last executing test programs:

43.045594799s ago: executing program 2 (id=587):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x4, 0xffff, 0x10, 0x550, 0x5, {<r1=>0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x0, 0x4, 0x7, 0x4}}, &(0x7f00000000c0)=0xb0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000001c0)=0x84)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x7, [0x0, <r3=>0x0, 0x0, <r4=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x20)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000280)={r3, 0xcf}, 0x8)
socket$kcm(0x29, 0x0, 0x0) (async)
r5 = socket$kcm(0x29, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x47fe}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x47fe}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x1)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000004c0)=<r6=>0x0)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000580)={0x0, "0f083c25055879eb22b9f52a1106c1e1"}) (async)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000580)={<r7=>0x0, "0f083c25055879eb22b9f52a1106c1e1"})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001580)={{r2}, r6, 0x1a, @inherit={0x58, &(0x7f0000000500)={0x78c3e01dd97cda7c, 0x2, 0xa1a, 0x715, {0x15, 0x6, 0x9, 0x7, 0xc}, [0x9, 0x8]}}, @devid=r7})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), r2)
sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x20, r9, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80, 0x5a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x20004040)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002700)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002700)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x28, r9, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x2f}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000011)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) (async)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000002800)={r4, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5a7c, 0x7}, 0x90)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r8, &(0x7f0000003d40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003d00)={&(0x7f0000002900)={0x13ec, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xe694}, @NL80211_ATTR_IE={0xf5, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @rann={0x7e, 0x15, {{0x0, 0x7d}, 0xd0, 0xc, @broadcast, 0x3, 0x0, 0x7f}}, @measure_req={0x26, 0xd5, {0xf, 0xff, 0xf8, "39a1b03ff15f563cd95012663d9cae5f71b8b93b173d974268322ab3d36fcf154f2cde184806abb7f5178d7ef6be26fc15f73ff05c01181fc0345bf0d166d1a84548c006f4ef0db1b1f7cd3bfe9577169729e05e0b989d23ad5681ec49ee96b67887f427dc9d6ca937178da6189fee5d71d453c17300851d55e69471bc7c19016fc210d29578af7c94e74c0f000dfe6bbb312597597f40e46cbc2d1f230e3c152a05e439b62d584e92115cc4531823288cc74886098a4f1332dec8f0ee10d93ebe8d8b01424ecfdb48438a225b056695be81"}}]}, @NL80211_ATTR_IE={0x189, 0x2a, [@measure_req={0x26, 0xd5, {0x8, 0x4, 0xf9, "160cd0d0ab498bf28b8cfb7bae6c108a752a146df3ffb94df898527f4c1ccea852f4ed05e0128cac53b733c11b9e4b5b5c7ca4ec3cf5fa16b35d94bf1c2e3562243c7e523b9459c834305c67c385fb9881be11c85963077bcd43db4f8fb26fe1d4dd8ac1b14631ee3211724ce541c0c88c07cda972baa12665192dccc892940fdbcbaebcb1fbf16da73c6642a0f795fb1c173a1fe282d7931eff9d5877c01a0fbcd2a65ff08ec155a4d07c0f14ce819bf5d5b2c4a637257a74c451c55177a1fe2baad3567761bc01d84f83f929c5d9005ec8"}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @fast_bss_trans={0x37, 0x9f, {0x2, 0x3, "21c6252ace2065ef0ddaea9d6e90c54b", "1b1b00c009c3ba99e39f0f764eecbeb5ca1df15b2610723a5875401952138823", "5bdb344531e7dfc14677bdab9430a5a9a7c9cff59f67d14495bc64839876c03c", [{0x1, 0x14, "23a207d000568fe5b898fd72b729338e8ff192e8"}, {0x3, 0x1f, "da84a5cda4dd20a47fc0c4c0b5fc9f4b0327d4c2b23e4598fca2dc1934e70e"}, {0x1, 0x14, "629020ca07bdd41a7f8aa6a24df133a4b915a0a8"}]}}, @peer_mgmt={0x75, 0x8, {0x1, 0x3, @val=0xfe01, @val=0x28, @void}}]}, @NL80211_ATTR_IE={0xf, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x40}}]}, @NL80211_ATTR_IE={0x111b, 0x2a, [@ssid={0x0, 0x19, @random="8c78f1a2ee804b49a9b822ceffac8d6441dfdad1aa5947a06e"}, @measure_req={0x26, 0x1003, {0x8, 0xa, 0x3, "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"}}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0x9e, "16891edb770d950384d0ccdca0863bb359517cfa18267fd1ddf68dbef6dcaafdaef4224c46e761b553010335d8f49df4f934402a3251436305706d7d341d807d328c6722a9c16875a9afd8a12de9660d84e0effe554d80879e69ca87fec76279fd6e88329776f82082627fb4fc64084a2ccdf1c9f0d4f675f232c43308db320d79cc40f96caf38e2630377992ff4bdc86acc8bc1c0fa5e5ed7ac1f687974"}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x0, 0x0, {0x0, 0x1, 0x0, 0x40, 0x0, 0x1, 0x1, 0x2}, 0x400, 0x6, 0x9}}, @rann={0x7e, 0x15, {{0x1, 0x25}, 0xf7, 0x4, @device_a, 0x101, 0x7, 0x9}}, @mesh_chsw={0x76, 0x6, {0x81, 0x9, 0x15, 0xe4f2}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}]}, 0x13ec}}, 0x20044011)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r8, &(0x7f0000003e40)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003e00)={&(0x7f0000003dc0)={0x28, r9, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x60, 0x5a}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, 0x28}}, 0x400c0d0)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003ec0), r8)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x38, r11, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xffffffff}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x38}}, 0x10) (async)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x38, r11, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xffffffff}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x38}}, 0x10)
socket$nl_crypto(0x10, 0x3, 0x15) (async)
r12 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$sock_SIOCOUTQNSD(r12, 0x894b, &(0x7f0000003fc0))
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004080)={&(0x7f0000004040)={0x3c, r9, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80000000, 0x7}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}}, 0x40000)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000004100)={<r13=>r5})
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000004140)={0x8, 0x35, 0x2, 0x2}, 0x8) (async)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000004140)={0x8, 0x35, 0x2, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x66, &(0x7f0000004180)={r4, 0x8}, &(0x7f00000041c0)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000004200)={'wlan0\x00'})

43.044010715s ago: executing program 2 (id=588):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"])
chdir(&(0x7f0000000300)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r0, 0x0)
ftruncate(r0, 0x80796c)
renameat(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00')
write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x3c, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x3c}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

42.945802076s ago: executing program 2 (id=589):
pipe2$9p(&(0x7f00000027c0)={<r0=>0xffffffffffffffff}, 0x0)
close(0xffffffffffffffff)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x805, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x3c, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x7)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f00000019c0)=0x2)
ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000140)=0x5)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="130000004e0001"], 0x24}}, 0x0)
pipe2$9p(&(0x7f00000027c0), 0x0) (async)
close(0xffffffffffffffff) (async)
socket(0x28, 0x5, 0x0) (async)
socket(0x28, 0x805, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x3c, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) (async)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
listen(r2, 0x7) (async)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) (async)
ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f00000019c0)=0x2) (async)
ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000140)=0x5) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="130000004e0001"], 0x24}}, 0x0) (async)

42.705731992s ago: executing program 2 (id=590):
setreuid(0xee01, 0xee01)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0xffff}, {0x6, 0x2}, 0xab4, [0x5, 0x7b, 0x3, 0x4000000005, 0x7f, 0x66, 0x4000000001, 0x5f, 0x4, 0x8, 0x10, 0x3, 0x6, 0xffdffffffffffff7, 0x621, 0xe4]})
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x3, 0xffff}, 0x8)
r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)
syz_io_uring_setup(0x2fa8, &(0x7f0000000380)={0x0, 0xf025, 0x4, 0x0, 0x2b8, 0x0, r2}, &(0x7f0000000280), &(0x7f0000000400))
r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000180))
ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000540))
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r6, @ANYBLOB="0500030001"], 0x28}}, 0x80)
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0)
syz_io_uring_setup(0x3042, &(0x7f00000004c0)={0x0, 0xe6de, 0x1002, 0x2, 0x40024e, 0x0, r3}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bdac, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x4040010)
sendmmsg$inet(r10, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x50, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x16})
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000080)={'macvlan1\x00', @multicast})

42.705087267s ago: executing program 2 (id=591):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r0 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004009c00000000000100000095000000000000008519fe25b0fb7b"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0xc0049364, &(0x7f0000000180))
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async)
socket(0x2, 0x2, 0x1) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004009c00000000000100000095000000000000008519fe25b0fb7b"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) (async)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
chdir(&(0x7f0000000080)='./file1\x00') (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0xc0049364, &(0x7f0000000180)) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]}) (async)

41.014915843s ago: executing program 2 (id=606):
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f00000000c0)='smaps_rollup\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xdp_cpumap_enqueue\x00', 0xffffffffffffffff, 0x0, 0x3ff}, 0x18)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
recvmmsg(r1, &(0x7f0000005180)=[{{&(0x7f0000000240)=@caif=@rfm, 0x80, &(0x7f00000027c0)=[{&(0x7f0000000180)=""/38, 0x26}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000480)=""/200, 0xc8}, {&(0x7f00000052c0)=""/4111, 0x1000}, {&(0x7f0000000580)=""/7, 0x7}, {&(0x7f0000002600)=""/141, 0x8d}, {&(0x7f00000026c0)=""/201, 0xc9}], 0x8, &(0x7f0000002840)=""/177, 0xb9}, 0x26}, {{&(0x7f0000002900)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000002980)=""/18, 0x12}, {&(0x7f00000029c0)=""/100, 0x64}, {&(0x7f0000002a40)=""/76, 0x4c}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x4}, 0x7}, {{&(0x7f0000005240)=@nfc, 0x80, &(0x7f0000005000)=[{&(0x7f0000003b80)=""/92, 0x5c}, {&(0x7f0000003c00)=""/221, 0xe0}, {&(0x7f0000003d00)=""/153, 0x9b}, {&(0x7f0000003dc0)=""/77, 0x4d}, {&(0x7f0000003e40)=""/22, 0x16}, {&(0x7f0000003e80)=""/4096, 0xfef2}, {&(0x7f0000004e80)=""/104, 0x68}, {&(0x7f0000004f00)=""/107, 0x6b}, {&(0x7f0000003b00)=""/112, 0x40}], 0x9, &(0x7f00000050c0)=""/178, 0xb2}, 0x5}], 0x3, 0x40000140, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r3, 0x0, 0x3d, &(0x7f0000000140)='\x00\xe7\xfa\x00\x19a\x05\xe7\x93\f\x06`.\v\x053%\xb67\xe6\xb5\x9b\xc1\xa7\xb2\xd0\xd9\xd0\xd7\xb6\xeb\xd5\x15Z\xb8-\xb3\x81\x1c\"\xb8D\xab!\b\x00\x00\x00\xaf#\xa8\x1awz\xb5\x02\\\v\xd0K`'}, 0x30)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000009b94b10a000095000000000000009500cd0ba902a5062ea111630e7924aaefa3000000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)

33.804633962s ago: executing program 1 (id=704):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="17000026000000e7e19f0007", @ANYRES32=0x0, @ANYBLOB="0800010012000000"], 0x20}, 0x1, 0xf00}, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000003940)=0x10)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000003980)={0x9, 0x4, 0x0, 0xfffffffd, 0x4, "9fe074c27de56e638031e88f19fa52087cfdcf"})
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x8000003d)
write$P9_RREADLINK(r4, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a00)="985e44efeabe001cabcf3d8673c3a24ba9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350611808dde804a048fd8696e524b2934126c443cdb3d82e931eb9918e680f82c2dff7fb8ab22b3b969e6c0482786e59209d2e02c0210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f198c199831c388807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc1c8f9eb5a47599083f94754ad8037b243efd79c600", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000900)="8b9932df80afdfb9eef268dfbd90e1700369c4f409295d5eed07812c3072c71f1a5f03b4502aa8b563a6f156bb3d7eb99d2573f5fd607dab1e49d3b3e263b004dec8ba917675024addaa51d656ed59e0f70800049f60c874e9ff1db8f152a6fd28897f20cfacedfcad", 0x69}, {&(0x7f0000000640)="1a323135ccdb6c5e296e44d66563ded34f7370085a3cca5be206b4fa3b11242896900ab52643305268139f7e4a2b8305c370639778a9a040aed4ae72200f121518fbee65aab0226abbc72eede53a574553eeaf0446a271f87476d0d0f6e202001734f77640b6c3385222137abba6445dd68741111f46c5349a85415007039cc949b4912c5d14b8c4ef020defd52c91d4c208488314e5188f1778b2d43349f7a8bbf4c94c9d396b0cb85e0b36fef7b4b5c1065afe3f2586f711c8", 0xba}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="cc5a", 0x2}], 0x1}}], 0x3, 0x4a810)
sendmsg$802154_dgram(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x20004890)

32.935502411s ago: executing program 1 (id=705):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x19, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x3, 0x3]}})
ioctl$BSG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000000)=0x1)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e818f82db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0)

32.775157365s ago: executing program 1 (id=708):
mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x68}}, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000600)="53fc7a528ef2ea08005c43c6", 0xffeb}], 0x1}, 0x40)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
ftruncate(r0, 0x5)

32.773364406s ago: executing program 1 (id=710):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f00000000c0))
r3 = syz_open_dev$vim2m(&(0x7f0000002880), 0xef7c, 0x2)
writev(r3, &(0x7f0000002ac0)=[{&(0x7f00000028c0), 0xca800}, {&(0x7f0000002980)="0564b0", 0x3}], 0x2)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x6, 0x8082)
ioctl$SNDRV_PCM_IOCTL_DROP(r4, 0x4143, 0x0)
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
symlinkat(&(0x7f0000000180)='./file1\x00', 0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r5, 0x400455c8, 0x0)
ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x30ee8c3c771573a8, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x10010, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x104, 0x0, 0x0, 0x4)
writev(r5, 0x0, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@initdev}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8)

29.865517274s ago: executing program 1 (id=721):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaa40000008864"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x6c)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x91)
umount2(0x0, 0x1)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x9)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000ac0)="66c8a0b07043cf4b92a6bc436a0000fc3fd9802777282e38e2dc7f13ee0000000000", 0x22)
accept4(r1, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x40000, 0x120)
mkdirat(0xffffffffffffffff, &(0x7f0000000880)='./file1\x00', 0x108)
mkdir(0x0, 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000440)=[@increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0})
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'})
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x24041005}, 0x2c77edc509eea7a8)

29.815659169s ago: executing program 1 (id=722):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x388, 0x7ffffffe)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)

25.483501046s ago: executing program 32 (id=606):
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f00000000c0)='smaps_rollup\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xdp_cpumap_enqueue\x00', 0xffffffffffffffff, 0x0, 0x3ff}, 0x18)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
recvmmsg(r1, &(0x7f0000005180)=[{{&(0x7f0000000240)=@caif=@rfm, 0x80, &(0x7f00000027c0)=[{&(0x7f0000000180)=""/38, 0x26}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000480)=""/200, 0xc8}, {&(0x7f00000052c0)=""/4111, 0x1000}, {&(0x7f0000000580)=""/7, 0x7}, {&(0x7f0000002600)=""/141, 0x8d}, {&(0x7f00000026c0)=""/201, 0xc9}], 0x8, &(0x7f0000002840)=""/177, 0xb9}, 0x26}, {{&(0x7f0000002900)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000002980)=""/18, 0x12}, {&(0x7f00000029c0)=""/100, 0x64}, {&(0x7f0000002a40)=""/76, 0x4c}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x4}, 0x7}, {{&(0x7f0000005240)=@nfc, 0x80, &(0x7f0000005000)=[{&(0x7f0000003b80)=""/92, 0x5c}, {&(0x7f0000003c00)=""/221, 0xe0}, {&(0x7f0000003d00)=""/153, 0x9b}, {&(0x7f0000003dc0)=""/77, 0x4d}, {&(0x7f0000003e40)=""/22, 0x16}, {&(0x7f0000003e80)=""/4096, 0xfef2}, {&(0x7f0000004e80)=""/104, 0x68}, {&(0x7f0000004f00)=""/107, 0x6b}, {&(0x7f0000003b00)=""/112, 0x40}], 0x9, &(0x7f00000050c0)=""/178, 0xb2}, 0x5}], 0x3, 0x40000140, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r3, 0x0, 0x3d, &(0x7f0000000140)='\x00\xe7\xfa\x00\x19a\x05\xe7\x93\f\x06`.\v\x053%\xb67\xe6\xb5\x9b\xc1\xa7\xb2\xd0\xd9\xd0\xd7\xb6\xeb\xd5\x15Z\xb8-\xb3\x81\x1c\"\xb8D\xab!\b\x00\x00\x00\xaf#\xa8\x1awz\xb5\x02\\\v\xd0K`'}, 0x30)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000009b94b10a000095000000000000009500cd0ba902a5062ea111630e7924aaefa3000000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)

14.810737399s ago: executing program 33 (id=722):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x388, 0x7ffffffe)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)

2.491506489s ago: executing program 5 (id=987):
openat$ndctl0(0xffffffffffffff9c, &(0x7f00000001c0), 0x121000, 0x0)

2.483580199s ago: executing program 5 (id=988):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r0 = socket(0x1a, 0x6, 0x8000)
syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x28000)
write(r0, &(0x7f0000000100)="240000001e005f9514f9f407faac470002000000010000000000080008000100000000ff", 0x24)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x1000000}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x42}, 0x28)
socket$inet6_mptcp(0xa, 0x1, 0x106)

2.483090171s ago: executing program 5 (id=989):
write(0xffffffffffffffff, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001", 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56551, 0x4, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x9, 0x1002, 0x0, 0x59b, 0xffffffff, 0x1100000}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x101, 0xb, 0x6, 0x3, 0x4, 0x1000}}]}}}]}, 0x78}}, 0x20000000)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r3, 0x8b1a, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000007996b9ac61108e010000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.560534486s ago: executing program 4 (id=1001):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r3, 0x5, 0x70bd2a, 0x20003, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004005}, 0x0)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, r6, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x54}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0x40)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) (async)
shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r3, 0x5, 0x70bd2a, 0x20003, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, r6, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x54}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0x40) (async)

