59] usb 9-1: string descriptor 0 read error: -22
[   95.738924][   T59] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   95.742762][   T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.752995][   T59] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   96.899988][ T7696] tmpfs: Bad value for 'mpol'
[   96.905023][ T7696] tmpfs: Bad value for 'mpol'
[   96.977516][ T7701] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.512'.
[   97.043252][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'.
[   97.054092][ T7702] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.057874][ T7702] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.061340][ T7702] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.064812][ T7702] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.069752][ T7702] vxlan0: entered promiscuous mode
[   97.879757][   T40] kauditd_printk_skb: 12 callbacks suppressed
[   97.879768][   T40] audit: type=1400 audit(1752710896.477:454): avc:  denied  { ioctl } for  pid=7705 comm="syz.1.514" path="pid:[4026532874]" dev="nsfs" ino=4026532874 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   98.066239][ T7715] binder: 7714:7715 ioctl c0306201 200000000140 returned -11
[   98.120716][   T40] audit: type=1400 audit(1752710896.717:455): avc:  denied  { getopt } for  pid=7717 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   98.331625][ T7721] input: syz1 as /devices/virtual/input/input10
[   98.898655][   T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   98.901993][   T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   98.907604][   T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   98.910701][   T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   98.913453][   T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   99.038502][ T7738] chnl_net:caif_netlink_parms(): no params data found
[   99.075308][ T6018] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   99.144343][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.147837][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.150138][ T7738] bridge_slave_0: entered allmulticast mode
[   99.152724][ T7738] bridge_slave_0: entered promiscuous mode
[   99.156391][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.158675][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.160899][ T7738] bridge_slave_1: entered allmulticast mode
[   99.163665][ T7738] bridge_slave_1: entered promiscuous mode
[   99.225344][ T6018] usb 6-1: Using ep0 maxpacket: 16
[   99.231197][ T7738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.238302][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   99.240851][ T7738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.244384][ T6018] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   99.249817][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.252937][ T6018] usb 6-1: Product: syz
[   99.254672][ T6018] usb 6-1: Manufacturer: syz
[   99.256793][ T6018] usb 6-1: SerialNumber: syz
[   99.262353][ T6018] usb 6-1: config 0 descriptor??
[   99.267309][ T6018] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   99.271168][ T6018] em28xx 6-1:0.0: DVB interface 0 found: bulk
[   99.310570][ T7738] team0: Port device team_slave_0 added
[   99.317974][ T7738] team0: Port device team_slave_1 added
[   99.377308][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.380197][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.390316][ T7738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.394479][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.396659][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.405300][ T7738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.499521][ T7738] hsr_slave_0: entered promiscuous mode
[   99.503232][ T7738] hsr_slave_1: entered promiscuous mode
[   99.508518][ T7738] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.511691][ T7738] Cannot create hsr debugfs directory
[   99.525551][ T6018] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[   99.590189][ T6018] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[   99.592961][ T6018] em28xx 6-1:0.0: board has no eeprom
[   99.655406][ T6018] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   99.657892][ T6018] em28xx 6-1:0.0: dvb set to bulk mode.
[   99.660664][  T951] em28xx 6-1:0.0: Binding DVB extension
[   99.680522][ T6018] usb 6-1: USB disconnect, device number 3
[   99.682956][ T6018] em28xx 6-1:0.0: Disconnecting em28xx
[   99.701502][  T951] em28xx 6-1:0.0: Registering input extension
[   99.704954][ T6018] em28xx 6-1:0.0: Closing input extension
[   99.707369][ T7737] can: request_module (can-proto-0) failed.
[   99.721713][ T6018] em28xx 6-1:0.0: Freeing device
[   99.743074][ T7738] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   99.752267][ T7738] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   99.761273][ T7738] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   99.772873][ T7738] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   99.799033][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.802819][ T7738] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.806684][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.809971][ T7738] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.860287][ T7738] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.879548][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.884323][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.920836][ T7738] 8021q: adding VLAN 0 to HW filter on device team0
[   99.932395][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.935430][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.942083][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.944343][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.095693][ T7738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.292251][ T7767] 9pnet_fd: p9_fd_create_unix (7767): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  100.300555][ T7738] veth0_vlan: entered promiscuous mode
[  100.332508][   T40] audit: type=1400 audit(1752710898.927:456): avc:  denied  { append } for  pid=7771 comm="syz.1.527" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  100.336018][ T7738] veth1_vlan: entered promiscuous mode
[  100.356250][ T7738] veth0_macvtap: entered promiscuous mode
[  100.360062][ T7738] veth1_macvtap: entered promiscuous mode
[  100.369162][ T7738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.375628][ T7738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.380271][ T7738] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.382906][ T7738] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.385897][ T7738] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.386949][ T7773] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  100.388832][ T7738] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.445028][   T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.449738][   T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.480311][   T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.485431][   T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.506781][ T7777] unknown channel width for channel at 909000KHz?
[  100.514319][   T40] audit: type=1400 audit(1752710899.107:457): avc:  denied  { mounton } for  pid=7738 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  100.948095][ T5954] Bluetooth: hci1: command tx timeout
[  100.985329][ T6018] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  101.034747][  T951] usb 9-1: USB disconnect, device number 3
[  101.059096][   T40] audit: type=1400 audit(1752710899.657:458): avc:  denied  { ioctl } for  pid=7796 comm="syz.4.532" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  101.066027][ T7799] overlayfs: workdir and upperdir must be separate subtrees
[  101.137264][ T6018] usb 10-1: config index 0 descriptor too short (expected 23569, got 27)
[  101.140214][ T6018] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.145797][  T836] hid-generic FFFF:0066:0003.0004: unknown main item tag 0x6
[  101.147168][ T6018] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  101.148625][  T836] hid-generic FFFF:0066:0003.0004: unknown main item tag 0x6
[  101.151602][ T6018] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  101.154648][  T836] hid-generic FFFF:0066:0003.0004: unknown main item tag 0x2
[  101.157550][ T6018] usb 10-1: Manufacturer: syz
[  101.165707][ T6018] usb 10-1: config 0 descriptor??