1.554151527s ago: executing program 4 (id=1003):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0xb, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60)
r2 = dup(r1)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000300)={'syztnl1\x00', <r3=>0x0, 0x8000, 0x700, 0xff800000, 0xffffffff, {{0x31, 0x4, 0x3, 0x6, 0xc4, 0x67, 0x0, 0x9, 0x61f1ed89feb930b5, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xa}, {[@timestamp_addr={0x44, 0x3c, 0x4e, 0x1, 0x8, [{@empty, 0x4}, {@multicast2, 0x6}, {@remote, 0x5}, {@local, 0x6}, {@loopback, 0x7}, {@private=0xa010102, 0x9778}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x2}]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x1, 0xb, "38f407b5247f1bbb8d"}, {0x7, 0xc, "77ab11de832c60acc65e"}]}, @timestamp_addr={0x44, 0x24, 0x32, 0x1, 0x3, [{@remote, 0x80000001}, {@local, 0x5}, {@multicast2, 0x8}, {@broadcast, 0x4}]}, @generic={0x82, 0xe, "3365df7ff4ac9d2bc545547a"}, @end, @ssrr={0x89, 0x7, 0x9e, [@loopback]}, @ssrr={0x89, 0x1b, 0xa2, [@private=0xa010102, @empty, @empty, @private=0xa010101, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}}})
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x840)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000740)={'sit0\x00', <r6=>0x0, 0x80, 0x8000, 0x6, 0x0, {{0x1e, 0x4, 0x2, 0x3, 0x78, 0x66, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ssrr={0x89, 0x27, 0x9d, [@local, @multicast2, @private=0xa010100, @local, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast2]}, @timestamp_addr={0x44, 0x3c, 0xff, 0x1, 0xd, [{@rand_addr=0x64010102, 0x7}, {@rand_addr=0x64010102, 0x222}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc}, {@loopback, 0x8}, {@multicast2, 0x6}, {@local, 0x80}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4}]}, @end]}}}}})
sendmmsg$inet(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="dbfcb91b0bc777310dee80af25be65776b3a1408e0f23eb19514464adde0758b92d3db20e11b651561c30f94d5c7cc5ff5641ce774ff32d06a031bd4dbb5f9ffcd83c8d0ff068f792598545b37f78eddb201a3e144626c8c5e82ff639b2a59a67a111a7f295b891d601fca129526bbc825c6524d0d7f173304620366f9dd49a13e7b77855f633baf02634582098a74686de6", 0x92}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r3, @ANYBLOB="ac1e01010000000000000000ac0000000000000000000000070000004420b41000000001000000010001ee0000020000000008070bcc0a0101000000000000000000000e7f0000010000008000442031a0000000015d8f000900000081000001ff000000d80000000800000fff01070f2ce00000027f000001ac1414bb940400000727ca0a010102ffffffff64019d7064010100ac1414aae000000164010102ffffffffac1e010100000000100000000000000000000000010000008400000000000000140000000000000000000000010000000700"/229], 0x100}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="56f27e6bf492b34666918f0ccb4a2914c35f1e56b886123f6bd87f195a0bf562df90f56274f6a9907cfe757e14db40e39324497131bd34f052fe80d0adc82d20e92b30c8e1fbd4d207e5149f97b4e2599a4a1b756148ef17302836390228c0442e5a985497a94e1dc7daa540fcf8df8ef41fdbda965f6e1d25f2154cf07c2e391b0251085f050c21accd76083edf145207b6fa9ba5133b", 0x97}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)="ddb5df94cc4d60966581f3ae891f7f0099d1263966ad4ef76171de1c3bfb33194e77de283754da70a13619789ce09409fb4a08dc7e033550b467c7120adb6a90d88d40241290dc428092676a0a158c1ded43716c06a2775697f3f5be1fb57bbfaea0167d4ac0e4737b26d7aa054f7a3af840cec373b14e4724e6ab451184b86975ef5918d9c766250ca7be9abc66316e3f0ecb805bfc1a37c53b9a45941637eb13b7139ff31f", 0xa6}, {&(0x7f0000000240)="d3dc5f0713dae5ff548cbff908b3019b141405304896a7153e11f82457e662385111eb1f077e62a40cb787431b95ba3f24", 0x31}], 0x2, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffff082}}], 0x58}}], 0x3, 0x810)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
getsockopt$inet_buf(r2, 0x118, 0x3, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400f9e3bde20064ff00000000", @ANYRES32=0x0, @ANYBLOB="00000000c81400001c0012800b00010062726964676500000c000280080031"], 0x3c}, 0x1, 0xba01}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0xb, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) (async)
dup(r1) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x8000, 0x700, 0xff800000, 0xffffffff, {{0x31, 0x4, 0x3, 0x6, 0xc4, 0x67, 0x0, 0x9, 0x61f1ed89feb930b5, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xa}, {[@timestamp_addr={0x44, 0x3c, 0x4e, 0x1, 0x8, [{@empty, 0x4}, {@multicast2, 0x6}, {@remote, 0x5}, {@local, 0x6}, {@loopback, 0x7}, {@private=0xa010102, 0x9778}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x2}]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x1, 0xb, "38f407b5247f1bbb8d"}, {0x7, 0xc, "77ab11de832c60acc65e"}]}, @timestamp_addr={0x44, 0x24, 0x32, 0x1, 0x3, [{@remote, 0x80000001}, {@local, 0x5}, {@multicast2, 0x8}, {@broadcast, 0x4}]}, @generic={0x82, 0xe, "3365df7ff4ac9d2bc545547a"}, @end, @ssrr={0x89, 0x7, 0x9e, [@loopback]}, @ssrr={0x89, 0x1b, 0xa2, [@private=0xa010102, @empty, @empty, @private=0xa010101, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}}}) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x840) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x80, 0x8000, 0x6, 0x0, {{0x1e, 0x4, 0x2, 0x3, 0x78, 0x66, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ssrr={0x89, 0x27, 0x9d, [@local, @multicast2, @private=0xa010100, @local, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast2]}, @timestamp_addr={0x44, 0x3c, 0xff, 0x1, 0xd, [{@rand_addr=0x64010102, 0x7}, {@rand_addr=0x64010102, 0x222}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc}, {@loopback, 0x8}, {@multicast2, 0x6}, {@local, 0x80}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4}]}, @end]}}}}}) (async)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="dbfcb91b0bc777310dee80af25be65776b3a1408e0f23eb19514464adde0758b92d3db20e11b651561c30f94d5c7cc5ff5641ce774ff32d06a031bd4dbb5f9ffcd83c8d0ff068f792598545b37f78eddb201a3e144626c8c5e82ff639b2a59a67a111a7f295b891d601fca129526bbc825c6524d0d7f173304620366f9dd49a13e7b77855f633baf02634582098a74686de6", 0x92}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r3, @ANYBLOB="ac1e01010000000000000000ac0000000000000000000000070000004420b41000000001000000010001ee0000020000000008070bcc0a0101000000000000000000000e7f0000010000008000442031a0000000015d8f000900000081000001ff000000d80000000800000fff01070f2ce00000027f000001ac1414bb940400000727ca0a010102ffffffff64019d7064010100ac1414aae000000164010102ffffffffac1e010100000000100000000000000000000000010000008400000000000000140000000000000000000000010000000700"/229], 0x100}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="56f27e6bf492b34666918f0ccb4a2914c35f1e56b886123f6bd87f195a0bf562df90f56274f6a9907cfe757e14db40e39324497131bd34f052fe80d0adc82d20e92b30c8e1fbd4d207e5149f97b4e2599a4a1b756148ef17302836390228c0442e5a985497a94e1dc7daa540fcf8df8ef41fdbda965f6e1d25f2154cf07c2e391b0251085f050c21accd76083edf145207b6fa9ba5133b", 0x97}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)="ddb5df94cc4d60966581f3ae891f7f0099d1263966ad4ef76171de1c3bfb33194e77de283754da70a13619789ce09409fb4a08dc7e033550b467c7120adb6a90d88d40241290dc428092676a0a158c1ded43716c06a2775697f3f5be1fb57bbfaea0167d4ac0e4737b26d7aa054f7a3af840cec373b14e4724e6ab451184b86975ef5918d9c766250ca7be9abc66316e3f0ecb805bfc1a37c53b9a45941637eb13b7139ff31f", 0xa6}, {&(0x7f0000000240)="d3dc5f0713dae5ff548cbff908b3019b141405304896a7153e11f82457e662385111eb1f077e62a40cb787431b95ba3f24", 0x31}], 0x2, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffff082}}], 0x58}}], 0x3, 0x810) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async)
getsockopt$inet_buf(r2, 0x118, 0x3, 0x0, &(0x7f00000000c0)) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400f9e3bde20064ff00000000", @ANYRES32=0x0, @ANYBLOB="00000000c81400001c0012800b00010062726964676500000c000280080031"], 0x3c}, 0x1, 0xba01}, 0x0) (async)

1.552951687s ago: executing program 5 (id=1004):
r0 = socket$netlink(0x10, 0x3, 0x7)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)
socket$netlink(0x10, 0x3, 0x7) (async)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) (async)

1.55274291s ago: executing program 5 (id=1005):
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) (async)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) (async)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000500)={0x1, 0x0, '\x00', {0x0, @bt={0xfffffff1, 0x8, 0x0, 0x0, 0xfff, 0x6, 0x280000, 0x3, 0x0, 0x5, 0xd, 0x9, 0x93f, 0x0, 0x4, 0x34, {0x4, 0xe2a4}, 0xca, 0x8}}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000fe6000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000005c0)="c4a1f92b5100430f00d53e460f013648b8fc97ab21e5a1a7660f23d00f21f835200000040f23f8b98c0b00000f3266ba2100ec40770ac46199d1dd66baf80cb84ce20688ef66bafc0cb839000000ef3e3e660f38f63d00000000", 0x5a}], 0x1, 0x59, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000ff5000/0x2000)=nil}) (async)
syz_clone3(&(0x7f0000000280)={0x39084500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) (async)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0xc)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000005c0)={<r8=>0x0, 0x0, 0x10001, 0x1})
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYBLOB="040000b0", @ANYRESDEC=r8, @ANYBLOB=':-00000000000000000008m']) (async)
r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r10, 0xffffffffffffffff, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0xffffffff}, 0x50)
mmap(&(0x7f00005b1000/0x4000)=nil, 0x4000, 0x0, 0x21011, r11, 0x800000) (async)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x5100, 0x0)

1.551177635s ago: executing program 4 (id=1006):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000600), 0x1, 0x80800)
ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0)
preadv2(r1, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9})
ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r4, 0x5501)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000280)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0xff, '\x00', @p_u8=&(0x7f0000000200)=0x3}})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES16=0x0], 0x50}, 0x1, 0x0, 0x0, 0xc050}, 0x4040014)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0)
r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x400)
syz_usb_disconnect(r9)
syz_usb_connect(0x5, 0x1ff, &(0x7f0000000080)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r9, 0x4004550a, 0x0)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000", @ANYRES16=r5, @ANYBLOB="040026bd7000ffdbdf253b0000000c009900080000000b0000000400870008005700be08000004008700"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x64, 0x0, 0x0, 0x7400}, 0x40000)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r10, 0x4b44, 0x10000000000004)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYRES32=r1, @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x0)

1.311110789s ago: executing program 0 (id=1010):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000300)={0xc000003, 0xf, &(0x7f0000000580)=[0x22, 0x8004, 0x0, 0x9, 0x9, 0x19f2, 0x2, 0x4, 0xbb, 0x7, 0x2072, 0x2, 0xfffffff7, 0x7, 0xfffffff8], 0x0, 0x4})
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89a3, &(0x7f0000000040)={'bridge0\x00', @random="0b0000000010"})
recvmmsg(r1, &(0x7f0000002900), 0x0, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='[', 0x101d0}], 0x1}, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000100)}, 0x10)
fchdir(r1)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000100)={0x0, 0x0})
setresuid(0x0, 0xee00, 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = io_uring_setup(0xaae, &(0x7f0000000580)={0x0, 0xffffeff9, 0x800, 0x7, 0x6})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/152, 0x98, 0x0, &(0x7f0000002700)=""/4096, 0x1000}, &(0x7f0000000440)=0x40)
setrlimit(0x5, &(0x7f0000000000)={0xaa8})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r5)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
ioctl$UI_SET_KEYBIT(r7, 0x40045565, 0x28d)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fcdb5f2501000000050006000200000005000500002658fd6191816328000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000003c0)=r8, 0x4)
ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f00000000c0)={0x1})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000800001e50000010afdb5f0e00000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94)

1.310114811s ago: executing program 0 (id=1012):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x204, 0x800542)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) (async)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000000)={0xac, 0x6, 0x6, @empty, 'netdevsim0\x00'}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.121040469s ago: executing program 0 (id=1014):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000160000000200000008292700", @ANYRES32=r2, @ANYBLOB="0c00990009000000440000000800250000000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fdffffff182a0000", @ANYRES32, @ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000001185b0000010000000000000000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10, 0x0, r4}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}})
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340)=r5, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4c, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xe9}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x17}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_RTT={0x8, 0x7, 0xd0b}, @TCA_CAKE_ATM={0x8}]}}]}, 0x7c}}, 0x8000)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="043106aaaaaaaa6bd3f6c4ffa6642953ade0132d10139107a3"], 0x9)
r11 = accept4(r10, 0x0, 0x0, 0x800)
sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)

1.000729566s ago: executing program 0 (id=1017):
mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x1, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)

911.096549ms ago: executing program 0 (id=1018):
socket$nl_audit(0x10, 0x3, 0x9) (async)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1)
syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) (async)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={<r4=>0x0, 0x1})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x62040200) (async)
unshare(0x62040200)
r5 = socket$inet(0xa, 0x801, 0x84)
setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x7, 0x2, 0x4, 0x6, 0x4c16], 0x3, &(0x7f0000000000)=[{}], 0x0, [{}, {}, {}]}, 0xa8)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000080)={r4, r4, 0x0, 0x6, 0x2})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r3, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000440)=[r4], &(0x7f0000000480), 0x1, 0x1})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000f9dbdf253400000008000300", @ANYRES32=r6, @ANYBLOB="08001f0174159f879800060016520e750b2000000000000000040001f86b8c93845c61a2287640c2"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010)
socket$key(0xf, 0x3, 0x2) (async)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000f8ffffffffffffff05000600000000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007020000000805000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)

498.104802ms ago: executing program 0 (id=1025):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000280)=0x3)
waitid$P_PIDFD(0x3, r5, 0x0, 0x8, 0x0) (async, rerun: 64)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) (rerun: 64)
sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async, rerun: 32)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000e4dca44ae0168806d51ed30c947cb161273f87411e7111efb5b8dbd32c04977d5c3068e6a571c06397a721e48d3f885611b98d849594d1b36b0e5abef785b6aeaf5eecbf9d9b7315628fa4041ce6998b0287d2b6f11c9d33f6fa6072dcc9395b078f9b156f52931268542f3eddd43f5d74a2f969c1cd974f46278cb6bb01e3f3f4fb1b3ed2fdde3065491b23677e2be6ac9697e7bb51c1775b7b1185e8", @ANYRES16=r1, @ANYBLOB="01012abd"], 0x24}, 0x1, 0x0, 0x0, 0x240000c4}, 0x24000000) (rerun: 32)

370.541007ms ago: executing program 3 (id=1026):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x7, 0x0, 0x0, @u32=0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r2, 0x210, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000885) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) (rerun: 32)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1d0, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x736}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93b5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9fb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc62}]}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xca}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xeb8}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x43}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9de6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40084}, 0x200040c0)

310.502108ms ago: executing program 3 (id=1027):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x8)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x100, 0x8000}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r0, 0x5501)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) (async)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x8) (async)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x100, 0x8000}, 'syz0\x00', 0x1}) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)

260.008009ms ago: executing program 3 (id=1028):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x60180, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/vmstat\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) (async)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) (async)
write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x3f7, 0x200, 0x70bd2b, 0x25dfdbfe, {0x7, 0x1, './file0', '.'}, ["", "", "", "", ""]}, 0xfffffffffffffeb1}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r2}) (async)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r2})
preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000440)={0x1, 0x0, 0x100, 0x1, {0x6, 0x7, 0x1, 0x7}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000018400000f9ffffff0000000000000000d470f4ff04000000852000000100000018000000fdffffff00000000000000008520000001000004000000002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

256.493557ms ago: executing program 3 (id=1029):
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x9}}, './file0\x00'})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={<r1=>0x0, @remote}, &(0x7f0000000180)=0xc)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0xfff1, 0x4}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x44080)
r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000007000000030000000f00000080080500", @ANYRES32=r0, @ANYBLOB="ff00"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0300000005000000050000000e00"/24, @ANYRES32=r5, @ANYBLOB="01000000000000000df402f3000082b00a43672ba54248a27ada5ffa3c3165a2bd95da7768e69948f992"], 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x58, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}})
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000010000054001280080001006774700048000280080007000000000a080004000000000014000800fe8000000000000000000000000000aa0800030005000000050005"], 0x84}}, 0x0)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$l2tp(0x2, 0x2, 0x73)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
flistxattr(r11, &(0x7f0000000080)=""/64, 0x40)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan0\x00'})
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, <r13=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r13)
inotify_init1(0x0)
bind$x25(r10, &(0x7f0000000000), 0x12)
bind$x25(r9, &(0x7f0000000080), 0x12)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000000)={'wg0\x00'})

179.207427ms ago: executing program 3 (id=1030):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\r'], 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xd8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x20)
connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

178.695204ms ago: executing program 3 (id=1031):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGPHYS(r4, 0x80404812, &(0x7f00000000c0))
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffe0}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x91d7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4001)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0)

100.840712ms ago: executing program 4 (id=1032):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newnexthop={0xa8, 0x68, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x1, 0x0, 0x7}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP_TYPE={0x6}, @NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7fffffff}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xd77}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x27f1}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffffffff}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x87}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x60}]}, @NHA_ID={0x8, 0x1, 0x2}]}, 0xa8}}, 0x2e0480b1)

100.38009ms ago: executing program 4 (id=1033):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000008300), 0x0, 0x0) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000008300)={0x0, r0}, 0x8) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000a400)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="4ba7dd3c000000000000200000000000160ce2fc2edc94d705684676109500000000000000fd67c26ad2001497428d5542d4a63b7013c40916bc62c793fdcaa266207ce17b52f37057aaa5da2e2955a5d32aaa840c20bea324149d60fe885043c3225996f45ea2482631f31bcffa00656ef7dbfdd12f75568d0adcf17d92ccedeb48648719920bf54597b539a419f4a58024c117e38159e10acf323e12600ea08614c4338bf4eddd39a42ef7bd7717e572dd998d077587583086e8d3e3681f1e79fb7f5829b1c7578120124d63bdef0a3127c4328df8aed61189a35bc438192202ad16c1531b4601753236d73c5e6359c81b6a524e"], &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async, rerun: 32)
read$FUSE(r0, &(0x7f00000003c0)={0x2020, 0x0, <r4=>0x0}, 0x2020) (rerun: 32)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50)
fsetxattr$security_evm(r5, &(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="03"], 0x9, 0x0) (async, rerun: 32)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000002400)={{{@in6=@mcast1, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000008240)=0x140) (async, rerun: 32)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) (async)
syz_emit_vhci(&(0x7f0000019200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_oob_ext_data={{0x11}, {0x0, "4d6b870320fa349d37bb08113bd13619", "c1b820b0f45e16c86c7583726b2153d2", "b3e39f0de79dec99d0262a2ac9a7d3bc", "c4e161077a9ee1d5389f6864093c2731"}}}}, 0x47)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000008340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r2]) (async)
read$FUSE(r7, &(0x7f00000083c0)={0x2020, 0x0, <r8=>0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) (async)
r11 = open(&(0x7f0000000200)='./file1/file0\x00', 0x529240, 0x1c0) (async, rerun: 64)
syz_fuse_handle_req(r7, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_fuse_handle_req(r7, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r7, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x78, 0x0, 0xb, {0x8, 0x1, 0x0, {0x0, 0x7ff, 0xd09, 0xfe63, 0x3, 0x4, 0x4, 0x7, 0x4, 0x6000, 0x7, r9, r10, 0xcdb, 0x17}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
write$FUSE_STATX(r1, &(0x7f0000002540)={0x130, 0xfffffffffffffffe, r4, {0x1000, 0x1a58, 0x0, '\x00', {0x4000, 0x86, 0x7, 0x400, r6, r10, 0xc000, '\x00', 0x7fffffffffffffff, 0x3, 0x5, 0x15c, {0x3ff}, {0x8, 0x1}, {0x401, 0x3}, {0x689, 0x5}, 0x9, 0x9, 0x0, 0x200}}}, 0x130)
ioctl$TCGETS2(r11, 0x802c542a, &(0x7f0000000080)) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
poll(&(0x7f0000008200)=[{r3, 0x100}], 0x1, 0x9) (async, rerun: 64)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3802000023000900fffffffffddbdf2502000000240201"], 0x238}}, 0x0) (async, rerun: 64)
fstat(0xffffffffffffffff, &(0x7f0000008280))
pwritev2(r3, &(0x7f00000081c0)=[{&(0x7f0000004100)="3baa6a1fa91bf2089cc5a3b8753138c26a41759d56dd35c1e90bb1ad716ab17e8da433092da8b5976ce51a264b7004c94196ce77cd640b91051dbba3d1bc7d39b278e805138a06b3c6e353c96ce5c13a423195ce933545c2", 0x58}, {&(0x7f0000004180)="1a73d9b9e079d0d8bda669e024fbfd365a9a36cbca6366ccab04330c4412e4401c021895fec8a04df9af31b6d43a158facf668e8ceaf7c20f5e21aa9", 0x3c}], 0x2, 0x8, 0x5, 0x11)

426.265µs ago: executing program 4 (id=1034):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x4ea3, 0x0, 0x0, 0x41100, 0xcd, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffddb, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x6, 0x4}, {0x2, 0x1, 0x9, 0x5}], 0x10, 0xffc}, 0x94) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0x46, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r3, 0x0, r2}) (async)
ioctl$TCXONC(r0, 0x4b3a, 0x2)

0s ago: executing program 5 (id=1035):
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0x1}) (async)
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) (async)
ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000340)={0x3, 0x38415261, 0x2, @discrete={0x1, 0x3}})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) (async)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) (async)
unshare(0x2a020400) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @remote}, 0x0, 0x0, 0x1, 0x1}}, 0x2e) (async)
sendto$inet6(r2, &(0x7f0000000000)="836bb66f", 0x5ac, 0x0, 0x0, 0x0) (async)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000480)={0x4, @pix={0x2, 0x6d24ecd8, 0x2036315a, 0x1, 0x3f, 0x2, 0x8, 0x38, 0x1, 0x4, 0x1, 0x5}}) (async)
add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00', 0x6, r0) (async)
r5 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, r0) (async)
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r7 = add_key$user(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000280)="12a51ad431676682ef8d69dbe023f8c82fb38dbbbcdc5a5ba2902b", 0x1b, 0xfffffffffffffffa) (async)
r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x80004519, 0x0) (async)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r5}, &(0x7f0000000240)=""/63, 0x3f, 0x0)

kernel console output (not intermixed with test programs):