[  101.165850][  T836] hid-generic FFFF:0066:0003.0004: item fetching failed at offset 15/51
[  101.171163][  T836] hid-generic FFFF:0066:0003.0004: probe with driver hid-generic failed with error -22
[  101.235833][ T6018] rc_core: IR keymap rc-hauppauge not found
[  101.237996][ T6018] Registered IR keymap rc-empty
[  101.240435][ T6018] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0
[  101.244424][ T6018] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input12
[  101.265523][   T40] audit: type=1400 audit(1752710899.857:459): avc:  denied  { ioctl } for  pid=7809 comm="syz.4.536" path="socket:[20321]" dev="sockfs" ino=20321 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  101.276929][ T7811] veth0: entered promiscuous mode
[  101.280267][ T7813] =======================================================
[  101.280267][ T7813] WARNING: The mand mount option has been deprecated and
[  101.280267][ T7813]          and is ignored by this kernel. Remove the mand
[  101.280267][ T7813]          option from the mount to silence this warning.
[  101.280267][ T7813] =======================================================
[  101.299021][ T7813] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  101.374453][   T40] audit: type=1400 audit(1752710899.967:460): avc:  denied  { append } for  pid=7785 comm="syz.5.530" name="pfkey" dev="proc" ino=4026534030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  101.387496][   T13] bond1: (slave vlan2): link status definitely down, disabling slave
[  101.390862][   T13] bond1: now running without any active interface!
[  101.401949][   T59] usb 10-1: USB disconnect, device number 2
[  101.662701][ T7837] netlink: 76 bytes leftover after parsing attributes in process `syz.1.545'.
[  101.711515][   T40] audit: type=1400 audit(1752710900.307:461): avc:  denied  { accept } for  pid=7840 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  101.720511][   T40] audit: type=1400 audit(1752710900.307:462): avc:  denied  { setopt } for  pid=7840 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  101.872121][   T40] audit: type=1400 audit(1752710900.467:463): avc:  denied  { map } for  pid=7847 comm="syz.1.548" path="pipe:[5800]" dev="pipefs" ino=5800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  101.961136][ T7851] netlink: 20 bytes leftover after parsing attributes in process `syz.5.549'.
[  102.000936][ T7826] block nbd4: shutting down sockets
[  102.110321][ T7853] 9pnet_virtio: no channels available for device syz
[  102.168844][ T7858] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  103.025341][ T5954] Bluetooth: hci1: command tx timeout
[  103.091827][ T7865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.581175][   T40] audit: type=1326 audit(1752710902.177:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7877 comm="syz.4.557" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f745018e929 code=0x0
[  103.640865][   T40] audit: type=1400 audit(1752710902.237:465): avc:  denied  { append } for  pid=7879 comm="syz.1.559" name="video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  103.670110][ T7887] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  103.693717][ T7889] netlink: 'syz.4.557': attribute type 21 has an invalid length.
[  103.696765][ T7889] netlink: 156 bytes leftover after parsing attributes in process `syz.4.557'.
[  103.896206][ T7900] tmpfs: Unknown parameter 'mpolaller0'
[  104.483448][ T7912] netlink: 6 bytes leftover after parsing attributes in process `syz.4.569'.
[  104.544369][   T40] audit: type=1400 audit(1752710903.137:466): avc:  denied  { write } for  pid=7913 comm="syz.5.570" lport=49851 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  104.571862][   T40] audit: type=1400 audit(1752710903.167:467): avc:  denied  { map } for  pid=7913 comm="syz.5.570" path="socket:[21390]" dev="sockfs" ino=21390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  104.630074][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.571'.
[  104.632910][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.571'.
[  104.749683][   T40] audit: type=1400 audit(1752710903.347:468): avc:  denied  { create } for  pid=7929 comm="syz.5.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  104.772417][ T7932] netlink: 'syz.1.578': attribute type 1 has an invalid length.
[  104.774838][ T7932] netlink: 228 bytes leftover after parsing attributes in process `syz.1.578'.
[  104.788794][ T7935] sctp: [Deprecated]: syz.5.579 (pid 7935) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.788794][ T7935] Use struct sctp_sack_info instead
[  104.794271][ T7935] sctp: [Deprecated]: syz.5.579 (pid 7935) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.794271][ T7935] Use struct sctp_sack_info instead
[  104.803237][ T7935] sctp: [Deprecated]: syz.5.579 (pid 7935) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.803237][ T7935] Use struct sctp_sack_info instead
[  104.813362][ T7935] sctp: [Deprecated]: syz.5.579 (pid 7935) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.813362][ T7935] Use struct sctp_sack_info instead
[  104.820374][ T7935] sctp: [Deprecated]: syz.5.579 (pid 7935) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.820374][ T7935] Use struct sctp_sack_info instead
[  104.823571][   T40] audit: type=1400 audit(1752710903.417:469): avc:  denied  { read } for  pid=7936 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  104.828588][ T7935] sctp: [Deprecated]: syz.5.579 (pid 7935) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.828588][ T7935] Use struct sctp_sack_info instead
[  104.835394][ T6040] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  104.840002][ T7935] sctp: [Deprecated]: syz.5.579 (pid 7935) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.840002][ T7935] Use struct sctp_sack_info instead
[  104.966560][ T6040] usb 9-1: device descriptor read/64, error -71
[  105.016136][ T7955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.586'.