8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  399.009564][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.187'.
[  399.014197][   T10] usb 8-1: config 168 interface 0 has no altsetting 0
[  399.015412][   T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  399.025431][   T10] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  399.029993][   T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  399.034799][   T10] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  399.039779][   T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  399.044749][   T10] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  399.048467][   T10] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  399.054447][   T10] usb 8-1: config 168 interface 0 has no altsetting 0
[  399.058107][ T6677] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6677 comm=syz.0.187
[  399.059597][   T10] usb 8-1: string descriptor 0 read error: -22
[  399.065197][   T10] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  399.068983][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.078326][   T10] adutux 8-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  399.117775][ T6680] kvm_intel: kvm [6679]: vcpu0, guest rIP: 0x9101 Unhandled WRMSR(0x1d9) = 0x1
[  399.216015][ T6695] program syz.2.192 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  399.219112][ T6695] ata1.00: non-matching transfer count (0/2304)
[  399.226369][ T6692] use of bytesused == 0 is deprecated and will be removed in the future,
[  399.230040][ T6692] use the actual size instead.
[  399.261971][ T6697] loop2: detected capacity change from 0 to 7
[  399.267827][ T6697] Dev loop2: unable to read RDB block 7
[  399.270547][ T6697]  loop2: AHDI p1 p2 p3
[  399.272662][ T6697] loop2: partition table partially beyond EOD, truncated
[  399.277028][ T6697] loop2: p1 start 1601398130 is beyond EOD, truncated
[  399.279837][ T6697] loop2: p2 start 1702059890 is beyond EOD, truncated
[  399.328684][   T40] audit: type=1400 audit(1764447095.982:330): avc:  denied  { append } for  pid=6698 comm="syz.2.194" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  399.332872][   T34] usb 8-1: USB disconnect, device number 3
[  399.340003][   T40] audit: type=1400 audit(1764447095.992:331): avc:  denied  { ioctl } for  pid=6698 comm="syz.2.194" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  399.451912][   T40] audit: type=1400 audit(1764447096.112:332): avc:  denied  { name_connect } for  pid=6709 comm="syz.1.198" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  399.541940][   T40] audit: type=1400 audit(1764447096.202:333): avc:  denied  { read } for  pid=6660 comm="syz.3.181" path="socket:[15554]" dev="sockfs" ino=15554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  399.630437][ T6721] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  399.674101][ T6726] IPv6: sit1: Disabled Multicast RS
[  399.676337][ T6726] sit1: entered allmulticast mode
[  399.815955][ T6735] serio: Serial port ptm0
[  399.984595][ T6744] binder: 6743:6744 ioctl 40049421 6 returned -22
[  399.984698][ T6745] binder: 6743:6745 ioctl 40049421 6 returned -22
[  399.992269][ T5993] IPVS: starting estimator thread 0...
[  400.090967][ T6746] IPVS: using max 25 ests per chain, 60000 per kthread
[  400.235930][ T6756] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  400.238262][ T6756] overlayfs: failed to set xattr on upper
[  400.240989][ T6756] overlayfs: ...falling back to redirect_dir=nofollow.
[  400.243361][ T6756] overlayfs: ...falling back to index=off.
[  400.246116][ T6756] overlayfs: ...falling back to uuid=null.
[  400.570852][   T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  400.615003][ T6770] Bluetooth: hci0: invalid len left 7, exp >= 23
[  400.723375][   T34] usb 7-1: config index 0 descriptor too short (expected 65316, got 36)
[  400.726246][   T34] usb 7-1: config 0 has too many interfaces: 255, using maximum allowed: 32
[  400.729073][   T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  400.732688][   T34] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 255
[  400.736109][   T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  400.738943][   T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.743749][   T34] usb 7-1: config 0 descriptor??
[  401.035531][ T6778] Bluetooth: MGMT ver 1.23
[  401.118694][ T6780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=6780 comm=syz.0.217
[  401.140560][ T6780] IPVS: Scheduler module ip_vs_sip not found
[  401.299877][ T6788] netlink: 'syz.2.210': attribute type 10 has an invalid length.
[  401.309825][ T6788] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  401.330586][ T6788] 8021q: adding VLAN 0 to HW filter on device bond1
[  401.346320][ T6788] bond_slave_0: entered promiscuous mode
[  401.348959][ T6788] bond_slave_1: entered promiscuous mode
[  401.351521][ T6788] syz_tun: entered promiscuous mode
[  401.354850][ T6788] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  401.358297][ T6788] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0)
[  401.362246][ T5994] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  401.363364][ T6788] bond1: (slave macvlan2): speed changed to 0 on port 1
[  401.368682][ T6788] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  401.435560][ T6796] o2cb: This node has not been configured.
[  401.438572][ T6796] o2cb: Cluster check failed. Fix errors before retrying.
[  401.441741][ T6796] (syz.0.221,6796,0):user_dlm_register:674 ERROR: status = -22
[  401.444850][ T6796] (syz.0.221,6796,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0"
[  401.947619][ T6805] block nbd1: NBD_DISCONNECT
[  402.056579][ T6813] netlink: 'syz.3.225': attribute type 8 has an invalid length.
[  402.057133][ T6795] syz.0.221 (6795): drop_caches: 2
[  402.061535][ T6813] afs: Unknown parameter 'auocellldyn'
[  402.118816][ T6816] hsr_slave_0: left promiscuous mode
[  402.123998][ T6816] hsr_slave_1: left promiscuous mode
[  402.273554][ T6825] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  402.292448][ T6825] kvm: kvm [6824]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  402.297912][ T6825] kvm: kvm [6824]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  402.337834][ T6833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6833 comm=syz.0.229
[  402.479514][ T6838] netlink: 'syz.3.232': attribute type 8 has an invalid length.
[  402.604744][ T6844] __nla_validate_parse: 12 callbacks suppressed
[  402.604756][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'.
[  402.615355][ T6842] netlink: 'syz.0.233': attribute type 20 has an invalid length.
[  402.888163][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'.
[  403.353909][   T10] usb 7-1: USB disconnect, device number 5
[  403.654073][ T6858] warning: `syz.0.238' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  403.718466][ T6867] virtio-fs: tag </dev/rnullb0> not found
[  403.770456][ T6874] vxfs: unable to read disk superblock at 1
[  403.775091][ T6874] vxfs: unable to read disk superblock at 8
[  403.777663][ T6874] vxfs: can't find superblock.
[  403.842821][ T6881] bond0: entered promiscuous mode
[  403.858108][   T40] kauditd_printk_skb: 38 callbacks suppressed
[  403.858124][   T40] audit: type=1400 audit(1764447100.512:372): avc:  denied  { create } for  pid=6885 comm="syz.0.246" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  403.875536][   T40] audit: type=1400 audit(1764447100.532:373): avc:  denied  { read } for  pid=6885 comm="syz.0.246" name="file0" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  403.885567][   T40] audit: type=1400 audit(1764447100.532:374): avc:  denied  { open } for  pid=6885 comm="syz.0.246" path="/47/file0" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  403.911334][   T40] audit: type=1400 audit(1764447100.562:375): avc:  denied  { unlink } for  pid=6004 comm="syz-executor" name="file0" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  403.942131][   T40] audit: type=1400 audit(1764447100.602:376): avc:  denied  { map } for  pid=6893 comm="syz.0.249" path="socket:[15914]" dev="sockfs" ino=15914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  403.956568][   T40] audit: type=1400 audit(1764447100.602:377): avc:  denied  { read accept } for  pid=6893 comm="syz.0.249" path="socket:[15914]" dev="sockfs" ino=15914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  403.965646][   T40] audit: type=1400 audit(1764447100.622:378): avc:  denied  { create } for  pid=6895 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  403.972243][   T40] audit: type=1400 audit(1764447100.622:379): avc:  denied  { listen } for  pid=6895 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  403.978132][   T40] audit: type=1400 audit(1764447100.622:380): avc:  denied  { accept } for  pid=6895 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  404.015587][   T40] audit: type=1400 audit(1764447100.672:381): avc:  denied  { map } for  pid=6895 comm="syz.2.250" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  404.085123][ T6911] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  404.087307][ T6911] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  404.093483][ T6911] vhci_hcd vhci_hcd.0: Device attached
[  404.339023][ T6925] geneve2: entered promiscuous mode
[  404.341027][   T10] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  404.344753][ T6925] geneve2: entered allmulticast mode
[  404.347274][ T6912] vhci_hcd: connection reset by peer
[  404.349306][   T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  404.351867][   T76] vhci_hcd: stop threads
[  404.353514][   T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  404.355229][   T76] vhci_hcd: release socket
[  404.358062][   T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  404.363536][   T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  404.364464][   T76] vhci_hcd: disconnect device
[  404.421415][ T6928] macsec1: entered promiscuous mode
[  404.423469][ T6928] macsec1: entered allmulticast mode
[  404.631012][ T6944] program syz.3.266 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  404.773660][ T6951] netlink: 'syz.0.269': attribute type 10 has an invalid length.
[  404.776920][ T6951] netlink: 55 bytes leftover after parsing attributes in process `syz.0.269'.
[  405.038794][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'.
[  405.047503][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'.
[  405.088375][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'.
[  405.111170][   T61] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  405.255470][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.279'.
[  405.260914][   T61] usb 7-1: device descriptor read/64, error -71
[  405.419866][ T6996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.282'.
[  405.521192][   T61] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  405.651062][   T61] usb 7-1: device descriptor read/64, error -71
[  405.691113][ T7025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=7025 comm=syz.1.289
[  405.695600][ T7025] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7025 comm=syz.1.289
[  405.771205][   T61] usb usb7-port1: attempt power cycle
[  405.933828][ T7040] syz.0.291: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  405.941447][ T7040] CPU: 3 UID: 0 PID: 7040 Comm: syz.0.291 Not tainted syzkaller #0 PREEMPT(full) 
[  405.941470][ T7040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  405.941479][ T7040] Call Trace:
[  405.941497][ T7040]  <TASK>
[  405.941504][ T7040]  dump_stack_lvl+0x16c/0x1f0
[  405.941538][ T7040]  warn_alloc+0x248/0x3a0
[  405.941562][ T7040]  ? __pfx_warn_alloc+0x10/0x10
[  405.941594][ T7040]  ? xskq_create+0xfb/0x1d0
[  405.941614][ T7040]  ? __vmalloc_node_noprof+0xad/0xf0
[  405.941638][ T7040]  __vmalloc_node_range_noprof+0xfe2/0x1480
[  405.941665][ T7040]  ? xskq_create+0xfb/0x1d0
[  405.941690][ T7040]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  405.941717][ T7040]  ? xskq_create+0xfb/0x1d0
[  405.941737][ T7040]  vmalloc_user_noprof+0x9e/0xe0
[  405.941756][ T7040]  ? xskq_create+0xfb/0x1d0
[  405.941777][ T7040]  xskq_create+0xfb/0x1d0
[  405.941799][ T7040]  xsk_setsockopt+0x792/0x9a0
[  405.941819][ T7040]  ? __pfx_xsk_setsockopt+0x10/0x10
[  405.941838][ T7040]  ? find_held_lock+0x2b/0x80
[  405.941869][ T7040]  ? selinux_socket_setsockopt+0x6a/0x80
[  405.941891][ T7040]  ? __pfx_xsk_setsockopt+0x10/0x10
[  405.941911][ T7040]  do_sock_setsockopt+0xf3/0x1d0
[  405.941939][ T7040]  __sys_setsockopt+0x1a0/0x230
[  405.941963][ T7040]  __x64_sys_setsockopt+0xbd/0x160
[  405.941981][ T7040]  ? do_syscall_64+0x91/0xfa0
[  405.941995][ T7040]  ? lockdep_hardirqs_on+0x7c/0x110
[  405.942013][ T7040]  do_syscall_64+0xcd/0xfa0
[  405.942029][ T7040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.942045][ T7040] RIP: 0033:0x7f9959b8f7c9
[  405.942057][ T7040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  405.942071][ T7040] RSP: 002b:00007f995a9d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  405.942087][ T7040] RAX: ffffffffffffffda RBX: 00007f9959de6180 RCX: 00007f9959b8f7c9
[  405.942096][ T7040] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  405.942105][ T7040] RBP: 00007f9959c13f91 R08: 0000000000000004 R09: 0000000000000000
[  405.942114][ T7040] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[  405.942124][ T7040] R13: 00007f9959de6218 R14: 00007f9959de6180 R15: 00007ffc4c11e188
[  405.942146][ T7040]  </TASK>
[  405.942152][ T7040] Mem-Info:
[  406.030444][ T7040] active_anon:10732 inactive_anon:0 isolated_anon:0
[  406.030444][ T7040]  active_file:2971 inactive_file:50003 isolated_file:0
[  406.030444][ T7040]  unevictable:1768 dirty:703 writeback:0
[  406.030444][ T7040]  slab_reclaimable:9340 slab_unreclaimable:65164
[  406.030444][ T7040]  mapped:24649 shmem:2393 pagetables:1251
[  406.030444][ T7040]  sec_pagetables:309 bounce:0
[  406.030444][ T7040]  kernel_misc_reclaimable:0
[  406.030444][ T7040]  free:466599 free_pcp:16346 free_cma:0
[  406.045196][ T7040] Node 0 active_anon:42928kB inactive_anon:0kB active_file:11884kB inactive_file:199808kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98596kB dirty:2812kB writeback:0kB shmem:6036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12816kB pagetables:4788kB sec_pagetables:1236kB all_unreclaimable? no Balloon:0kB
[  406.055405][ T7040] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  406.065391][ T7040] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  406.076109][ T7040] lowmem_reserve[]: 0 1239 1239 1239 1239
[  406.078248][ T7040] Node 0 DMA32 free:242504kB boost:0kB min:27580kB low:34472kB high:41364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42928kB inactive_anon:0kB active_file:11884kB inactive_file:199808kB unevictable:3536kB writepending:2812kB zspages:0kB present:2080628kB managed:1269452kB mlocked:0kB bounce:0kB free_pcp:56024kB local_pcp:13932kB free_cma:0kB
[  406.091793][ T7040] lowmem_reserve[]: 0 0 0 0 0
[  406.093704][ T7040] Node 1 Normal free:1608532kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:9528kB local_pcp:1280kB free_cma:0kB
[  406.105806][ T7040] lowmem_reserve[]: 0 0 0 0 0
[  406.107769][ T7040] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  406.113324][ T7040] Node 0 DMA32: 4*4kB (UE) 520*8kB (UME) 680*16kB (UME) 496*32kB (UME) 250*64kB (UME) 175*128kB (UME) 28*256kB (UME) 32*512kB (UM) 16*1024kB (UM) 9*2048kB (UM) 28*4096kB (UME) = 242384kB
[  406.120807][ T7040] Node 1 Normal: 3*4kB (UE) 11*8kB (UME) 21*16kB (UME) 51*32kB (UME) 25*64kB (UME) 10*128kB (UME) 2*256kB (E) 5*512kB (ME) 1*1024kB (E) 3*2048kB (UME) 389*4096kB (M) = 1608532kB
[  406.128044][ T7040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  406.130846][   T61] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  406.132100][ T7040] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  406.138094][ T7040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  406.142111][ T7040] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  406.145846][ T7040] 55363 total pagecache pages
[  406.147776][ T7040] 0 pages in swap cache
[  406.149550][ T7040] Free swap  = 124996kB
[  406.151364][ T7040] Total swap = 124996kB
[  406.153065][ T7040] 1048443 pages RAM
[  406.154631][ T7040] 0 pages HighMem/MovableOnly
[  406.156567][ T7040] 281767 pages reserved
[  406.158267][ T7040] 0 pages cma reserved
[  406.161617][   T61] usb 7-1: device descriptor read/8, error -71
[  406.231475][   T53] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  406.370798][   T53] usb 6-1: device descriptor read/64, error -71
[  406.410839][   T61] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  406.433031][   T61] usb 7-1: device descriptor read/8, error -71
[  406.525487][ T7076] binder: binder_mmap: 7075 200000000000-200000003000 bad vm_flags failed -1
[  406.529445][ T7076] binder: 7075:7076 ioctl c018620c 0 returned -14
[  406.551070][   T61] usb usb7-port1: unable to enumerate USB device
[  406.620894][   T53] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  406.767030][   T53] usb 6-1: device descriptor read/64, error -71
[  406.871223][   T53] usb usb6-port1: attempt power cycle
[  406.935049][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.317'.
[  407.000938][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'.
[  407.008845][ T7111] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  407.012228][ T7111] team0: Device ipvlan2 is already an upper device of the team interface
[  407.113337][ T7114] nbd: must specify a size in bytes for the device
[  407.230910][   T53] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  407.252561][   T53] usb 6-1: device descriptor read/8, error -71
[  407.490915][   T53] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  407.521883][   T53] usb 6-1: device descriptor read/8, error -71
[  407.580849][   T61] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  407.631123][   T53] usb usb6-port1: unable to enumerate USB device
[  407.738580][ T7129] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.740827][   T61] usb 8-1: Using ep0 maxpacket: 8
[  407.747937][   T61] usb 8-1: config 0 has no interfaces?
[  407.750327][   T61] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  407.756152][   T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.762769][   T61] usb 8-1: config 0 descriptor??
[  407.827433][ T7129] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.900086][ T7129] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.920015][ T7132] Invalid ELF header magic: != ELF
[  407.980620][ T7129] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.989594][ T7139] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.066833][   T76] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.077698][   T76] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.091564][   T76] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.102902][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  409.303796][   T40] kauditd_printk_skb: 136 callbacks suppressed
[  409.303807][   T40] audit: type=1400 audit(1764447105.962:518): avc:  denied  { setopt } for  pid=7177 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  409.376771][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880537c0800: rx timeout, send abort
[  409.380780][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880537c0800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  409.384026][   T40] audit: type=1400 audit(1764447106.042:519): avc:  denied  { read } for  pid=5324 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  409.394784][   T40] audit: type=1400 audit(1764447106.042:520): avc:  denied  { search } for  pid=5324 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  409.402272][   T40] audit: type=1400 audit(1764447106.042:521): avc:  denied  { search } for  pid=5324 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  409.409208][   T40] audit: type=1400 audit(1764447106.042:522): avc:  denied  { add_name } for  pid=5324 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  409.415846][   T40] audit: type=1400 audit(1764447106.042:523): avc:  denied  { create } for  pid=5324 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  409.422622][   T40] audit: type=1400 audit(1764447106.042:524): avc:  denied  { append open } for  pid=5324 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  409.430115][   T40] audit: type=1400 audit(1764447106.042:525): avc:  denied  { getattr } for  pid=5324 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  409.437698][   T10] vhci_hcd: vhci_device speed not set
[  409.542258][   T40] audit: type=1326 audit(1764447106.202:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.0.336" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9959b8f7c9 code=0x0
[  409.602908][   T40] audit: type=1400 audit(1764447106.262:527): avc:  denied  { create } for  pid=7186 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  409.612175][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'.
[  409.645115][ T7189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  410.291860][   T73] usb 8-1: USB disconnect, device number 4
[  410.517401][ T7219] binder: BINDER_SET_CONTEXT_MGR already set
[  410.519610][ T7219] binder: 7218:7219 ioctl 4018620d 200000000100 returned -16
[  410.525629][ T7219] binder: BINDER_SET_CONTEXT_MGR already set
[  410.527502][ T7219] binder: 7218:7219 ioctl 4018620d 2000000002c0 returned -16
[  410.528813][ T7220] binder: 7218:7220 ioctl 8044610a 200000000240 returned -22
[  410.614911][ T7236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  410.620149][ T7228] netlink: 36 bytes leftover after parsing attributes in process `syz.0.354'.
[  410.649567][ T7232] netlink: 'syz.2.356': attribute type 1 has an invalid length.
[  410.724139][ T7232] 8021q: adding VLAN 0 to HW filter on device bond2
[  410.731795][ T7244] bond2: (slave ip6gretap1): making interface the new active one
[  410.735596][ T7244] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  410.743191][ T7248] netlink: 52 bytes leftover after parsing attributes in process `syz.3.358'.
[  410.805423][ T7251] netlink: 'syz.0.359': attribute type 21 has an invalid length.
[  410.976092][ T7267] netlink: 1 bytes leftover after parsing attributes in process `syz.0.365'.
[  411.080499][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'.
[  411.151650][ T7280] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  411.243407][ T7288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7288 comm=syz.3.371
[  411.289599][ T7293] syz_tun: entered allmulticast mode
[  411.293006][ T7293] syz_tun: left allmulticast mode
[  411.301295][   T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[  411.302238][ T7293] dvmrp1: entered allmulticast mode
[  411.309346][ T7293] dlm: no locking on control device
[  411.550868][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  411.690939][   T10] usb 5-1: device descriptor read/64, error -71
[  411.940930][   T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  412.070988][   T10] usb 5-1: device descriptor read/64, error -71
[  412.181074][   T10] usb usb5-port1: attempt power cycle
[  412.314324][ T7317] netlink: 'syz.2.380': attribute type 21 has an invalid length.
[  412.316789][ T7317] netlink: 156 bytes leftover after parsing attributes in process `syz.2.380'.
[  412.387344][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'.
[  412.410857][ T7324] hsr_slave_1 (unregistering): left promiscuous mode
[  412.521849][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  412.543505][   T10] usb 5-1: device descriptor read/8, error -71
[  412.544308][ T7338] binder: 7337:7338 ioctl c0306201 200000000640 returned -22
[  412.626893][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'.
[  412.685783][ T7343] netlink: 'syz.3.391': attribute type 1 has an invalid length.
[  412.721589][ T7343] netlink: 32 bytes leftover after parsing attributes in process `syz.3.391'.
[  412.735673][ T7343] bond1: (slave bridge2): making interface the new active one
[  412.739521][ T7343] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  412.746016][ T7343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.391'.
[  412.751400][ T7343] 8021q: adding VLAN 0 to HW filter on device bond1
[  412.780915][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  412.801343][   T10] usb 5-1: device descriptor read/8, error -71
[  412.911144][   T10] usb usb5-port1: unable to enumerate USB device
[  412.928115][ T7356] netlink: 'syz.3.396': attribute type 3 has an invalid length.
[  413.078258][ T7358] xt_connbytes: Forcing CT accounting to be enabled
[  413.081590][ T7358] set match dimension is over the limit!
[  413.211298][ T7366] xt_ecn: cannot match TCP bits for non-tcp packets
[  414.315551][   T40] kauditd_printk_skb: 66 callbacks suppressed
[  414.315567][   T40] audit: type=1400 audit(1764447110.972:594): avc:  denied  { bind } for  pid=7406 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  414.329663][   T40] audit: type=1400 audit(1764447110.972:595): avc:  denied  { name_bind } for  pid=7406 comm="syz.0.410" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  414.338755][   T40] audit: type=1400 audit(1764447110.972:596): avc:  denied  { node_bind } for  pid=7406 comm="syz.0.410" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  414.700837][   T61] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  414.742803][   T40] audit: type=1400 audit(1764447111.402:597): avc:  denied  { connect } for  pid=7421 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  414.744568][ T7422] =======================================================
[  414.744568][ T7422] WARNING: The mand mount option has been deprecated and
[  414.744568][ T7422]          and is ignored by this kernel. Remove the mand
[  414.744568][ T7422]          option from the mount to silence this warning.
[  414.744568][ T7422] =======================================================
[  414.749286][   T40] audit: type=1400 audit(1764447111.402:598): avc:  denied  { ioctl } for  pid=7421 comm="syz.1.414" path="socket:[21510]" dev="sockfs" ino=21510 ioctlcmd=0x8b05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  414.774670][   T40] audit: type=1400 audit(1764447111.432:599): avc:  denied  { mount } for  pid=7421 comm="syz.1.414" name="/" dev="9p" ino=77856801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  414.781828][   T40] audit: type=1400 audit(1764447111.432:600): avc:  denied  { write } for  pid=7421 comm="syz.1.414" name="/" dev="9p" ino=77856801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  414.801838][ T7425] __nla_validate_parse: 1 callbacks suppressed
[  414.801850][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'.
[  414.815581][ T7423] netlink: 80 bytes leftover after parsing attributes in process `syz.1.414'.
[  414.819682][ T7422] netlink: 80 bytes leftover after parsing attributes in process `syz.1.414'.
[  414.838004][   T40] audit: type=1400 audit(1764447111.492:601): avc:  denied  { unmount } for  pid=6000 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  414.850966][   T61] usb 5-1: Using ep0 maxpacket: 8
[  414.853923][   T61] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  414.856667][   T61] usb 5-1: config 0 has no interface number 0
[  414.859108][   T61] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  414.863457][   T61] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  414.867123][   T61] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  414.870511][   T61] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  414.874653][   T61] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  414.877480][   T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.881254][   T61] usb 5-1: config 0 descriptor??
[  414.887196][   T61] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  415.089528][ T7433] capability: warning: `syz.1.416' uses 32-bit capabilities (legacy support in use)
[  415.091646][ T6636] usb 5-1: USB disconnect, device number 8
[  415.092910][    C0] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  415.101811][ T6636] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  415.298130][   T40] audit: type=1400 audit(1764447111.952:602): avc:  denied  { ioctl } for  pid=7406 comm="syz.0.410" path="socket:[18426]" dev="sockfs" ino=18426 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  415.308642][   T40] audit: type=1400 audit(1764447111.952:603): avc:  denied  { read } for  pid=7406 comm="syz.0.410" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  415.374541][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'.
[  415.444724][ T7452] sp0: Synchronizing with TNC