[  105.019412][ T7955] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.160015][   T40] audit: type=1400 audit(1752710903.757:470): avc:  denied  { write } for  pid=7962 comm="syz.5.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  105.160139][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.588'.
[  105.175808][ T7963] ip6erspan0: tun_chr_ioctl cmd 1074025675
[  105.178260][ T7963] ip6erspan0: persist disabled
[  105.206824][ T6040] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[  105.341390][   T40] audit: type=1400 audit(1752710903.937:471): avc:  denied  { watch_with_perm } for  pid=7970 comm="syz.5.591" path="/24/bus" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  105.351319][ T6040] usb 9-1: device descriptor read/64, error -71
[  105.456155][ T6040] usb usb9-port1: attempt power cycle
[  105.545028][   T40] audit: type=1400 audit(1752710904.137:472): avc:  denied  { read } for  pid=7978 comm="syz.5.593" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  105.552175][   T40] audit: type=1400 audit(1752710904.137:473): avc:  denied  { open } for  pid=7978 comm="syz.5.593" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  105.795340][ T6040] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  105.816805][ T6040] usb 9-1: device descriptor read/8, error -71
[  105.887274][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.597'.
[  105.924003][ T7995] Cannot find map_set index 0 as target
[  106.055400][ T6040] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  106.087253][ T6040] usb 9-1: device descriptor read/8, error -71
[  106.195548][ T6040] usb usb9-port1: unable to enumerate USB device
[  106.279267][ T8018] i2c i2c-1: Invalid block write size 34
[  106.392336][ T8032] FAULT_INJECTION: forcing a failure.
[  106.392336][ T8032] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  106.398476][ T8032] CPU: 2 UID: 0 PID: 8032 Comm: syz.1.611 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[  106.398492][ T8032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  106.398499][ T8032] Call Trace:
[  106.398503][ T8032]  <TASK>
[  106.398507][ T8032]  dump_stack_lvl+0x16c/0x1f0
[  106.398527][ T8032]  should_fail_ex+0x512/0x640
[  106.398545][ T8032]  _copy_to_user+0x32/0xd0
[  106.398562][ T8032]  simple_read_from_buffer+0xcb/0x170
[  106.398578][ T8032]  proc_fail_nth_read+0x197/0x270
[  106.398593][ T8032]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  106.398609][ T8032]  ? rw_verify_area+0xcf/0x680
[  106.398621][ T8032]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  106.398635][ T8032]  vfs_read+0x1e1/0xc60
[  106.398651][ T8032]  ? __pfx___mutex_lock+0x10/0x10
[  106.398669][ T8032]  ? __pfx_vfs_read+0x10/0x10
[  106.398686][ T8032]  ? __fget_files+0x20e/0x3c0
[  106.398706][ T8032]  ksys_read+0x12a/0x250
[  106.398719][ T8032]  ? __pfx_ksys_read+0x10/0x10
[  106.398737][ T8032]  do_syscall_64+0xcd/0x4c0
[  106.398755][ T8032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.398766][ T8032] RIP: 0033:0x7fe55f38d33c
[  106.398776][ T8032] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  106.398786][ T8032] RSP: 002b:00007fe560210030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  106.398797][ T8032] RAX: ffffffffffffffda RBX: 00007fe55f5b5fa0 RCX: 00007fe55f38d33c
[  106.398804][ T8032] RDX: 000000000000000f RSI: 00007fe5602100a0 RDI: 0000000000000005
[  106.398810][ T8032] RBP: 00007fe560210090 R08: 0000000000000000 R09: 0000000000000000
[  106.398816][ T8032] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001
[  106.398823][ T8032] R13: 0000000000000000 R14: 00007fe55f5b5fa0 R15: 00007ffc3f38eea8
[  106.398837][ T8032]  </TASK>
[  106.461810][    C2] vkms_vblank_simulate: vblank timer overrun
[  106.491950][ T8034] netlink: 'syz.1.612': attribute type 1 has an invalid length.
[  106.513376][ T8034] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.522851][ T8034] gretap1: entered promiscuous mode
[  106.528160][ T8034] bond1: (slave gretap1): making interface the new active one
[  106.532508][ T8034] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  106.541767][ T8034] macvlan2: entered promiscuous mode
[  106.544079][ T8034] macvlan2: entered allmulticast mode
[  106.547863][ T8034] bond1: entered promiscuous mode
[  106.550505][ T8034] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  106.553814][ T8034] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  106.560801][ T8034] bond1: left promiscuous mode
[  106.589220][ T8036] netlink: 'syz.1.612': attribute type 1 has an invalid length.
[  106.601840][ T8040] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  106.604343][ T8040] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.722323][ T8046] __nla_validate_parse: 3 callbacks suppressed
[  106.722339][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.616'.
[  106.729760][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.616'.