[  415.458237][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'.
[  415.612149][ T7456] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  415.720870][   T61] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  415.849626][ T7459] efs: device does not support 512 byte blocks
[  415.851728][ T7459] device does not support 512 byte blocks
[  415.851728][ T7459] 
[  415.854651][ T7461] netlink: 'syz.1.425': attribute type 21 has an invalid length.
[  415.889739][   T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  415.893894][   T61] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  415.901391][   T61] usb 7-1: New USB device found, idVendor=056a, idProduct=00c2, bcdDevice= 0.40
[  415.903169][ T7466] syz_tun: entered allmulticast mode
[  415.904304][   T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.908895][   T61] usb 7-1: Product: syz
[  415.910295][   T61] usb 7-1: Manufacturer: syz
[  415.911888][   T61] usb 7-1: SerialNumber: syz
[  415.917989][ T7452] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  415.933356][ T7466] dvmrp1: entered allmulticast mode
[  415.980216][ T7466] netlink: 'syz.0.427': attribute type 2 has an invalid length.
[  415.985139][ T7466] netlink: 46 bytes leftover after parsing attributes in process `syz.0.427'.
[  416.001650][ T7475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.006033][ T7477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.048076][ T7482] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  416.050455][ T7482] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  416.054038][ T7482] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  416.056323][ T7482] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  416.058594][ T7482] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  416.107317][ T7489] team0: Device gre1 is of different type
[  416.193339][   T61] usbhid 7-1:1.0: can't add hid device: -71
[  416.195390][   T61] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  416.199438][   T61] usb 7-1: USB disconnect, device number 10
[  416.205237][ T7493] 9p: Unknown access argument 18446744073709551615: -34
[  416.351911][ T7499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.439'.
[  416.421790][ T7509] netlink: 'syz.1.443': attribute type 1 has an invalid length.
[  416.434166][ T7509] bond1: entered promiscuous mode
[  416.436010][ T7509] 8021q: adding VLAN 0 to HW filter on device bond1
[  416.440528][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.443'.
[  416.712454][ T7528] comedi comedi0: Cannot bond this driver to itself!
[  416.725261][ T7530] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=58900 sclass=netlink_tcpdiag_socket pid=7530 comm=syz.3.450
[  416.768659][ T7535] bridge: RTM_NEWNEIGH with invalid state 0x4
[  416.794514][ T7537] netlink: 'syz.0.453': attribute type 5 has an invalid length.
[  416.829642][ T7542] kernel read not supported for file /blkio.bfq.io_wait_time_recursive (pid: 7542 comm: syz.2.456)
[  416.868343][ T7544] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  417.230320][ T7558] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  417.232432][ T7558] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  417.236006][ T7558] vhci_hcd vhci_hcd.0: Device attached
[  417.238233][ T7559] vhci_hcd: cannot find a urb of seqnum 13 max seqnum 0
[  417.246121][ T6060] vhci_hcd: stop threads
[  417.248149][ T6060] vhci_hcd: release socket
[  417.250207][ T6060] vhci_hcd: disconnect device
[  417.355511][ T7564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.359512][ T7564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.359822][ T7562] netlink: 152 bytes leftover after parsing attributes in process `syz.1.460'.
[  417.364316][ T7564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.369242][ T7562] PKCS7: Unknown OID: [4] 5.25.43183(bad)
[  417.371392][ T7564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.371992][ T7562] PKCS7: Only support pkcs7_signedData type
[  417.385378][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.388320][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.393901][ T7563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.486190][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'.
[  417.839755][ T7586] libceph: resolve '
[  417.839755][ T7586] -&���f�Y�ǝ�a���2i�
[  417.839755][ T7586] .���?��&�*��&' (ret=-3): failed
[  417.992614][ T7594] kvm: MWAIT instruction emulated as NOP!
[  418.109683][ T7602] sp0: Synchronizing with TNC
[  418.134340][ T7606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=7606 comm=syz.0.473
[  418.224963][ T7615] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  418.276144][ T7631] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  418.466586][ T7663] tmpfs: Cannot change global quota limit on remount
[  418.691030][ T7673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7673 comm=syz.1.496
[  418.744153][ T7680] xt_TPROXY: Can be used only with -p tcp or -p udp
[  418.776600][ T7684] pim6reg: entered allmulticast mode
[  418.826410][ T7690] geneve3: entered promiscuous mode
[  418.935832][ T7704] fuse: Unknown parameter '000000000000000000000030xffffffffffffffff'
[  419.130878][   T73] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  419.302566][   T73] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  419.310807][   T73] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  419.314330][   T73] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  419.317236][   T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.321579][   T40] kauditd_printk_skb: 67 callbacks suppressed
[  419.321588][   T40] audit: type=1400 audit(1764447115.972:671): avc:  denied  { unlink } for  pid=6004 comm="syz-executor" name="file0" dev="tmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  419.333237][ T7701] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  419.335606][ T7701] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  419.340270][   T73] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  419.528641][ T7712] netlink: 'syz.0.509': attribute type 15 has an invalid length.
[  419.541519][   T10] usb 6-1: USB disconnect, device number 13
[  419.692143][   T40] audit: type=1400 audit(1764447116.352:672): avc:  denied  { unmount } for  pid=6004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  419.863451][ T7734] xt_recent: Unsupported userspace flags (000000b2)
[  419.869600][ T7751] tipc: Can't bind to reserved service type 0
[  419.895089][ T7754] __nla_validate_parse: 12 callbacks suppressed
[  419.895099][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'.
[  419.899779][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.519'.
[  419.917060][   T40] audit: type=1400 audit(1764447116.572:673): avc:  denied  { bind } for  pid=7757 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  419.931016][ T7762] netlink: 280 bytes leftover after parsing attributes in process `syz.2.521'.
[  419.997950][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.524'.
[  420.071004][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  420.071025][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  420.161577][   T40] audit: type=1400 audit(1764447116.822:674): avc:  denied  { mount } for  pid=7779 comm="syz.2.528" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  420.405305][ T7793] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.532'.
[  420.453671][   T40] audit: type=1326 audit(1764447117.112:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.1.533" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff86cf8f7c9 code=0x0
[  420.693990][ T7749] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  420.727800][   T40] audit: type=1400 audit(1764447117.382:676): avc:  denied  { create } for  pid=7798 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  420.732982][ T7799] nbd: socks must be embedded in a SOCK_ITEM attr
[  420.734169][   T40] audit: type=1400 audit(1764447117.382:677): avc:  denied  { write } for  pid=7798 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  420.790924][   T73] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  420.940826][   T73] usb 6-1: Using ep0 maxpacket: 8
[  420.943947][   T73] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  420.946706][   T73] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  420.950066][   T73] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  420.954340][   T73] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  420.957961][   T73] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  420.962348][   T73] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  420.963246][   T40] audit: type=1400 audit(1764447117.622:678): avc:  denied  { bind } for  pid=7809 comm="syz.0.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  420.965339][   T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.179473][   T73] usb 6-1: usb_control_msg returned -32
[  421.181711][   T40] audit: type=1400 audit(1764447117.842:679): avc:  denied  { shutdown } for  pid=7796 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  421.182885][   T40] audit: type=1400 audit(1764447117.842:680): avc:  denied  { read } for  pid=7796 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  421.188426][   T73] usbtmc 6-1:16.0: can't read capabilities
[  421.992668][ T7829] netlink: 'syz.0.544': attribute type 10 has an invalid length.
[  421.995233][ T7829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.544'.
[  422.303649][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'.
[  422.544845][ T7856] veth1_to_batadv: entered promiscuous mode
[  422.618816][ T7859] gre0: Master is either lo or non-ether device
[  422.693671][ T7863] cdrom: dropping to single frame dma
[  422.994190][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.557'.
[  423.097619][ T7888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  423.100445][ T7888] IPv6: NLM_F_CREATE should be set when creating new route
[  423.103527][ T7888] IPv6: NLM_F_CREATE should be set when creating new route
[  423.213726][ T7892] delete_channel: no stack
[  423.332921][ T7904] gfs2: Unknown parameter '�barrier����\b5��Pg�QX;'
[  423.374375][ T7906] tmpfs: Unknown parameter 'indo64'
[  423.418215][ T7908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.567'.
[  423.458591][ T7910] netlink: 'syz.2.568': attribute type 1 has an invalid length.
[  423.479381][ T7910] 8021q: adding VLAN 0 to HW filter on device bond3
[  423.485462][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'.
[  423.540907][   T73] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  423.565268][ T7910] veth3: entered promiscuous mode
[  423.692321][   T73] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  423.695128][   T73] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  423.698983][   T73] usb 5-1: config 0 interface 0 has no altsetting 0
[  423.703789][   T73] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  423.706771][   T73] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  423.709464][   T73] usb 5-1: Product: syz
[  423.711322][   T73] usb 5-1: Manufacturer: syz
[  423.712821][   T73] usb 5-1: SerialNumber: syz
[  423.716217][   T73] usb 5-1: config 0 descriptor??
[  423.720040][   T73] hub 5-1:0.0: bad descriptor, ignoring hub
[  423.723081][   T73] hub 5-1:0.0: probe with driver hub failed with error -5
[  423.728570][   T73] usb 5-1: selecting invalid altsetting 0
[  424.080450][ T7924] netlink: 'syz.2.572': attribute type 27 has an invalid length.
[  424.104565][ T7924] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.107282][ T7924] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.115699][ T7924] bond_slave_0: left promiscuous mode
[  424.117983][ T7924] bond_slave_1: left promiscuous mode
[  424.157361][ T7924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  424.163420][ T7924] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  424.214219][ T7924] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  424.272544][ T7926] syz_tun: left promiscuous mode
[  424.280296][ T7926] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.284911][ T7926] 8021q: adding VLAN 0 to HW filter on device team0
[  424.290888][ T7926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  424.297256][ T6811] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  424.301102][ T6811] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  424.304591][ T6811] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  424.309315][ T6811] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  424.442845][   T40] kauditd_printk_skb: 17 callbacks suppressed
[  424.442858][   T40] audit: type=1400 audit(1764447121.102:698): avc:  denied  { accept } for  pid=7928 comm="syz.2.573" lport=36835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  424.641891][ T7900] usb 5-1: reset high-speed USB device number 9 using dummy_hcd
[  424.646084][ T7900] usb 5-1: device reset changed ep0 maxpacket size!
[  424.649792][ T6636] usb 5-1: USB disconnect, device number 9
[  424.790925][ T6636] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  424.940960][ T6636] usb 5-1: Using ep0 maxpacket: 16
[  424.944284][ T6636] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 64
[  424.947703][ T6636] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1023
[  424.951880][ T6636] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  424.956365][ T6636] usb 5-1: config 1 interface 0 has no altsetting 0
[  424.961461][ T6636] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  424.964626][ T6636] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.967058][ T6636] usb 5-1: Product: syz
[  424.968404][ T6636] usb 5-1: Manufacturer: syz
[  424.969901][ T6636] usb 5-1: SerialNumber: syz
[  424.974933][ T7916] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  424.977307][ T7916] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  425.234346][ T7916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.238206][ T7916] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.291669][ T7900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.294736][ T7900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.313000][ T6636] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  425.322374][ T6636] usb 5-1: USB disconnect, device number 10
[  425.592843][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.597045][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.645299][ T7981] __nla_validate_parse: 3 callbacks suppressed
[  425.645310][ T7981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.584'.
[  425.705372][ T7980] IPVS: persistence engine module ip_vs_pe_s not found
[  425.736779][ T7987] program syz.0.585 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  425.745365][ T7987] bond0: Error: Cannot enslave bond to itself.
[  426.188459][   T40] audit: type=1400 audit(1764447122.842:699): avc:  denied  { create } for  pid=7993 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  426.197290][   T40] audit: type=1400 audit(1764447122.842:700): avc:  denied  { ioctl } for  pid=7993 comm="syz.2.587" path="socket:[25651]" dev="sockfs" ino=25651 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  426.224018][   T40] audit: type=1400 audit(1764447122.882:701): avc:  denied  { add_name } for  pid=7996 comm="syz.2.588" name="blkio.bfq.io_wait_time" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  426.231467][   T40] audit: type=1400 audit(1764447122.882:702): avc:  denied  { create } for  pid=7996 comm="syz.2.588" name="blkio.bfq.io_wait_time" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  426.238334][   T40] audit: type=1400 audit(1764447122.882:703): avc:  denied  { associate } for  pid=7996 comm="syz.2.588" name="blkio.bfq.io_wait_time" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  426.241507][ T7997] netfs: Couldn't get user pages (rc=-14)
[  426.246066][   T40] audit: type=1400 audit(1764447122.882:704): avc:  denied  { read append open } for  pid=7996 comm="syz.2.588" path="/137/file0/blkio.bfq.io_wait_time" dev="9p" ino=77857093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  426.255879][   T40] audit: type=1400 audit(1764447122.882:705): avc:  denied  { map } for  pid=7996 comm="syz.2.588" path="/137/file0/blkio.bfq.io_wait_time" dev="9p" ino=77857093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  426.263504][   T40] audit: type=1400 audit(1764447122.882:706): avc:  denied  { execute } for  pid=7996 comm="syz.2.588" path="/137/file0/blkio.bfq.io_wait_time" dev="9p" ino=77857093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  426.271631][   T40] audit: type=1400 audit(1764447122.892:707): avc:  denied  { write } for  pid=7996 comm="syz.2.588" name="blkio.bfq.io_wait_time" dev="9p" ino=77857093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  426.557989][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'.
[  426.569997][ T8006] team0: Port device team_slave_1 removed
[  426.615064][ T8009] tmpfs: Cannot disable swap on remount
[  427.041569][ T7825] usbtmc 6-1:16.0: usb_control_msg returned -110
[  427.057499][ T6636] usb 6-1: USB disconnect, device number 14
[  427.089451][ T8024] sch_tbf: burst 0 is lower than device lo mtu (81) !
[  427.190851][ T1332] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  427.191399][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.597'.
[  427.197085][ T8028] netlink: 'syz.1.597': attribute type 1 has an invalid length.
[  427.200242][ T8028] nbd: error processing sock list
[  427.363649][ T1332] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  427.366534][ T1332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.369164][ T1332] usb 5-1: Product: syz
[  427.370506][ T1332] usb 5-1: Manufacturer: syz
[  427.372096][ T1332] usb 5-1: SerialNumber: syz
[  427.374814][ T1332] usb 5-1: config 0 descriptor??
[  427.580554][ T8022] sctp: [Deprecated]: syz.0.594 (pid 8022) Use of int in maxseg socket option.
[  427.580554][ T8022] Use struct sctp_assoc_value instead
[  427.586414][ T1332] usb 5-1: USB disconnect, device number 11
[  428.037773][ T8045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.602'.
[  428.043790][ T8045] comedi comedi0: dmm32at: I/O port conflict (0x6,16)
[  428.100503][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'.
[  428.104885][ T8047] xt_TPROXY: Can be used only with -p tcp or -p udp
[  428.107940][ T8047] ubi0: attaching mtd0
[  428.111100][ T8047] ubi0: scanning is finished
[  428.112801][ T8047] ubi0: empty MTD device detected
[  428.211658][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'.
[  428.214519][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'.
[  428.244636][ T8047] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  428.247512][ T8047] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  428.249790][ T8047] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  428.252247][ T8047] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  428.254549][ T8047] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  428.256679][ T8047] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  428.259162][ T8047] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3776288977
[  428.262737][ T8047] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  428.266632][ T8055] ubi0: background thread "ubi_bgt0d" started, PID 8055
[  428.354268][ T8068] binder: BINDER_SET_CONTEXT_MGR already set
[  428.356662][ T8068] binder: 8067:8068 ioctl 4018620d 2000000002c0 returned -16
[  428.360348][ T8068] binder_alloc: 8067: binder_alloc_buf, no vma
[  428.518792][ T8076] loop6: detected capacity change from 0 to 524279808
[  428.575275][ T8081] IPVS: set_ctl: invalid protocol: 44 172.20.20.12:21
[  428.591500][ T8076] loop6: detected capacity change from 524279808 to 1
[  428.596847][ T8076] Dev loop6: unable to read RDB block 1
[  428.598976][ T8076]  loop6: unable to read partition table
[  428.601291][ T8076] loop6: partition table beyond EOD, truncated
[  428.603568][ T8076] loop_reread_partitions: partition scan of loop6 (�u0v��	) failed (rc=-5)
[  428.606389][ T8079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8079 comm=syz.0.614
[  428.614250][ T8079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.614'.
[  428.618223][ T8079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.614'.
[  428.703122][ T8094] Driver unsupported XDP return value 0 on prog  (id 66) dev N/A, expect packet loss!
[  429.049361][ T8113] bond1: entered promiscuous mode
[  429.282128][ T8131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8131 comm=syz.0.630
[  429.324014][ T8133] netlink: 'syz.0.631': attribute type 1 has an invalid length.
[  430.236357][   T40] kauditd_printk_skb: 22 callbacks suppressed
[  430.236372][   T40] audit: type=1400 audit(1764447126.892:730): avc:  denied  { connect } for  pid=8149 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  430.247340][   T40] audit: type=1400 audit(1764447126.892:731): avc:  denied  { read write } for  pid=8149 comm="syz.0.639" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  430.255997][   T40] audit: type=1400 audit(1764447126.892:732): avc:  denied  { open } for  pid=8149 comm="syz.0.639" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  430.288438][   T40] audit: type=1400 audit(1764447126.942:733): avc:  denied  { setopt } for  pid=8149 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  430.386980][ T8163] dlm: no locking on control device
[  430.525935][   T40] audit: type=1400 audit(1764447127.182:734): avc:  denied  { read append } for  pid=8173 comm="syz.1.645" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  430.535087][   T40] audit: type=1400 audit(1764447127.182:735): avc:  denied  { open } for  pid=8173 comm="syz.1.645" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  430.572530][ T8172] netlink: 40 bytes leftover after parsing attributes in process `syz.0.644'.
[  430.574225][ T8179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.619399][   T40] audit: type=1400 audit(1764447127.272:736): avc:  denied  { write } for  pid=8180 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  430.863148][ T8202] tipc: Started in network mode
[  430.864911][ T8202] tipc: Node identity 080211000001, cluster identity 4711
[  430.867367][ T8202] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  430.872285][ T8203] tipc: Resetting bearer <eth:syzkaller0>
[  431.125380][   T40] audit: type=1400 audit(1764447127.782:737): avc:  denied  { write } for  pid=8213 comm="syz.0.657" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  431.219528][ T8221] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=8221 comm=syz.0.659
[  431.227102][ T8221] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8221 comm=syz.0.659
[  431.270211][ T8212] netlink: 'syz.1.656': attribute type 1 has an invalid length.
[  431.326224][ T8225] /dev/sg0: Can't lookup blockdev
[  431.652925][   T40] audit: type=1400 audit(1764447128.312:738): avc:  denied  { connect } for  pid=8232 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  431.661719][   T40] audit: type=1400 audit(1764447128.312:739): avc:  denied  { write } for  pid=8232 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  431.873003][ T6059] tipc: Node number set to 134418688
[  431.879730][ T8247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  431.961895][ T8254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  432.511053][ T1332] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  432.688811][ T1332] usb 5-1: unable to get BOS descriptor or descriptor too short
[  432.695021][ T1332] usb 5-1: no configurations
[  432.697046][ T1332] usb 5-1: can't read configurations, error -22
[  432.886581][ T8273] xt_connbytes: Forcing CT accounting to be enabled
[  432.888790][ T8273] set match dimension is over the limit!
[  433.222760][ T8296] netlink: 'syz.0.676': attribute type 32 has an invalid length.
[  433.225429][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'.
[  433.246136][ T8296] bond3: option coupled_control: invalid value (5)
[  433.253438][ T8296] bond3 (unregistering): Released all slaves
[  433.488545][ T8315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.679'.
[  433.510016][ T8319] SELinux:  policydb version 396938548 does not match my version range 15-35
[  433.514257][ T8319] SELinux: failed to load policy
[  433.541315][ T8317] kvm: pic: non byte write
[  433.545096][ T8317] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (335544320 ns) > initial count (40 ns). Using initial count to start timer.
[  433.647191][ T8326] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.682'.
[  433.896510][ T8339] xt_hashlimit: size too large, truncated to 1048576
[  433.954525][ T8342] tipc: Started in network mode
[  433.956683][ T8342] tipc: Node identity 4, cluster identity 4711
[  433.958853][ T8343] No control pipe specified
[  433.959335][ T8342] tipc: Node number set to 4
[  433.978299][ T8343] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  434.038026][ T8352] ip6erspan0: entered promiscuous mode
[  434.349824][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'.
[  434.350013][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'.
[  434.350154][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'.
[  434.350295][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'.
[  434.350436][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'.
[  434.350578][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'.
[  434.350968][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'.
[  434.515104][ T8383] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  434.517892][ T8383] overlayfs: overlapping lowerdir path
[  435.250849][ T1332] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  435.381064][   T40] kauditd_printk_skb: 15 callbacks suppressed
[  435.381080][   T40] audit: type=1400 audit(1764447132.042:755): avc:  denied  { append } for  pid=8398 comm="syz.1.703" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  435.412430][ T1332] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1
[  435.417162][ T1332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64
[  435.424315][ T1332] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  435.428112][ T1332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.431584][ T1332] usb 5-1: Product: syz
[  435.433332][ T1332] usb 5-1: Manufacturer: syz
[  435.435289][ T1332] usb 5-1: SerialNumber: syz
[  435.439328][ T1332] usb 5-1: config 0 descriptor??
[  435.854500][ T1332] usb 5-1: USB disconnect, device number 14
[  436.279708][ T8404] loop5: detected capacity change from 0 to 7
[  436.330961][ T8405] netlink: 'syz.1.705': attribute type 5 has an invalid length.
[  436.410440][ T8404] Dev loop5: unable to read RDB block 7
[  436.412655][ T8404]  loop5: unable to read partition table
[  436.415064][ T8404] loop5: partition table beyond EOD, truncated
[  436.418715][ T8404] loop_reread_partitions: partition scan of loop5 (��) failed (rc=-5)
[  436.555306][ T8418] netlink: 'syz.0.712': attribute type 27 has an invalid length.
[  436.637366][ T8418] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  436.645399][ T8418] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  436.695503][ T8418] bond1: left promiscuous mode
[  436.717332][ T8419] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.720485][ T8419] 8021q: adding VLAN 0 to HW filter on device team0
[  436.724328][ T8419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  436.729833][   T60] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  436.734116][   T60] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  436.739455][   T60] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  436.743793][   T60] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  436.832892][   T40] audit: type=1400 audit(1764447133.492:756): avc:  denied  { write } for  pid=8430 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  436.842632][ T8431] syzkaller1: entered promiscuous mode
[  436.845169][ T8431] syzkaller1: entered allmulticast mode
[  436.850351][ T8431] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  438.721717][ T6005] Bluetooth: hci4: command 0x1003 tx timeout
[  438.721761][ T5994] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  439.260025][ T8447] openvswitch: netlink: IP tunnel dst address not specified
[  439.263601][   T40] audit: type=1400 audit(1764447135.922:757): avc:  denied  { map } for  pid=8446 comm="syz.0.719" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  439.290848][ T8449] __nla_validate_parse: 2 callbacks suppressed
[  439.290859][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'.