[  106.775448][ T8048] bio_check_eod: 3 callbacks suppressed
[  106.775462][ T8048] syz.5.616: attempt to access beyond end of device
[  106.775462][ T8048] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0
[  106.783455][ T8048] syz.5.616: attempt to access beyond end of device
[  106.783455][ T8048] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0
[  106.789049][ T5954] Bluetooth: hci1: command tx timeout
[  106.789473][ T8048] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  106.795370][ T8048] syz.5.616: attempt to access beyond end of device
[  106.795370][ T8048] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0
[  106.800721][ T8048] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  106.807118][ T8048] syz.5.616: attempt to access beyond end of device
[  106.807118][ T8048] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0
[  106.811371][ T8048] syz.5.616: attempt to access beyond end of device
[  106.811371][ T8048] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0
[  106.816323][ T8048] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  106.819498][ T8048] syz.5.616: attempt to access beyond end of device
[  106.819498][ T8048] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0
[  106.823665][ T8048] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  106.830414][ T8048] syz.5.616: attempt to access beyond end of device
[  106.830414][ T8048] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0
[  106.835527][ T8048] syz.5.616: attempt to access beyond end of device
[  106.835527][ T8048] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0
[  106.841201][ T8048] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  106.845121][ T8048] syz.5.616: attempt to access beyond end of device
[  106.845121][ T8048] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0
[  106.850236][ T8048] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  106.853686][ T8048] syz.5.616: attempt to access beyond end of device
[  106.853686][ T8048] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[  106.858879][ T8048] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  106.862761][ T8048] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  106.866800][ T8048] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[  107.427313][ T8067] bridge_slave_0: left allmulticast mode
[  107.429740][ T8067] bridge_slave_0: left promiscuous mode
[  107.432529][ T8067] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.447606][ T8067] bridge_slave_1: left allmulticast mode
[  107.449454][ T8067] bridge_slave_1: left promiscuous mode
[  107.451376][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.501978][ T8067] bond0: (slave bond_slave_0): Releasing backup interface
[  107.519852][ T8067] bond0: (slave bond_slave_1): Releasing backup interface
[  107.523623][ T8073] netlink: 'syz.5.623': attribute type 10 has an invalid length.
[  107.542728][ T8067] team0: Port device team_slave_0 removed
[  107.560491][ T8067] team0: Port device team_slave_1 removed
[  107.563537][ T8067] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.566401][ T8067] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.577197][ T8067] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.578371][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.623'.
[  107.579600][ T8067] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.601695][ T8069] team0: Mode changed to "loadbalance"
[  107.603805][ T8075] netlink: 'syz.4.626': attribute type 1 has an invalid length.
[  107.606476][ T8075] netlink: 224 bytes leftover after parsing attributes in process `syz.4.626'.
[  107.625609][ T8073] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.632706][ T8073] team0: Port device bond0 added
[  107.742678][ T8076] team0 (unregistering): Port device bond0 removed
[  107.835582][ T8080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.994473][ T8091] xt_hashlimit: max too large, truncated to 1048576
[  107.998377][ T8091] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  108.078590][ T8090] delete_channel: no stack
[  108.299772][ T8105] gretap1: entered allmulticast mode
[  108.302311][ T8105] bridge0: port 3(gretap1) entered blocking state
[  108.304455][ T8105] bridge0: port 3(gretap1) entered disabled state
[  108.308872][ T8105] gretap1: entered promiscuous mode
[  108.311157][ T7035] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  108.311744][ T8105] bridge0: port 3(gretap1) entered blocking state
[  108.315903][ T8105] bridge0: port 3(gretap1) entered forwarding state
[  108.487336][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'.
[  108.490438][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.646'.
[  108.695569][ T6040] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  108.746834][   T59] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  108.827612][ T6040] usb 10-1: device descriptor read/64, error -71
[  108.896902][   T59] usb 6-1: config 0 has no interfaces?
[  108.901592][   T59] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  108.905902][   T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.909243][   T59] usb 6-1: Product: syz
[  108.911002][   T59] usb 6-1: Manufacturer: syz
[  108.913042][   T59] usb 6-1: SerialNumber: syz
[  108.918956][   T59] usb 6-1: config 0 descriptor??
[  109.049402][ T8129] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.060026][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.648'.
[  109.064989][ T8129] netlink: 'syz.4.648': attribute type 10 has an invalid length.
[  109.068416][ T6040] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  109.110319][ T8129] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  109.187237][ T6018] usb 6-1: USB disconnect, device number 4
[  109.205492][ T6040] usb 10-1: device descriptor read/64, error -71
[  109.315596][ T6040] usb usb10-port1: attempt power cycle
[  109.655330][ T6040] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  109.675729][ T6040] usb 10-1: device descriptor read/8, error -71
[  109.783278][ T8144] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20000
[  109.783307][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  109.783322][   T40] audit: type=1400 audit(1752710908.377:478): avc:  denied  { setopt } for  pid=8143 comm="syz.1.652" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  109.846062][ T8151] syzkaller1: entered promiscuous mode
[  109.848962][ T8151] syzkaller1: entered allmulticast mode
[  109.923652][ T6040] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  109.946128][ T6040] usb 10-1: device descriptor read/8, error -71
[  110.047399][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.656'.
[  110.059345][ T6040] usb usb10-port1: unable to enumerate USB device
[  110.191197][   T40] audit: type=1400 audit(1752710908.787:479): avc:  denied  { mount } for  pid=8163 comm="syz.1.659" name="/" dev="autofs" ino=22950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  110.213478][   T40] audit: type=1400 audit(1752710908.807:480): avc:  denied  { write } for  pid=8163 comm="syz.1.659" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  110.227399][   T40] audit: type=1400 audit(1752710908.817:481): avc:  denied  { ioctl } for  pid=8163 comm="syz.1.659" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  110.276515][ T8168] netlink: 'syz.4.661': attribute type 1 has an invalid length.
[  110.282021][ T8170] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  110.285279][   T40] audit: type=1400 audit(1752710908.877:482): avc:  denied  { mounton } for  pid=8163 comm="syz.1.659" path="/254/file1/file0" dev="autofs" ino=22954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  110.290465][ T8168] 8021q: adding VLAN 0 to HW filter on device bond3
[  110.353635][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'.
[  110.359689][   T40] audit: type=1400 audit(1752710908.957:483): avc:  denied  { bind } for  pid=8176 comm="syz.4.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  110.367769][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.663'.
[  110.370798][ T8177] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  110.373340][ T8177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.413553][   T40] audit: type=1400 audit(1752710909.007:484): avc:  denied  { accept } for  pid=8178 comm="syz.4.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  110.578604][ T8184] syz.4.666 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  111.019406][   T40] audit: type=1400 audit(1752710909.617:485): avc:  denied  { unmount } for  pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  111.032448][   T40] audit: type=1400 audit(1752710909.627:486): avc:  denied  { unmount } for  pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  111.074337][   T40] audit: type=1400 audit(1752710909.667:487): avc:  denied  { setopt } for  pid=8198 comm="syz.5.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  111.244601][ T8208] FAULT_INJECTION: forcing a failure.
[  111.244601][ T8208] name failslab, interval 1, probability 0, space 0, times 0
[  111.251262][ T8208] CPU: 3 UID: 0 PID: 8208 Comm: syz.4.675 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[  111.251278][ T8208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  111.251285][ T8208] Call Trace:
[  111.251289][ T8208]  <TASK>
[  111.251293][ T8208]  dump_stack_lvl+0x16c/0x1f0
[  111.251325][ T8208]  should_fail_ex+0x512/0x640
[  111.251345][ T8208]  ? fs_reclaim_acquire+0xae/0x150
[  111.251358][ T8208]  should_failslab+0xc2/0x120
[  111.251376][ T8208]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  111.251391][ T8208]  ? security_inode_alloc+0x3b/0x2b0
[  111.251412][ T8208]  security_inode_alloc+0x3b/0x2b0
[  111.251432][ T8208]  inode_init_always_gfp+0xce4/0x1030
[  111.251458][ T8208]  alloc_inode+0x86/0x240
[  111.251476][ T8208]  sock_alloc+0x40/0x280
[  111.251500][ T8208]  __sock_create+0xc1/0x8d0
[  111.251523][ T8208]  __sys_socket+0x14d/0x260
[  111.251539][ T8208]  ? fput+0x70/0xf0
[  111.251552][ T8208]  ? __pfx___sys_socket+0x10/0x10
[  111.251567][ T8208]  ? ksys_write+0x1ac/0x250
[  111.251588][ T8208]  ? __pfx_ksys_write+0x10/0x10
[  111.251614][ T8208]  __x64_sys_socket+0x72/0xb0
[  111.251632][ T8208]  ? lockdep_hardirqs_on+0x7c/0x110
[  111.251655][ T8208]  do_syscall_64+0xcd/0x4c0
[  111.251703][ T8208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.251721][ T8208] RIP: 0033:0x7f7450190847
[  111.251734][ T8208] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.251749][ T8208] RSP: 002b:00007f745102ff48 EFLAGS: 00000293 ORIG_RAX: 0000000000000029
[  111.251766][ T8208] RAX: ffffffffffffffda RBX: 00007f74503b5fa0 RCX: 00007f7450190847
[  111.251778][ T8208] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  111.251788][ T8208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  111.251797][ T8208] R10: 0000200000000280 R11: 0000000000000293 R12: 0000000000000001
[  111.251808][ T8208] R13: 0000000000000000 R14: 0000200000000280 R15: 0000200000000040
[  111.251832][ T8208]  </TASK>
[  111.251855][ T8208] socket: no more sockets
[  111.910689][ T8224] sctp: [Deprecated]: syz.5.682 (pid 8224) Use of int in max_burst socket option.
[  111.910689][ T8224] Use struct sctp_assoc_value instead
[  112.286566][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.289809][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.297055][ T8231] x_tables: duplicate underflow at hook 2
[  112.311703][ T8235] netlink: 'syz.4.686': attribute type 10 has an invalid length.
[  112.477156][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.479715][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.585479][ T8245] ata1.00: invalid cdb length 6
[  112.712519][ T8256] tmpfs: Bad value for 'mpol'
[  112.717762][ T8258] overlayfs: failed to resolve './file1': -2
[  112.834212][ T8264] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  112.854853][ T8267] Can't find a SQUASHFS superblock on nullb0
[  112.932974][ T8271] __nla_validate_parse: 2 callbacks suppressed
[  112.932990][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.5.701'.
[  112.990250][ T8276] netlink: 'syz.5.702': attribute type 12 has an invalid length.
[  113.067628][ T8279] random: crng reseeded on system resumption
[  113.074953][ T8279] cgroup: Unknown subsys name 'fsmagic'
[  113.193074][  T951] IPVS: starting estimator thread 0...
[  113.203748][ T8288] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  113.275785][ T8289] IPVS: using max 43 ests per chain, 103200 per kthread
[  115.015877][ T6037] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  115.175991][ T6037] usb 10-1: Using ep0 maxpacket: 8
[  115.179264][ T6037] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  115.181837][ T6037] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  115.184840][ T6037] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  115.188000][ T6037] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  115.191071][ T6037] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  115.195089][ T6037] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  115.198019][ T6037] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.405583][ T6037] usb 10-1: usb_control_msg returned -32
[  115.407413][ T6037] usbtmc 10-1:16.0: can't read capabilities
[  115.420146][ T6037] usb 10-1: USB disconnect, device number 7
[  115.629136][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.632558][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.778612][   T40] kauditd_printk_skb: 32 callbacks suppressed
[  115.778626][   T40] audit: type=1400 audit(1752710914.377:520): avc:  denied  { execute } for  pid=8338 comm="syz.4.720" dev="hugetlbfs" ino=24965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  115.791065][   T40] audit: type=1400 audit(1752710914.377:521): avc:  denied  { execute_no_trans } for  pid=8338 comm="syz.4.720" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=24965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  116.087727][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.724'.