[  439.368812][   T40] audit: type=1400 audit(1764447136.022:758): avc:  denied  { mounton } for  pid=8450 comm="syz.1.721" path="/197/file1/file0" dev="9p" ino=77856801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  439.371238][ T8451] netlink: 52 bytes leftover after parsing attributes in process `syz.1.721'.
[  439.379593][   T40] audit: type=1400 audit(1764447136.022:759): avc:  denied  { mount } for  pid=8450 comm="syz.1.721" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  439.770990][ T5994] Bluetooth: hci5: command 0x1003 tx timeout
[  439.771280][ T6002] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  439.774675][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  439.779830][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  439.819498][   T40] audit: type=1400 audit(1764447136.472:760): avc:  denied  { watch } for  pid=8455 comm="syz.3.724" path="/180/file0" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  439.823104][ T8457] netlink: 'syz.3.724': attribute type 1 has an invalid length.
[  439.827415][   T40] audit: type=1400 audit(1764447136.472:761): avc:  denied  { watch_sb } for  pid=8455 comm="syz.3.724" path="/180/file0" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  439.838427][   T40] audit: type=1400 audit(1764447136.472:762): avc:  denied  { watch_sb } for  pid=8455 comm="syz.3.724" path="/180/file0" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  440.018338][ T8461] netlink: 172 bytes leftover after parsing attributes in process `syz.3.725'.
[  440.377762][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.726'.
[  440.381232][ T8464] netlink: 'syz.0.726': attribute type 13 has an invalid length.
[  440.387057][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.726'.
[  440.390010][ T8464] netlink: 'syz.0.726': attribute type 13 has an invalid length.
[  440.472554][   T40] audit: type=1400 audit(1764447137.132:763): avc:  denied  { watch } for  pid=8469 comm="syz.0.728" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  440.496737][ T8470] tmpfs: Unknown parameter 'smackfsroot'
[  442.275080][ T8524] netlink: 'syz.0.732': attribute type 29 has an invalid length.
[  442.278560][ T8524] netlink: 'syz.0.732': attribute type 29 has an invalid length.
[  442.283029][ T8524] No control pipe specified
[  442.285135][ T8524] netlink: 500 bytes leftover after parsing attributes in process `syz.0.732'.
[  442.315471][ T8526] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002
[  442.435802][   T40] audit: type=1400 audit(1764447139.092:764): avc:  denied  { read write } for  pid=8530 comm="syz.0.735" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  442.448629][   T40] audit: type=1400 audit(1764447139.092:765): avc:  denied  { open } for  pid=8530 comm="syz.0.735" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  442.456822][   T40] audit: type=1400 audit(1764447139.092:766): avc:  denied  { ioctl } for  pid=8530 comm="syz.0.735" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  442.480125][ T8533] sp0: Synchronizing with TNC
[  442.524852][ T8532] [U] �
[  442.818437][ T8547] 9pnet_virtio: no channels available for device syz
[  442.848192][ T8549] 9pnet_virtio: no channels available for device syz
[  443.733025][   T40] audit: type=1400 audit(1764447140.392:767): avc:  denied  { execute } for  pid=8556 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  443.750872][   T40] audit: type=1400 audit(1764447140.392:768): avc:  denied  { execute_no_trans } for  pid=8556 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  443.815001][ T8561] overlayfs: failed to resolve './file0': -2
[  443.881393][ T5994] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  443.886587][ T5994] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  443.890485][ T5994] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  443.898238][ T5994] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  443.902831][ T5994] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  443.907564][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'.
[  443.912435][ T6102] bond0: (slave syz_tun): Releasing backup interface
[  443.916356][ T6002] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  443.918844][ T6002] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  443.923251][ T6002] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  443.927142][ T6002] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  443.930773][ T6002] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  443.936713][   T40] audit: type=1400 audit(1764447140.592:769): avc:  denied  { mounton } for  pid=8564 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  444.045551][ T8579] netlink: 'syz.0.750': attribute type 1 has an invalid length.
[  444.071175][ T8564] chnl_net:caif_netlink_parms(): no params data found
[  444.085345][ T8583] (syz.0.751,8583,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  444.085387][   T40] audit: type=1400 audit(1764447140.742:770): avc:  denied  { create } for  pid=8582 comm="syz.0.751" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  444.092720][ T8583] netlink: 84 bytes leftover after parsing attributes in process `syz.0.751'.
[  444.118703][   T40] audit: type=1400 audit(1764447140.772:771): avc:  denied  { ioctl } for  pid=8582 comm="syz.0.751" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  444.128508][   T40] audit: type=1400 audit(1764447140.772:772): avc:  granted  { setsecparam } for  pid=8582 comm="syz.0.751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  444.135030][ T8564] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.138137][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.140233][ T8564] bridge_slave_0: entered allmulticast mode
[  444.142869][ T8564] bridge_slave_0: entered promiscuous mode
[  444.145800][ T8564] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.148032][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.150141][ T8564] bridge_slave_1: entered allmulticast mode
[  444.161185][ T8564] bridge_slave_1: entered promiscuous mode
[  444.182311][ T8564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  444.188710][ T8564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  444.211799][ T8564] team0: Port device team_slave_0 added
[  444.215906][ T8564] team0: Port device team_slave_1 added
[  444.235492][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.238390][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  444.248278][ T8564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.254381][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.257098][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  444.267554][ T8564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  444.300239][ T8564] hsr_slave_0: entered promiscuous mode
[  444.303391][ T8564] hsr_slave_1: entered promiscuous mode
[  444.306028][ T8564] debugfs: 'hsr0' already exists in 'hsr'
[  444.308462][ T8564] Cannot create hsr debugfs directory
[  444.415272][ T8564] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  444.422685][ T8564] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  444.428832][ T8564] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  444.435563][ T8564] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  444.456276][ T8564] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.458738][ T8564] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.461502][ T8564] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.463888][ T8564] bridge0: port 1(bridge_slave_0) entered forwarding state
[  444.497116][ T8564] 8021q: adding VLAN 0 to HW filter on device bond0
[  444.506730][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.511209][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.522823][ T8564] 8021q: adding VLAN 0 to HW filter on device team0
[  444.532071][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.534928][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  444.543575][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.546418][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.665434][ T8564] 8021q: adding VLAN 0 to HW filter on device batadv0
[  444.821303][ T8564] veth0_vlan: entered promiscuous mode
[  444.826836][ T8564] veth1_vlan: entered promiscuous mode
[  444.842999][ T8564] veth0_macvtap: entered promiscuous mode
[  444.846914][ T8564] veth1_macvtap: entered promiscuous mode
[  444.857836][ T8564] batman_adv: batadv0: Interface activated: batadv_slave_0
[  444.864872][ T8564] batman_adv: batadv0: Interface activated: batadv_slave_1
[  444.871402][  T848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  444.874344][  T848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  444.877610][  T848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  444.880816][  T848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.932794][  T848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.935496][  T848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.959254][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.961851][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.283912][ T8623] random: crng reseeded on system resumption
[  445.290190][ T8623] PM: hibernation: Image mismatch: memory size
[  445.290779][ T8624] bridge0: entered allmulticast mode
[  445.293942][ T8623] PM: hibernation: Image mismatch: memory size
[  445.296389][ T8623] PM: hibernation: Image mismatch: memory size
[  445.298521][ T8623] PM: hibernation: Image mismatch: memory size
[  445.302074][ T8623] PM: hibernation: Image mismatch: memory size
[  445.304402][ T8623] PM: hibernation: Image mismatch: memory size
[  445.306567][ T8623] PM: hibernation: Image mismatch: memory size
[  445.308622][ T8623] PM: hibernation: Image mismatch: memory size
[  445.311223][ T8623] PM: hibernation: Image mismatch: memory size
[  445.313253][ T8623] PM: hibernation: Image mismatch: memory size
[  445.315208][ T8623] PM: hibernation: Image mismatch: memory size
[  445.317136][ T8623] PM: hibernation: Image mismatch: memory size
[  445.319207][ T8623] PM: hibernation: Image mismatch: memory size
[  445.322722][ T8623] PM: hibernation: Image mismatch: memory size
[  445.324610][ T8623] PM: hibernation: Image mismatch: memory size
[  445.326555][ T8623] PM: hibernation: Image mismatch: memory size
[  445.328888][ T8623] PM: hibernation: Image mismatch: memory size
[  445.331044][ T8623] PM: hibernation: Image mismatch: memory size
[  445.333049][ T8623] PM: hibernation: Image mismatch: memory size
[  445.334988][ T8623] PM: hibernation: Image mismatch: memory size
[  445.336917][ T8623] PM: hibernation: Image mismatch: memory size
[  445.338878][ T8623] PM: hibernation: Image mismatch: memory size
[  445.341616][ T8623] PM: hibernation: Image mismatch: memory size
[  445.344321][ T8623] PM: hibernation: Image mismatch: memory size
[  445.346915][ T8623] PM: hibernation: Image mismatch: memory size
[  445.349390][ T8623] PM: hibernation: Image mismatch: memory size
[  445.352192][ T8623] PM: hibernation: Image mismatch: memory size
[  445.354836][ T8623] PM: hibernation: Image mismatch: memory size
[  445.357447][ T8623] PM: hibernation: Image mismatch: memory size
[  445.360019][ T8623] PM: hibernation: Image mismatch: memory size
[  445.363058][ T8623] PM: hibernation: Image mismatch: memory size
[  445.365699][ T8623] PM: hibernation: Image mismatch: memory size
[  445.368277][ T8623] PM: hibernation: Image mismatch: memory size
[  445.419351][ T8626] netlink: 32 bytes leftover after parsing attributes in process `syz.4.759'.
[  445.423631][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'.
[  445.543696][ T8637] block nbd0: NBD_DISCONNECT
[  445.546181][   T40] kauditd_printk_skb: 5 callbacks suppressed
[  445.546195][   T40] audit: type=1400 audit(1764447142.202:778): avc:  denied  { write } for  pid=8636 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  445.556034][ T8637] 9pnet_fd: p9_fd_create_unix (8637): problem connecting socket: ./file0: -111
[  445.560822][   T40] audit: type=1400 audit(1764447142.212:779): avc:  denied  { mounton } for  pid=8636 comm="syz.0.762" path="/233/file0" dev="tmpfs" ino=1257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  445.598895][   T40] audit: type=1400 audit(1764447142.252:780): avc:  denied  { accept } for  pid=8641 comm="syz.0.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  446.001100][ T6002] Bluetooth: hci4: command tx timeout
[  446.105816][   T40] audit: type=1400 audit(1764447142.762:781): avc:  denied  { block_suspend } for  pid=8647 comm="syz.4.766" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  446.181669][ T8651] bond3: Removing last ns target with arp_interval on
[  446.208002][   T40] audit: type=1400 audit(1764447142.862:782): avc:  denied  { bind } for  pid=8653 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  446.227361][ T8656] loop9: detected capacity change from 0 to 7
[  446.232297][ T8656] Dev loop9: unable to read RDB block 7
[  446.234632][ T8656]  loop9: unable to read partition table
[  446.237391][ T8656] loop9: partition table beyond EOD, truncated
[  446.241342][ T8656] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  446.260655][ T8657] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22
[  446.289300][   T40] audit: type=1400 audit(1764447142.942:783): avc:  denied  { accept } for  pid=8658 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  446.455437][ T8664] 9pnet_virtio: no channels available for device syz
[  446.511812][ T8666] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[  446.547467][ T8670] binder: 8668:8670 unknown command 0
[  446.548549][ T8669] can0: slcan on ttyS3.
[  446.549845][ T8670] binder: 8668:8670 ioctl c0306201 200000000080 returned -22
[  446.551828][ T8669] autofs4:pid:8669:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374)
[  446.560024][ T8669] autofs4:pid:8669:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374)
[  446.628591][   T40] audit: type=1400 audit(1764447143.282:784): avc:  denied  { read open } for  pid=8675 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  446.638762][   T40] audit: type=1400 audit(1764447143.282:785): avc:  denied  { getattr } for  pid=8675 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  446.650299][ T8669] can0 (unregistered): slcan off ttyS3.
[  446.650660][   T40] audit: type=1400 audit(1764447143.302:786): avc:  denied  { add_name } for  pid=8674 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  446.661557][   T40] audit: type=1400 audit(1764447143.302:787): avc:  denied  { create } for  pid=8674 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  446.681010][ T8678] netlink: 'syz.0.774': attribute type 1 has an invalid length.
[  446.727326][ T8681] efs: device does not support 512 byte blocks
[  446.730115][ T8681] device does not support 512 byte blocks
[  446.730115][ T8681] 
[  446.916776][ T8700] /dev/nullb0: Can't open blockdev
[  446.920136][ T8700] autofs: Bad value for 'fd'
[  446.923123][ T8700] 9pnet_virtio: no channels available for device syz
[  446.985296][ T8702] netlink: 224 bytes leftover after parsing attributes in process `syz.0.780'.
[  446.989103][ T8702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.780'.
[  447.097422][ T8705] syzkaller1: entered promiscuous mode
[  447.099516][ T8705] syzkaller1: entered allmulticast mode
[  448.081200][ T6002] Bluetooth: hci4: command tx timeout
[  449.070226][ T8715] netlink: 'syz.3.785': attribute type 10 has an invalid length.
[  449.221574][ T8710] Set syz1 is full, maxelem 65536 reached
[  449.577832][ T8734] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  449.868050][ T8749] sctp: [Deprecated]: syz.4.793 (pid 8749) Use of int in maxseg socket option.
[  449.868050][ T8749] Use struct sctp_assoc_value instead
[  449.875284][ T8749] x_tables: duplicate underflow at hook 2
[  449.879623][ T8749] ieee802154 phy0 wpan0: encryption failed: -22
[  450.171486][ T6002] Bluetooth: hci4: command tx timeout
[  450.368258][ T8767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=8767 comm=syz.3.801
[  450.646433][ T8778] fuse: Unknown parameter 'gro�h��eR��8K��"{�up_id'
[  450.667857][ T8781] netlink: 56 bytes leftover after parsing attributes in process `syz.0.804'.
[  450.672321][ T8781] netlink: 56 bytes leftover after parsing attributes in process `syz.0.804'.
[  450.715383][   T40] kauditd_printk_skb: 14 callbacks suppressed
[  450.715400][   T40] audit: type=1400 audit(1764447147.372:802): avc:  denied  { create } for  pid=8785 comm="syz.0.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  450.726949][   T40] audit: type=1400 audit(1764447147.372:803): avc:  denied  { ioctl } for  pid=8785 comm="syz.0.806" path="socket:[30192]" dev="sockfs" ino=30192 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  450.736806][   T40] audit: type=1400 audit(1764447147.372:804): avc:  denied  { getopt } for  pid=8785 comm="syz.0.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  450.779020][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.807'.
[  450.783657][   T40] audit: type=1400 audit(1764447147.442:805): avc:  denied  { name_connect } for  pid=8787 comm="syz.4.807" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  450.793230][   T40] audit: type=1400 audit(1764447147.452:806): avc:  denied  { map } for  pid=8787 comm="syz.4.807" path="socket:[30199]" dev="sockfs" ino=30199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  450.801357][   T40] audit: type=1400 audit(1764447147.452:807): avc:  denied  { read } for  pid=8787 comm="syz.4.807" path="socket:[30199]" dev="sockfs" ino=30199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  451.289951][ T8793] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.809'.
[  451.329998][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'.
[  451.339333][ T8795] netlink: 57 bytes leftover after parsing attributes in process `syz.3.810'.
[  451.670025][ T8804] /dev/nullb0: Can't open blockdev
[  451.714837][ T8809] netlink: 'syz.0.814': attribute type 17 has an invalid length.
[  451.825623][ T8815] netlink: 64 bytes leftover after parsing attributes in process `syz.0.815'.
[  452.116548][ T8829] binder: 8825:8829 ioctl 40046205 0 returned -22
[  452.119693][ T8829] binder: 8825:8829 ioctl c0306201 200000000300 returned -11
[  452.251606][ T5994] Bluetooth: hci4: command tx timeout
[  452.336270][   T40] audit: type=1400 audit(1764447148.992:808): avc:  denied  { mount } for  pid=8839 comm="syz.3.821" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  452.340866][ T8840] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  452.370252][   T40] audit: type=1400 audit(1764447149.022:809): avc:  denied  { mounton } for  pid=8839 comm="syz.3.821" path="/newroot/196/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  452.394275][   T40] audit: type=1400 audit(1764447149.052:810): avc:  denied  { unmount } for  pid=5990 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  452.890964][ T5994] Bluetooth: hci0: command 0x1003 tx timeout
[  452.891800][ T6002] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  452.908651][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.827'.
[  452.955825][   T40] audit: type=1400 audit(1764447149.612:811): avc:  denied  { accept } for  pid=8860 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  452.959409][ T8861] netlink: 76 bytes leftover after parsing attributes in process `syz.3.828'.
[  453.309815][ T8881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  453.670855][   T34] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  453.700074][ T8895] tmpfs: Unknown parameter '�'
[  453.816236][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'.
[  453.839185][   T76] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  453.843926][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  453.847622][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  453.850480][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  453.852592][   T34] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  453.857627][   T34] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  453.861384][   T34] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  453.864558][   T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.885070][ T8881] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  453.890485][   T34] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  453.947924][ T5342] udevd[5342]: worker [7708] terminated by signal 33 (Unknown signal 33)
[  453.951990][ T5342] udevd[5342]: worker [7708] failed while handling '/devices/platform/dummy_hcd.0/usb5/5-1/5-1:27.0/sound/card3/controlC3'
[  453.978057][ T8910] misc userio: Invalid payload size
[  454.012297][ T8912] trusted_key: syz.3.844 sent an empty control message without MSG_MORE.
[  454.034027][ T8914] sd 0:0:0:0: PR command failed: 1026
[  454.036396][ T8914] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  454.039312][ T8914] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  454.123762][ T8925] 9pnet_virtio: no channels available for device syz
[  454.597453][ T5994] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  454.602962][ T5994] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  454.607323][ T5994] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  454.608382][ T8939] trusted_key: encrypted_key: insufficient parameters specified
[  454.613374][ T5994] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  454.616870][ T5994] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  454.637209][ T8939] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  454.642398][ T8939] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.730552][ T8936] chnl_net:caif_netlink_parms(): no params data found
[  454.812223][ T8936] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.814541][ T8936] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.816828][ T8936] bridge_slave_0: entered allmulticast mode
[  454.822263][ T8936] bridge_slave_0: entered promiscuous mode
[  454.826373][ T8936] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.828658][ T8936] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.832304][ T8936] bridge_slave_1: entered allmulticast mode
[  454.837475][ T8936] bridge_slave_1: entered promiscuous mode
[  454.861555][ T8936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.867258][ T8936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.902145][ T8936] team0: Port device team_slave_0 added
[  454.906746][ T8936] team0: Port device team_slave_1 added
[  454.973231][   T76] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  454.976570][   T76] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.988351][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.990849][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  454.998867][ T8936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.003781][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.005902][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.013851][ T8936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.036669][ T8936] hsr_slave_0: entered promiscuous mode
[  455.038949][ T8936] hsr_slave_1: entered promiscuous mode
[  455.041016][ T8936] debugfs: 'hsr0' already exists in 'hsr'
[  455.043023][ T8936] Cannot create hsr debugfs directory
[  455.088700][   T76] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  455.092792][   T76] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.189207][   T76] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  455.192757][   T76] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.215806][ T8936] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  455.221944][ T8936] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  455.233941][ T8936] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  455.241957][ T8963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.243124][ T8936] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  455.295353][   T76] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  455.298726][   T76] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.306499][ T8936] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.309533][ T8936] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.312828][ T8936] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.315859][ T8936] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.361282][ T8936] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.374862][ T8936] 8021q: adding VLAN 0 to HW filter on device team0
[  455.379661][  T848] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.383034][  T848] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.394116][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.396422][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.402274][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.404616][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.460576][   T76] bridge_slave_1: left allmulticast mode
[  455.463924][   T76] bridge_slave_1: left promiscuous mode
[  455.468116][   T76] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.473308][   T76] bridge_slave_0: left allmulticast mode
[  455.475129][   T76] bridge_slave_0: left promiscuous mode
[  455.477045][   T76] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.051137][   T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  456.056203][   T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  456.059527][   T76] bond0 (unregistering): Released all slaves
[  456.117721][   T76] bond1 (unregistering): Released all slaves
[  456.184678][   T76] tipc: Disabling bearer <eth:syzkaller0>
[  456.208330][   T76] tipc: Left network mode
[  456.218192][   T76] IPVS: stopping master sync thread 6640 ...
[  456.263189][ T8982] ipt_rpfilter: unknown options
[  456.272717][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  456.272727][   T40] audit: type=1400 audit(1764447152.932:816): avc:  denied  { ioctl } for  pid=8981 comm="syz.4.862" path="socket:[32980]" dev="sockfs" ino=32980 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  456.272903][ T8982] __nla_validate_parse: 5 callbacks suppressed
[  456.272912][ T8982] netlink: 32 bytes leftover after parsing attributes in process `syz.4.862'.
[  456.284279][ T8936] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.361651][   T10] usb 5-1: USB disconnect, device number 15
[  456.462599][ T8997] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.864'.
[  456.480785][   T40] audit: type=1400 audit(1764447153.132:817): avc:  denied  { append } for  pid=8999 comm="syz.0.865" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  456.517213][   T76] hsr_slave_0: left promiscuous mode
[  456.519409][   T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  456.525720][   T76] batman_adv: batadv0: Removing interface: batadv_slave_0
[  456.535785][   T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  456.538114][   T76] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.557994][ T9008] netlink: 48 bytes leftover after parsing attributes in process `syz.0.867'.
[  456.558017][   T76] veth1_macvtap: left promiscuous mode
[  456.563807][   T76] veth0_macvtap: left promiscuous mode
[  456.565606][   T76] veth1_vlan: left promiscuous mode
[  456.568252][   T76] veth0_vlan: left promiscuous mode
[  456.640815][ T6002] Bluetooth: hci0: command tx timeout
[  456.833739][   T76] team0 (unregistering): Port device team_slave_1 removed
[  456.855278][   T76] team0 (unregistering): Port device team_slave_0 removed
[  457.122836][ T9008] netlink: 'syz.0.867': attribute type 12 has an invalid length.
[  457.128779][ T9008] netlink: 'syz.0.867': attribute type 29 has an invalid length.
[  457.131551][ T9008] netlink: 148 bytes leftover after parsing attributes in process `syz.0.867'.
[  457.134413][ T9008] netlink: 'syz.0.867': attribute type 2 has an invalid length.
[  457.137052][ T9008] netlink: 'syz.0.867': attribute type 3 has an invalid length.
[  457.139647][ T9008] netlink: 15 bytes leftover after parsing attributes in process `syz.0.867'.
[  457.212526][ T8936] veth0_vlan: entered promiscuous mode
[  457.218112][ T9015] can: request_module (can-proto-0) failed.
[  457.224491][ T8936] veth1_vlan: entered promiscuous mode
[  457.253231][ T8936] veth0_macvtap: entered promiscuous mode
[  457.257119][ T8936] veth1_macvtap: entered promiscuous mode
[  457.267093][ T8936] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.273733][ T8936] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.285921][ T6811] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.290615][ T6811] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.293908][ T6811] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.305589][ T9024] kvm: kvm [9023]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4
[  457.314964][ T6811] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.367221][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.369781][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.405803][ T6070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.408422][ T6070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.449466][ T9032] netlink: 360 bytes leftover after parsing attributes in process `syz.4.874'.
[  457.556644][   T40] audit: type=1400 audit(1764447154.212:818): avc:  denied  { getopt } for  pid=9046 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  457.589990][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.876'.
[  457.595609][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.876'.
[  457.608413][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.611862][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.679422][ T9043] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  457.687370][ T9043] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.766482][ T9056] netlink: 'syz.5.880': attribute type 1 has an invalid length.
[  457.768819][   T40] audit: type=1400 audit(1764447154.422:819): avc:  denied  { write } for  pid=9063 comm="syz.3.882" name="mouse1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  457.769191][ T6811] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.773292][ T9058] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  457.784820][ T6811] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.787793][ T6811] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.801484][ T6811] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.812956][ T9070] loop5: detected capacity change from 0 to 7
[  457.819910][   T40] audit: type=1400 audit(1764447154.472:820): avc:  denied  { write } for  pid=9063 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  457.864421][  T149] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  457.868958][  T149] Buffer I/O error on dev loop5, logical block 0, async page read
[  457.873067][ T9070] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  457.878201][ T9070] Buffer I/O error on dev loop5, logical block 0, async page read
[  457.883160][ T9070] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  457.886598][ T9070] Buffer I/O error on dev loop5, logical block 0, async page read
[  457.889532][ T9070] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  457.893272][ T9070] Buffer I/O error on dev loop5, logical block 0, async page read
[  457.895965][ T9070] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  457.898959][ T9070] Buffer I/O error on dev loop5, logical block 0, async page read
[  457.906364][ T9070] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  457.912549][ T9070] Buffer I/O error on dev loop5, logical block 0, async page read
[  457.916157][ T9070] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  457.919274][ T9070] Buffer I/O error on dev loop5, logical block 0, async page read
[  457.922619][ T9070] ldm_validate_partition_table(): Disk read failed.
[  457.923228][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'.
[  457.925049][ T9070] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  457.930549][ T9070] Buffer I/O error on dev loop5, logical block 0, async page read
[  457.933173][ T9070] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  457.936097][ T9070] Buffer I/O error on dev loop5, logical block 0, async page read
[  457.938680][ T9070] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  457.942606][ T9070] Buffer I/O error on dev loop5, logical block 0, async page read
[  457.947071][ T9070] Dev loop5: unable to read RDB block 0
[  457.949333][ T9070]  loop5: unable to read partition table
[  457.954198][ T9070] loop5: partition table beyond EOD, truncated
[  457.960533][ T9070] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  458.034461][   T40] audit: type=1400 audit(1764447154.692:821): avc:  denied  { accept } for  pid=9095 comm="syz.5.890" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  458.041853][   T40] audit: type=1400 audit(1764447154.692:822): avc:  denied  { audit_write } for  pid=9095 comm="syz.5.890" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  458.048460][   T40] audit: type=1400 audit(1764447154.692:823): avc:  denied  { ioctl } for  pid=9085 comm="syz.0.888" path="/287/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  458.224942][   T40] audit: type=1800 audit(1764447154.882:824): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.895" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  458.255975][   T40] audit: type=1400 audit(1764447154.912:825): avc:  denied  { ioctl } for  pid=9119 comm="syz.0.897" path="socket:[34102]" dev="sockfs" ino=34102 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  458.352030][ T9130] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  458.720836][ T6002] Bluetooth: hci0: command tx timeout
[  458.802480][ T9135] PM: Enabling pm_trace changes system date and time during resume.
[  458.802480][ T9135] PM: Correct system time has to be restored manually after resume.
[  459.020151][ T9163] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  459.022705][ T9163] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  459.026250][ T9163] vhci_hcd vhci_hcd.0: Device attached
[  459.208175][ T9180] tmpfs: Unknown parameter 'g~.z��^E_uota_in'
[  459.281074][   T61] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  459.284197][   T34] usb 45-1: new high-speed USB device number 2 using vhci_hcd
[  459.430841][   T61] usb 9-1: device descriptor read/64, error -71
[  459.681118][   T61] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  459.830946][   T61] usb 9-1: device descriptor read/64, error -71
[  459.951058][   T61] usb usb9-port1: attempt power cycle
[  460.065811][ T6636] hid_parser_main: 6 callbacks suppressed
[  460.065829][ T6636] hid-generic 0009:0000:0004.0004: unknown main item tag 0x0
[  460.070677][ T6636] hid-generic 0009:0000:0004.0004: unknown main item tag 0x0
[  460.073081][ T6636] hid-generic 0009:0000:0004.0004: unknown main item tag 0x0
[  460.075467][ T6636] hid-generic 0009:0000:0004.0004: unknown main item tag 0x0
[  460.078408][ T6636] hid-generic 0009:0000:0004.0004: unknown main item tag 0x0
[  460.081001][ T6636] hid-generic 0009:0000:0004.0004: unknown main item tag 0x0
[  460.083333][ T6636] hid-generic 0009:0000:0004.0004: unknown main item tag 0x0
[  460.085617][ T6636] hid-generic 0009:0000:0004.0004: unknown main item tag 0x0
[  460.087986][ T6636] hid-generic 0009:0000:0004.0004: unknown main item tag 0x7
[  460.090429][ T6636] hid-generic 0009:0000:0004.0004: unknown main item tag 0x0
[  460.095968][ T6636] hid-generic 0009:0000:0004.0004: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  460.126853][ T9211] fido_id[9211]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  460.293160][ T9225] /dev/nullb0: Can't open blockdev
[  460.299437][ T9225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.926'.
[  460.310859][   T61] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  460.332108][ T9228] team0: Device gtp0 is up. Set it down before adding it as a team port
[  460.345732][   T61] usb 9-1: device descriptor read/8, error -71
[  460.590973][   T61] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  460.612901][   T61] usb 9-1: device descriptor read/8, error -71
[  460.703011][ T9248] fuse: Bad value for 'fd'
[  460.721478][   T61] usb usb9-port1: unable to enumerate USB device
[  460.801139][ T6002] Bluetooth: hci0: command tx timeout
[  461.324875][ T9241] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  461.327500][ T9241] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  461.334397][ T9241] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  461.339629][ T9241] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  461.341826][ T9241] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  461.350024][ T9241] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  461.478195][ T9264] __nla_validate_parse: 1 callbacks suppressed
[  461.478210][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'.
[  461.485425][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'.
[  461.543424][   T40] kauditd_printk_skb: 3 callbacks suppressed
[  461.543438][   T40] audit: type=1400 audit(1764447414.193:829): avc:  denied  { create } for  pid=9263 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  461.580706][ T9264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.934'.
[  461.606799][   T40] audit: type=1400 audit(1764447414.253:830): avc:  denied  { append } for  pid=9271 comm="syz.5.936" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  461.622737][ T9275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  461.655501][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.936'.
[  461.659100][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.936'.
[  461.677421][ T9272] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=768 (1536 ns) > initial count (22 ns). Using initial count to start timer.
[  461.870013][   T40] audit: type=1400 audit(1764447414.513:831): avc:  denied  { map } for  pid=9281 comm="syz.5.939" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  461.878821][   T40] audit: type=1400 audit(1764447414.513:832): avc:  denied  { execute } for  pid=9281 comm="syz.5.939" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  462.015961][   T40] audit: type=1400 audit(1764447414.663:833): avc:  denied  { mounton } for  pid=9286 comm="syz.5.941" path="/19/file0" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  462.018232][ T9288] ubi: mtd0 is already attached to ubi0
[  462.026556][ T9287] ubi: mtd0 is already attached to ubi0
[  462.029912][ T9164] vhci_hcd: connection reset by peer
[  462.033532][ T6811] vhci_hcd: stop threads
[  462.034953][ T6811] vhci_hcd: release socket
[  462.037309][ T6811] vhci_hcd: disconnect device
[  462.051147][ T9287] netlink: 'syz.5.941': attribute type 2 has an invalid length.
[  462.054157][ T9287] netlink: 'syz.5.941': attribute type 1 has an invalid length.
[  462.056557][ T9287] netlink: 'syz.5.941': attribute type 1 has an invalid length.
[  462.093642][ T9293] dvmrp6: entered allmulticast mode
[  462.100964][ T9293] pimreg: entered allmulticast mode
[  462.103867][ T9293] dvmrp6: left allmulticast mode
[  462.162796][ T9303] xt_l2tp: missing protocol rule (udp|l2tpip)
[  462.208020][ T9293] pimreg: left allmulticast mode
[  462.343736][ T9322] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  462.348738][ T9322] bond2 (unregistering): Released all slaves
[  462.359589][   T40] audit: type=1400 audit(1764447415.003:834): avc:  denied  { getopt } for  pid=9324 comm="syz.4.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  462.484657][ T9331] xt_nfacct: accounting object `syz0' does not exist
[  462.642760][ T6002] Bluetooth: hci4: command 0x0c1a tx timeout
[  462.752112][   T53] usb 9-1: new low-speed USB device number 6 using dummy_hcd
[  462.902069][   T53] usb 9-1: Invalid ep0 maxpacket: 64
[  463.032237][   T53] usb 9-1: new low-speed USB device number 7 using dummy_hcd
[  463.090014][ T9340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.955'.
[  463.095052][ T9340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.955'.
[  463.192217][   T53] usb 9-1: Invalid ep0 maxpacket: 64
[  463.194382][   T53] usb usb9-port1: attempt power cycle
[  463.372531][ T6002] Bluetooth: hci0: command 0x0c1a tx timeout
[  463.542526][   T53] usb 9-1: new low-speed USB device number 8 using dummy_hcd
[  463.562872][   T53] usb 9-1: Invalid ep0 maxpacket: 64
[  463.702506][   T53] usb 9-1: new low-speed USB device number 9 using dummy_hcd
[  463.733192][   T53] usb 9-1: Invalid ep0 maxpacket: 64
[  463.737228][   T53] usb usb9-port1: unable to enumerate USB device
[  464.392976][   T34] vhci_hcd: vhci_device speed not set
[  464.723098][ T6002] Bluetooth: hci4: command 0x0c1a tx timeout
[  465.025841][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'.
[  465.058621][ T9366] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  465.431122][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.966'.
[  465.453515][ T6002] Bluetooth: hci0: command 0x0c1a tx timeout
[  465.548846][ T9381] macvlan0: entered promiscuous mode
[  465.551307][ T9381] netlink: 'syz.4.967': attribute type 1 has an invalid length.
[  465.554854][ T9381] netlink: 'syz.4.967': attribute type 2 has an invalid length.
[  465.594091][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.968'.
[  465.714582][ T9397] can0: slcan on ttyS3.
[  465.794820][ T9396] can0 (unregistered): slcan off ttyS3.
[  465.953961][ T9406] xt_cgroup: invalid path, errno=-2
[  465.993966][   T53] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  466.025393][ T9409] netlink: 'syz.0.974': attribute type 83 has an invalid length.
[  466.074835][ T9413] syzkaller0: entered promiscuous mode
[  466.076644][ T9413] syzkaller0: entered allmulticast mode
[  466.128028][ T9417] ptrace attach of "/syz-executor exec"[8564] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                b\x0a��\x0c  !��      \x07
  �����     �      �   �   �       �       ?�j}6ٱ����Ğ� ����Dl����\x0a���9:���$�V�Q���\x09<Y�k^Ο6�\x0d
\x0cPwڀ��,� �l�HJA[v�a�Ou$\x1b\x07.�  -uY:(  �>d�'�Z���bW�zr‘�Q������``V�\x5c4fL\x0a�6\x0az^k`q0ȟ�
[  466.128400][ T9418] ptrace attach of "/syz-executor exec"[8564] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                b\x0a��\x0c  !��      \x07
  �����     �      �   �   �       �       ?�j}6ٱ����Ğ� ����Dl����\x0a���9:���$�V�Q���\x09<Y�k^Ο6�\x0d
\x0cPwڀ��,� �l�HJA[v�a�Ou$\x1b\x07.�  -uY:(  �>d�'�Z���bW�zr‘�Q������``V�\x5c4fL\x0a�6\x0az^k`q0ȟ�
[  466.145047][   T53] usb 10-1: Using ep0 maxpacket: 8
[  466.192574][    C1] vkms_vblank_simulate: vblank timer overrun
[  466.199039][   T53] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  466.203980][   T53] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  466.206881][   T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.209485][   T53] usb 10-1: Product: syz
[  466.210874][   T53] usb 10-1: Manufacturer: syz
[  466.212362][   T53] usb 10-1: SerialNumber: syz
[  466.217928][   T53] usb 10-1: config 0 descriptor??
[  466.264543][ T9423] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  466.265530][ T9424] tmpfs: Unknown parameter 'mp�
Aol'
[  466.272496][ T9423] CIFS mount error: No usable UNC path provided in device string!
[  466.272496][ T9423] 
[  466.272763][ T9423] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  466.331012][ T9426] netlink: 'syz.4.980': attribute type 11 has an invalid length.
[  466.456218][ T9435] fuse: Unknown parameter 'zoup_id'
[  466.458806][   T40] audit: type=1400 audit(1764447419.111:835): avc:  denied  { write } for  pid=9431 comm="syz.4.982" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  466.460602][ T9438] binder: 9434:9438 unknown command 0
[  466.462108][ T9435] binder: 9434:9435 unknown command 0
[  466.462126][ T9435] binder: 9434:9435 ioctl c0306201 200000000480 returned -22
[  466.472208][ T9438] binder: 9434:9438 ioctl c0306201 200000000480 returned -22
[  466.487830][ T5993] usb 10-1: USB disconnect, device number 2
[  466.597706][ T9450] 9p: Unknown Cache mode or invalid value fs
[  466.786210][ T9458] netem: change failed
[  466.815081][ T6002] Bluetooth: hci4: command 0x0c1a tx timeout
[  467.411690][ T9475] FAT-fs (loop4): unable to read boot sector
[  467.421052][ T9475] proc: Unknown parameter './cgroup.net/syz1'
[  467.491668][ T9485] __nla_validate_parse: 3 callbacks suppressed
[  467.491684][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'.
[  467.524530][ T6002] Bluetooth: hci0: command 0x0c1a tx timeout
[  467.611832][ T9499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  467.640963][   T40] audit: type=1400 audit(1764447420.290:836): avc:  denied  { bind } for  pid=9505 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  467.641399][ T9506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1003'.
[  467.648698][   T40] audit: type=1400 audit(1764447420.290:837): avc:  denied  { ioctl } for  pid=9505 comm="syz.4.1003" path="socket:[34757]" dev="sockfs" ino=34757 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  467.659521][ T9506] netem: invalid attributes len -22
[  467.661217][ T9506] netem: change failed
[  467.671137][   T40] audit: type=1400 audit(1764447420.320:838): avc:  denied  { getopt } for  pid=9505 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  467.721497][   T40] audit: type=1400 audit(1764447420.370:839): avc:  denied  { append } for  pid=9517 comm="syz.4.1006" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  467.724165][ T9518] input: syz1 as /devices/virtual/input/input8
[  467.736040][   T40] audit: type=1400 audit(1764447420.390:840): avc:  denied  { read } for  pid=5327 comm="acpid" name="event4" dev="devtmpfs" ino=3036 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  467.739586][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'.
[  467.752758][   T40] audit: type=1400 audit(1764447420.390:841): avc:  denied  { open } for  pid=5327 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3036 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  467.765100][   T40] audit: type=1400 audit(1764447420.390:842): avc:  denied  { ioctl } for  pid=5327 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3036 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  467.804162][ T9524] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1009'.
[  467.922209][   T40] audit: type=1400 audit(1764447420.570:843): avc:  denied  { ioctl } for  pid=9528 comm="syz.0.1010" path="pid:[4026532876]" dev="nsfs" ino=4026532876 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  467.931132][   T40] audit: type=1400 audit(1764447420.580:844): avc:  denied  { setopt } for  pid=9528 comm="syz.0.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  467.965426][   T40] audit: type=1400 audit(1764447420.620:845): avc:  denied  { append } for  pid=9532 comm="syz.0.1012" name="001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  467.975091][ T6636] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  468.035550][   T34] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  468.092835][ T9538] batman_adv: batadv0: Adding interface: vlan2
[  468.095667][ T9538] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.106183][ T9538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  468.110465][ T9538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.110481][ T9538] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  468.112232][ T9538] netlink: 'syz.3.1013': attribute type 83 has an invalid length.
[  468.118693][ T9541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1014'.
[  468.146335][ T6636] usb 9-1: Using ep0 maxpacket: 8
[  468.150352][ T6636] usb 9-1: config 0 has no interfaces?
[  468.152681][ T6636] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  468.156795][ T6636] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.165829][ T6636] usb 9-1: config 0 descriptor??
[  468.187646][ T9546] /dev/nullb0: Can't open blockdev
[  468.194716][   T34] usb 10-1: Using ep0 maxpacket: 8
[  468.197919][   T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  468.202381][   T34] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  468.207273][   T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.215393][   T34] usb 10-1: config 0 descriptor??
[  468.282207][ T9551] xt_hashlimit: max too large, truncated to 1048576
[  468.384363][ T9559] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1018'.
[  468.405849][ T9558] netlink: 'syz.3.1019': attribute type 5 has an invalid length.
[  468.428914][   T34] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  468.578921][ T9518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  468.582004][ T9518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.632053][ T6636] usb 10-1: USB disconnect, device number 3
[  468.658892][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1023'.
[  468.873985][ T9582] : entered promiscuous mode
[  468.918508][ T9585] input: syz0 as /devices/virtual/input/input9
[  469.008928][ T9592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1029'.
[  469.011918][ T9592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1029'.
[  469.231118][ T9605] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  469.275303][ T9606] ==================================================================
[  469.275313][ T9606] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0
[  469.275350][ T9606] Write of size 8 at addr ffffc90005341000 by task syz.4.1034/9606
[  469.275360][ T9606] 
[  469.275365][ T9606] CPU: 2 UID: 0 PID: 9606 Comm: syz.4.1034 Not tainted syzkaller #0 PREEMPT(full) 
[  469.275377][ T9606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  469.275383][ T9606] Call Trace:
[  469.275387][ T9606]  <TASK>
[  469.275391][ T9606]  dump_stack_lvl+0x116/0x1f0
[  469.275407][ T9606]  print_report+0xcd/0x630
[  469.275420][ T9606]  ? __virt_addr_valid+0x81/0x610
[  469.275435][ T9606]  ? sys_fillrect+0x15d4/0x17b0
[  469.275450][ T9606]  kasan_report+0xe0/0x110
[  469.275461][ T9606]  ? sys_fillrect+0x15d4/0x17b0
[  469.275477][ T9606]  sys_fillrect+0x15d4/0x17b0
[  469.275498][ T9606]  ? __pfx_sys_fillrect+0x10/0x10
[  469.275521][ T9606]  drm_fbdev_shmem_defio_fillrect+0x22/0x140
[  469.275544][ T9606]  ? fb_copy_cmap+0x2ad/0x360
[  469.275562][ T9606]  bit_clear_margins+0x2f7/0x4c0
[  469.275591][ T9606]  ? __pfx_bit_clear_margins+0x10/0x10
[  469.275613][ T9606]  ? fb_get_color_depth+0x120/0x250
[  469.275632][ T9606]  fbcon_clear_margins.constprop.0+0x1d3/0x240
[  469.275652][ T9606]  fbcon_switch+0xa01/0x1420
[  469.275672][ T9606]  ? __pfx_fbcon_switch+0x10/0x10
[  469.275694][ T9606]  ? __pfx_bit_cursor+0x10/0x10
[  469.275712][ T9606]  ? fbcon_cursor+0x40c/0x5a0
[  469.275729][ T9606]  ? is_console_locked+0x9/0x20
[  469.275753][ T9606]  ? con_is_visible+0x65/0x150
[  469.275772][ T9606]  redraw_screen+0x2c1/0x760
[  469.275793][ T9606]  ? __pfx_redraw_screen+0x10/0x10
[  469.275813][ T9606]  ? __pfx_stack_trace_save+0x10/0x10
[  469.275839][ T9606]  fbcon_blank+0x652/0xc80
[  469.275857][ T9606]  ? __pfx_fbcon_blank+0x10/0x10
[  469.275880][ T9606]  ? __pfx___might_resched+0x10/0x10
[  469.275902][ T9606]  ? __pfx_fbcon_blank+0x10/0x10
[  469.275919][ T9606]  do_unblank_screen+0x2c9/0x560
[  469.275940][ T9606]  ? __pfx_do_unblank_screen+0x10/0x10
[  469.275961][ T9606]  ? rcu_is_watching+0x12/0xc0
[  469.275982][ T9606]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  469.276004][ T9606]  vt_ioctl+0x1229/0x30a0
[  469.276020][ T9606]  ? lockdep_hardirqs_on+0x7c/0x110
[  469.276037][ T9606]  ? __pfx_vt_ioctl+0x10/0x10
[  469.276056][ T9606]  ? tomoyo_path_number_perm+0x18d/0x580
[  469.276076][ T9606]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  469.276096][ T9606]  ? tty_jobctrl_ioctl+0x152/0xe00
[  469.276115][ T9606]  ? __pfx_vt_ioctl+0x10/0x10
[  469.276131][ T9606]  tty_ioctl+0x661/0x1680
[  469.276154][ T9606]  ? __pfx_tty_ioctl+0x10/0x10
[  469.276176][ T9606]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  469.276199][ T9606]  ? hook_file_ioctl_common+0x145/0x410
[  469.276224][ T9606]  ? selinux_file_ioctl+0x180/0x270
[  469.276240][ T9606]  ? selinux_file_ioctl+0xb4/0x270
[  469.276258][ T9606]  ? __pfx_tty_ioctl+0x10/0x10
[  469.276281][ T9606]  __x64_sys_ioctl+0x18e/0x210
[  469.276304][ T9606]  do_syscall_64+0xcd/0xfa0
[  469.276320][ T9606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.276336][ T9606] RIP: 0033:0x7f25e218f7c9
[  469.276349][ T9606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.276365][ T9606] RSP: 002b:00007f25e03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  469.276381][ T9606] RAX: ffffffffffffffda RBX: 00007f25e23e6090 RCX: 00007f25e218f7c9
[  469.276392][ T9606] RDX: 0000000000000002 RSI: 0000000000004b3a RDI: 0000000000000003
[  469.276402][ T9606] RBP: 00007f25e2213f91 R08: 0000000000000000 R09: 0000000000000000
[  469.276412][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  469.276422][ T9606] R13: 00007f25e23e6128 R14: 00007f25e23e6090 R15: 00007ffc90549888
[  469.276438][ T9606]  </TASK>
[  469.276444][ T9606] 
[  469.276448][ T9606] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90005041000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0
[  469.276481][ T9606] Memory state around the buggy address:
[  469.276489][ T9606]  ffffc90005340f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  469.276501][ T9606]  ffffc90005340f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  469.276512][ T9606] >ffffc90005341000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  469.276521][ T9606]                    ^
[  469.276529][ T9606]  ffffc90005341080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  469.276540][ T9606]  ffffc90005341100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  469.276549][ T9606] ==================================================================
[  469.276558][ T9606] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  469.276567][ T9606] CPU: 2 UID: 0 PID: 9606 Comm: syz.4.1034 Not tainted syzkaller #0 PREEMPT(full) 
[  469.276590][ T9606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  469.276600][ T9606] Call Trace:
[  469.276606][ T9606]  <TASK>
[  469.276611][ T9606]  dump_stack_lvl+0x3d/0x1f0
[  469.276626][ T9606]  vpanic+0x640/0x6f0
[  469.276650][ T9606]  panic+0xca/0xd0
[  469.276676][ T9606]  ? __pfx_panic+0x10/0x10
[  469.276702][ T9606]  ? check_panic_on_warn+0x1f/0xb0
[  469.276718][ T9606]  check_panic_on_warn+0xab/0xb0
[  469.276732][ T9606]  end_report+0x107/0x170
[  469.276746][ T9606]  kasan_report+0xee/0x110
[  469.276758][ T9606]  ? sys_fillrect+0x15d4/0x17b0
[  469.276774][ T9606]  sys_fillrect+0x15d4/0x17b0
[  469.276790][ T9606]  ? __pfx_sys_fillrect+0x10/0x10
[  469.276807][ T9606]  drm_fbdev_shmem_defio_fillrect+0x22/0x140
[  469.276822][ T9606]  ? fb_copy_cmap+0x2ad/0x360
[  469.276833][ T9606]  bit_clear_margins+0x2f7/0x4c0
[  469.276846][ T9606]  ? __pfx_bit_clear_margins+0x10/0x10
[  469.276859][ T9606]  ? fb_get_color_depth+0x120/0x250
[  469.276872][ T9606]  fbcon_clear_margins.constprop.0+0x1d3/0x240
[  469.276883][ T9606]  fbcon_switch+0xa01/0x1420
[  469.276896][ T9606]  ? __pfx_fbcon_switch+0x10/0x10
[  469.276910][ T9606]  ? __pfx_bit_cursor+0x10/0x10
[  469.276922][ T9606]  ? fbcon_cursor+0x40c/0x5a0
[  469.276933][ T9606]  ? is_console_locked+0x9/0x20
[  469.276947][ T9606]  ? con_is_visible+0x65/0x150
[  469.276959][ T9606]  redraw_screen+0x2c1/0x760
[  469.276972][ T9606]  ? __pfx_redraw_screen+0x10/0x10
[  469.276985][ T9606]  ? __pfx_stack_trace_save+0x10/0x10
[  469.277001][ T9606]  fbcon_blank+0x652/0xc80
[  469.277012][ T9606]  ? __pfx_fbcon_blank+0x10/0x10
[  469.277027][ T9606]  ? __pfx___might_resched+0x10/0x10
[  469.277041][ T9606]  ? __pfx_fbcon_blank+0x10/0x10
[  469.277066][ T9606]  do_unblank_screen+0x2c9/0x560
[  469.277081][ T9606]  ? __pfx_do_unblank_screen+0x10/0x10
[  469.277094][ T9606]  ? rcu_is_watching+0x12/0xc0
[  469.277107][ T9606]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  469.277121][ T9606]  vt_ioctl+0x1229/0x30a0
[  469.277131][ T9606]  ? lockdep_hardirqs_on+0x7c/0x110
[  469.277141][ T9606]  ? __pfx_vt_ioctl+0x10/0x10
[  469.277153][ T9606]  ? tomoyo_path_number_perm+0x18d/0x580
[  469.277165][ T9606]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  469.277178][ T9606]  ? tty_jobctrl_ioctl+0x152/0xe00
[  469.277190][ T9606]  ? __pfx_vt_ioctl+0x10/0x10
[  469.277200][ T9606]  tty_ioctl+0x661/0x1680
[  469.277214][ T9606]  ? __pfx_tty_ioctl+0x10/0x10
[  469.277229][ T9606]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  469.277243][ T9606]  ? hook_file_ioctl_common+0x145/0x410
[  469.277258][ T9606]  ? selinux_file_ioctl+0x180/0x270
[  469.277269][ T9606]  ? selinux_file_ioctl+0xb4/0x270
[  469.277281][ T9606]  ? __pfx_tty_ioctl+0x10/0x10
[  469.277295][ T9606]  __x64_sys_ioctl+0x18e/0x210
[  469.277310][ T9606]  do_syscall_64+0xcd/0xfa0
[  469.277319][ T9606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.277332][ T9606] RIP: 0033:0x7f25e218f7c9
[  469.277339][ T9606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.277349][ T9606] RSP: 002b:00007f25e03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  469.277360][ T9606] RAX: ffffffffffffffda RBX: 00007f25e23e6090 RCX: 00007f25e218f7c9
[  469.277366][ T9606] RDX: 0000000000000002 RSI: 0000000000004b3a RDI: 0000000000000003
[  469.277372][ T9606] RBP: 00007f25e2213f91 R08: 0000000000000000 R09: 0000000000000000
[  469.277379][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  469.277385][ T9606] R13: 00007f25e23e6128 R14: 00007f25e23e6090 R15: 00007ffc90549888
[  469.277395][ T9606]  </TASK>
[  469.278080][ T9606] Kernel Offset: disabled