[  116.367682][   T40] audit: type=1400 audit(1752710914.967:522): avc:  denied  { create } for  pid=8359 comm="syz.4.729" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1
[  116.380090][   T40] audit: type=1400 audit(1752710914.977:523): avc:  denied  { bind } for  pid=8356 comm="syz.5.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  116.630311][   T34] IPVS: starting estimator thread 0...
[  116.715418][ T8371] IPVS: using max 24 ests per chain, 57600 per kthread
[  118.035376][   T34] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  118.165414][   T34] usb 9-1: device descriptor read/64, error -71
[  118.409191][   T34] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  118.538764][   T34] usb 9-1: device descriptor read/64, error -71
[  118.649657][   T34] usb usb9-port1: attempt power cycle
[  118.985331][   T34] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  119.006067][   T34] usb 9-1: device descriptor read/8, error -71
[  119.245488][   T34] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  119.266719][   T34] usb 9-1: device descriptor read/8, error -71
[  119.377377][   T34] usb usb9-port1: unable to enumerate USB device
[  119.802728][ T8384] tmpfs: Bad value for 'mpol'
[  119.833252][   T40] audit: type=1400 audit(1752710918.427:524): avc:  denied  { nlmsg_read } for  pid=8385 comm="syz.5.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  119.840049][   T40] audit: type=1400 audit(1752710918.437:525): avc:  denied  { ioctl } for  pid=8385 comm="syz.5.739" path="socket:[24272]" dev="sockfs" ino=24272 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  119.972829][ T8395] loop2: detected capacity change from 0 to 14
[  119.977116][ T8395] Dev loop2: unable to read RDB block 14
[  119.979523][ T8395]  loop2: AHDI p1 p2 p3
[  119.981273][ T8395] loop2: partition table partially beyond EOD, truncated
[  119.984865][ T8395] loop2: p1 start 1601398130 is beyond EOD, truncated
[  119.992851][ T8395] loop2: p2 start 1702059890 is beyond EOD, truncated
[  120.086534][   T40] audit: type=1400 audit(1752710918.687:526): avc:  denied  { map } for  pid=8396 comm="syz.5.742" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  120.220259][ T8400] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  120.223229][ T8400] overlayfs: failed to set xattr on upper
[  120.226460][ T8400] overlayfs: ...falling back to redirect_dir=nofollow.
[  120.229253][ T8400] overlayfs: ...falling back to index=off.
[  120.231069][ T8400] overlayfs: ...falling back to uuid=null.
[  120.233043][ T8400] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  120.275126][   T40] audit: type=1400 audit(1752710918.867:527): avc:  denied  { read } for  pid=8403 comm="syz.5.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  120.389472][ T8410] MTD: Couldn't look up '/dev/sg0': -15
[  120.392452][   T40] audit: type=1400 audit(1752710918.987:528): avc:  denied  { connect } for  pid=8409 comm="syz.5.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  120.635113][   T89] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  120.666114][   T40] audit: type=1400 audit(1752710919.267:529): avc:  denied  { getopt } for  pid=8427 comm="syz.5.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  120.676321][ T8428] vivid-000: disconnect
[  120.678550][ T8428] vivid-000: reconnect
[  121.043267][   T40] audit: type=1400 audit(1752710919.637:530): avc:  denied  { getopt } for  pid=8452 comm="syz.4.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  121.100446][   T40] audit: type=1400 audit(1752710919.697:531): avc:  denied  { ioctl } for  pid=8459 comm="syz.5.761" path="socket:[25781]" dev="sockfs" ino=25781 ioctlcmd=0x4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  121.110012][   T40] audit: type=1400 audit(1752710919.697:532): avc:  denied  { setattr } for  pid=8459 comm="syz.5.761" name="IEEE-802.15.4-MAC" dev="sockfs" ino=25781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  121.504814][ T8487] netlink: 40 bytes leftover after parsing attributes in process `syz.5.769'.
[  121.571953][ T8493] tmpfs: Bad value for 'mpol'
[  121.610037][   T40] audit: type=1400 audit(1752710920.207:533): avc:  denied  { read append } for  pid=8494 comm="syz.5.772" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  121.625825][   T40] audit: type=1400 audit(1752710920.207:534): avc:  denied  { open } for  pid=8494 comm="syz.5.772" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  121.709017][   T40] audit: type=1400 audit(1752710920.307:535): avc:  denied  { read } for  pid=8500 comm="syz.5.774" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  121.799863][ T8508] nbd: couldn't find a device at index -1605786504
[  121.808993][ T8508] netlink: 16 bytes leftover after parsing attributes in process `syz.5.776'.
[  122.163858][ T8531] netlink: 'syz.4.785': attribute type 10 has an invalid length.
[  122.172602][ T8531] veth0_vlan: left promiscuous mode
[  122.176928][ T8531] veth0_vlan: entered promiscuous mode
[  122.183544][ T8531] team0: Device veth0_vlan failed to register rx_handler
[  122.954518][ T8543] netlink: 'syz.5.789': attribute type 2 has an invalid length.
[  122.957953][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.789'.
[  123.106430][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.792'.
[  123.110118][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.792'.
[  123.155505][ T8553] netlink: 45 bytes leftover after parsing attributes in process `syz.5.793'.
[  123.157018][ T8554] fuse: Bad value for 'rootmode'
[  123.724483][ T8585] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  124.177640][ T8589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.229394][  T951] ------------[ cut here ]------------
[  124.232120][  T951] workqueue: cannot queue hci_conn_timeout on wq hci3
[  124.235064][  T951] WARNING: CPU: 3 PID: 951 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0
[  124.235587][   T40] audit: type=1400 audit(1752710922.837:536): avc:  denied  { watch watch_reads } for  pid=8588 comm="syz.5.805" path="pipe:[26657]" dev="pipefs" ino=26657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  124.238773][  T951] Modules linked in:
[  124.249828][  T951] CPU: 3 UID: 0 PID: 951 Comm: kworker/3:2 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[  124.253509][  T951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  124.256821][  T951] Workqueue: events l2cap_chan_timeout
[  124.258562][  T951] RIP: 0010:__queue_work+0xc9c/0x10f0
[  124.260243][  T951] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 07 ac 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 56 19 38 00 90 0f 0b 90 e9 1b f6 ff
[  124.266154][  T951] RSP: 0018:ffffc90005cefa48 EFLAGS: 00010082
[  124.268053][  T951] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8
[  124.270485][  T951] RDX: ffff88802779a440 RSI: ffffffff817af1b5 RDI: 0000000000000001
[  124.272935][  T951] RBP: ffff888063744948 R08: 0000000000000001 R09: 0000000000000000
[  124.275370][  T951] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  124.277875][  T951] R13: ffff88802b453800 R14: ffff88802b453978 R15: ffff888063744950
[  124.280331][  T951] FS:  0000000000000000(0000) GS:ffff8880d6a13000(0000) knlGS:0000000000000000
[  124.283070][  T951] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  124.285129][  T951] CR2: 00007f24750e7d60 CR3: 000000004ca8c000 CR4: 0000000000352ef0
[  124.287771][  T951] Call Trace:
[  124.289088][  T951]  <TASK>
[  124.290301][  T951]  ? __cancel_work+0x2c8/0x370
[  124.291863][  T951]  ? clear_pending_if_disabled+0xa8/0x210
[  124.293950][  T951]  ? __pfx_clear_pending_if_disabled+0x10/0x10
[  124.296353][  T951]  __queue_delayed_work+0x35b/0x460
[  124.298407][  T951]  queue_delayed_work_on+0x1b5/0x200
[  124.300491][  T951]  l2cap_chan_del+0x5a0/0x8f0
[  124.300793][ T8590] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  124.302335][  T951]  l2cap_chan_close+0xfe/0xa30
[  124.302362][  T951]  ? __pfx_l2cap_chan_close+0x10/0x10
[  124.302394][  T951]  l2cap_chan_timeout+0x196/0x310
[  124.305451][ T8591] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  124.313900][  T951]  process_one_work+0x9cf/0x1b70
[  124.315874][  T951]  ? __pfx_process_one_work+0x10/0x10
[  124.318138][  T951]  ? assign_work+0x1a0/0x250
[  124.320070][  T951]  worker_thread+0x6c8/0xf10
[  124.321983][  T951]  ? __pfx_worker_thread+0x10/0x10
[  124.324108][  T951]  kthread+0x3c5/0x780
[  124.325763][  T951]  ? __pfx_kthread+0x10/0x10
[  124.327269][  T951]  ? rcu_is_watching+0x12/0xc0
[  124.328843][  T951]  ? __pfx_kthread+0x10/0x10
[  124.330347][  T951]  ret_from_fork+0x5d7/0x6f0
[  124.331865][  T951]  ? __pfx_kthread+0x10/0x10
[  124.333373][  T951]  ret_from_fork_asm+0x1a/0x30
[  124.334963][  T951]  </TASK>
[  124.336003][  T951] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  124.338288][  T951] CPU: 3 UID: 0 PID: 951 Comm: kworker/3:2 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[  124.342613][  T951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  124.346906][  T951] Workqueue: events l2cap_chan_timeout
[  124.349092][  T951] Call Trace:
[  124.350361][  T951]  <TASK>
[  124.351577][  T951]  dump_stack_lvl+0x3d/0x1f0
[  124.353406][  T951]  panic+0x71c/0x800
[  124.354680][  T951]  ? __pfx_panic+0x10/0x10
[  124.356208][  T951]  ? show_trace_log_lvl+0x29b/0x3e0
[  124.358190][  T951]  ? check_panic_on_warn+0x1f/0xb0
[  124.359907][  T951]  ? __queue_work+0xc9c/0x10f0
[  124.361638][  T951]  check_panic_on_warn+0xab/0xb0
[  124.363496][  T951]  __warn+0xf6/0x3c0
[  124.365040][  T951]  ? __queue_work+0xc9c/0x10f0
[  124.366697][  T951]  report_bug+0x3c3/0x580
[  124.368501][  T951]  ? __queue_work+0xc9c/0x10f0
[  124.370375][  T951]  handle_bug+0x184/0x210
[  124.372018][  T951]  exc_invalid_op+0x17/0x50
[  124.373486][  T951]  asm_exc_invalid_op+0x1a/0x20
[  124.375354][  T951] RIP: 0010:__queue_work+0xc9c/0x10f0
[  124.377113][  T951] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 07 ac 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 56 19 38 00 90 0f 0b 90 e9 1b f6 ff
[  124.383350][  T951] RSP: 0018:ffffc90005cefa48 EFLAGS: 00010082
[  124.385352][  T951] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817af1a8
[  124.387928][  T951] RDX: ffff88802779a440 RSI: ffffffff817af1b5 RDI: 0000000000000001
[  124.390489][  T951] RBP: ffff888063744948 R08: 0000000000000001 R09: 0000000000000000
[  124.392930][  T951] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  124.395501][  T951] R13: ffff88802b453800 R14: ffff88802b453978 R15: ffff888063744950
[  124.398065][  T951]  ? __warn_printk+0x198/0x350
[  124.399796][  T951]  ? __warn_printk+0x1a5/0x350
[  124.401336][  T951]  ? __queue_work+0xc9b/0x10f0
[  124.402828][  T951]  ? __cancel_work+0x2c8/0x370
[  124.404349][  T951]  ? clear_pending_if_disabled+0xa8/0x210
[  124.406195][  T951]  ? __pfx_clear_pending_if_disabled+0x10/0x10
[  124.408271][  T951]  __queue_delayed_work+0x35b/0x460
[  124.409960][  T951]  queue_delayed_work_on+0x1b5/0x200
[  124.411687][  T951]  l2cap_chan_del+0x5a0/0x8f0
[  124.413250][  T951]  l2cap_chan_close+0xfe/0xa30
[  124.415112][  T951]  ? __pfx_l2cap_chan_close+0x10/0x10
[  124.417082][  T951]  l2cap_chan_timeout+0x196/0x310
[  124.419031][  T951]  process_one_work+0x9cf/0x1b70
[  124.420668][  T951]  ? __pfx_process_one_work+0x10/0x10
[  124.422373][  T951]  ? assign_work+0x1a0/0x250
[  124.423836][  T951]  worker_thread+0x6c8/0xf10