VM DIAGNOSIS:
20:12:46  Registers:
info registers vcpu 0

CPU#0
RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81615943 RDX=ffffffff8e097a00
RSI=ffffffff8161598b RDI=ffffffff93a6cfe0 RBP=ffff88806a420000 RSP=ffffc90000007fd0
R8 =0000000000000001 R9 =fffffbfff274d9fc R10=ffffffff93a6cfe7 R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8161598c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6a05000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f27bde68d58 CR3=000000005ce6e000 CR4=00350ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9959c15050
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9959c1505d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9959c15057
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9959c1506b
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9959c150f1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9959c151cf
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 be5a0e6bb3d19495 848db91156883f8d e421a79763c071a5 e668305c7d97042c
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7260faf6339d1cf1 b6d287028b99e61c 04a48f6215739b9d bfec000700080006
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b68c27464f97cdc1 69f9a2745d3fd4dd 3e2f54681293526f 159b8f075b39c9dc
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e885117b5b77c151 bbe79796ace62b7e 67231b496530defd d23e1bfbf4f3e301
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bbb68c27464f97cd c169f9a2745d3fd4 dd3e2f5468129352 6f159b8f075b39c9
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc7260faf6339d1c f1b6d287028b99e6 1c04a48f6215739b 9dbfec5eafaeb685
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f7be5a0e6bb3d194 95848db91156883f 8de421a79763c071 a5e668305c7d9704
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff81615943 RDX=ffff888048160000
RSI=ffffffff8161598b RDI=ffffffff93a6cfe0 RBP=ffff88806a520000 RSP=ffffc900006a0fd0
R8 =0000000000000001 R9 =fffffbfff274d9fc R10=ffffffff93a6cfe7 R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8161598c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6b05000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f27bde67f98 CR3=000000004d578000 CR4=00350ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4c11e510 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9959c15050
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9959c1505d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9959c15057
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9959c1506b
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9959c150f1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9959c151cf
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85296a55 RDI=ffffffff9addb7c0 RBP=ffffffff9addb780 RSP=ffffc9000c4e7000
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030396366666666
R12=0000000000000000 R13=0000000000000030 R14=ffffffff9addb780 R15=ffffffff852969f0
RIP=ffffffff85296a7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 00007f25e03f66c0 ffffffff 00c00000
GS =0000 ffff8880d6c05000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ffda83b3ec0 CR3=000000004aa64000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560f21dd5a20 0000560f21dd5a20
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560f21de3e00
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc063f1b20
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ff00000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00000000ff000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f68737972646605 1a1a10677e797379
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7264662a4159434e 754f46452a415943
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81615943 RDX=ffff88801deb0000
RSI=ffffffff8161598b RDI=ffffffff93a6cfe0 RBP=ffff88806a720000 RSP=ffffc900006f8fd0
R8 =0000000000000001 R9 =fffffbfff274d9fc R10=ffffffff93a6cfe7 R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8161598c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6d05000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f27bde88f98 CR3=000000004511f000 CR4=00350ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda83b4de0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27bd015050
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27bd01505d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27bd015057
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27bd01506b
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27bd0150f1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27bd0151cf
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000480
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 0000000000000480
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000