[  124.425336][  T951]  ? __pfx_worker_thread+0x10/0x10
[  124.426990][  T951]  kthread+0x3c5/0x780
[  124.428339][  T951]  ? __pfx_kthread+0x10/0x10
[  124.429832][  T951]  ? rcu_is_watching+0x12/0xc0
[  124.431406][  T951]  ? __pfx_kthread+0x10/0x10
[  124.432935][  T951]  ret_from_fork+0x5d7/0x6f0
[  124.434444][  T951]  ? __pfx_kthread+0x10/0x10
[  124.435920][  T951]  ret_from_fork_asm+0x1a/0x30
[  124.437424][  T951]  </TASK>
[  124.439152][  T951] Kernel Offset: disabled
[  124.440509][  T951] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:08:43  Registers:
info registers vcpu 0

CPU#0
RAX=000000000014a025 RBX=0000000000000000 RCX=ffffffff8b885c99 RDX=0000000000000000
RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08
R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001
R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a98750 R15=0000000000000000
RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6713000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f24741d5f98 CR3=0000000029296000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411c7a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411c87
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411c81
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411c95
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411d1b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411df9
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474586488 00007f2474586480 00007f2474586478 00007f2474586450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24750ed100 00007f2474586440 00007f2474586458 00007f24745864a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474586498 00007f2474586490 00007f2474586488 00007f2474586480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff8880504bde00 RCX=ffffffff8490d199 RDX=ffff888021f28000
RSI=0000000000000084 RDI=0000000000000001 RBP=ffffc900006a0160 RSP=ffffc9000069ff60
R8 =0000000000000001 R9 =0000000000000084 R10=0000000000000006 R11=0000000000000001
R12=ffff88803b7c9e80 R13=ffff88803b7c9e89 R14=0000000000000000 R15=0000000000000006
RIP=ffffffff81bbf280 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6813000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f74501182f0 CR3=00000000347f4000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000
Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 033202000880030a 1000088080801000 0004060142c62010 0010800434080002
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0308c0800408a003 0010000890030008 0008880300040008 840301fe02000882
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300040008d40300 040008d003001000 08c00320080008b8 03028080080008b0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001ffffffff ffffffffd70808d8
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000010010000f ffffffffffff0400 1000400800029ef8 0800010000000806
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c010dde08800400 0000041006000000 0210060601748000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001ffffffff ffffffffd70808d8 0300040008d40300
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040008d003001000 08c00320080008b8 03028080080008b0 0308c0800408a003
ZMM25=d344d59fd344d59f d344d59fd344d59f d344d59fd344d59f d344d59fd344d59f d344d59fd344d59f d344d59fd344d59f d344d59fd344d59f d344d59fd344d59f
ZMM26=de354cfbde354cfb de354cfbde354cfb de354cfbde354cfb de354cfbde354cfb de354cfbde354cfb de354cfbde354cfb de354cfbde354cfb de354cfbde354cfb
ZMM27=024bab46024bab46 024bab46024bab46 024bab46024bab46 024bab46024bab46 024bab46024bab46 024bab46024bab46 024bab46024bab46 024bab46024bab46
ZMM28=000000b0000000af 000000ae000000ad 000000ac000000ab 000000aa000000a9 000000a8000000a7 000000a6000000a5 000000a4000000a3 000000a2000000a1
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=3407000034070000 3407000034070000 3407000034070000 3407000034070000 3407000034070000 3407000034070000 3407000034070000 3407000034070000
info registers vcpu 2

CPU#2
RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff855bced5 RDI=ffffffff9b0c72a0 RBP=ffffffff9b0c7260 RSP=ffffc9000078f880
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000064 R14=ffffffff9b0c7260 R15=ffffffff855bce70
RIP=ffffffff855bceff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6913000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c2e10fb CR3=0000000029296000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411c7a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411c87
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411c81
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411c95
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411d1b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411df9
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474586488 00007f2474586480 00007f2474586478 00007f2474586450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24750ed100 00007f2474586440 00007f2474586458 00007f24745864a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474586498 00007f2474586490 00007f2474586488 00007f2474586480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff819b8fc2 RDX=ffff88802779a440
RSI=ffffffff819b8fb0 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90005cef6b8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=1ffff92000b9ded9 R13=0000000000000000 R14=ffff88801c350000 R15=ffffc90005cef780
RIP=ffffffff819b8fb9 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6a13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f24750e7d60 CR3=000000004ca8c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcd1ef6b0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411c7a
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411c87
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411c81
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411c95
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411d1b
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2474411df9
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000