last executing test programs:

1m17.580186299s ago: executing program 1 (id=79):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x16, 0x0, &(0x7f00007d0000))
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='mand\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0xb)

1m17.5028932s ago: executing program 1 (id=81):
syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffffffffa, 0x82242) (async)
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffffffffa, 0x82242)
read$usbmon(r0, 0x0, 0x0)
unshare(0x20020000)
syz_io_uring_setup(0x230, &(0x7f0000000080)={0x0, 0x247, 0x10000, 0x2, 0x100}, &(0x7f0000000040), &(0x7f00000002c0)) (async)
r1 = syz_io_uring_setup(0x230, &(0x7f0000000080)={0x0, 0x247, 0x10000, 0x2, 0x100}, &(0x7f0000000040), &(0x7f00000002c0))
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76)
syz_io_uring_setup(0x1026e6, &(0x7f0000000240)={0x0, 0x902e, 0x8, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)) (async)
r2 = syz_io_uring_setup(0x1026e6, &(0x7f0000000240)={0x0, 0x902e, 0x8, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0x9) (async)
ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0x9)
ppoll(&(0x7f0000000a40)=[{r6}], 0x1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r8 = io_uring_setup(0x6ba2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x81})
socket$rds(0x15, 0x5, 0x0) (async)
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0x2b, 0xa, 0x0, "32cfd5010000aa022c1e00f4bf40074000000400000000b00400d800", 0x30385056})
sendmsg$rds(r9, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040801}, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0) (async)
close_range(r8, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000005c0)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000005c0)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r12 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x420, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xe}, {0xfff3}, {0xffe0, 0xa}}, ["", "", "", ""]}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1446}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_ctinfo={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0\x00', 0x1})
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x40240, 0x0) (async)
r14 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x40240, 0x0)
ioctl$TCSBRKP(r14, 0x5425, 0x9)
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0)

1m17.313324908s ago: executing program 1 (id=84):
openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80000, 0x0) (async)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80000, 0x0)
ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000001600))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r2, 0x26}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="320d3b22ab2b0200040012804d72e29a00000000000000000000000000000000000074c6cd2324fdf3c73c814dc491c067b0127f9c3b680fed973c7890"], 0x18}, 0x1, 0x0, 0x0, 0x2004809c}, 0x20000000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)

1m16.953355605s ago: executing program 1 (id=89):
socket$inet6(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x218040, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x124800, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=@random={'security.', 'sysfs\x00'}, &(0x7f0000000280)=""/228, 0xe4)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)

1m16.361495979s ago: executing program 1 (id=96):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140))
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510001c0a010102ac1414aa1101907800"/42], 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x4e20, 0x1, 'sh\x00', 0x2c, 0x1, 0x7a}, 0x2c)
getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)
ioctl$VT_DISALLOCATE(r0, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async)
socket$packet(0x11, 0x2, 0x300) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) (async)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) (async)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510001c0a010102ac1414aa1101907800"/42], 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast2, 0x4e20, 0x1, 'sh\x00', 0x2c, 0x1, 0x7a}, 0x2c) (async)
getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) (async)
ioctl$VT_DISALLOCATE(r0, 0x5608) (async)

1m16.063118448s ago: executing program 1 (id=102):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
socket$netlink(0x10, 0x3, 0xf)
write$evdev(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880)
pread64(r1, &(0x7f0000000800)=""/82, 0x52, 0x8f6)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x1, 0x2, 0x5, 0x0, 0x0, 0x8})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)
fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000000), &(0x7f0000000040)={'L+', 0x1}, 0x16, 0x2)

1m15.980894187s ago: executing program 32 (id=102):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
socket$netlink(0x10, 0x3, 0xf)
write$evdev(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880)
pread64(r1, &(0x7f0000000800)=""/82, 0x52, 0x8f6)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x1, 0x2, 0x5, 0x0, 0x0, 0x8})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)
fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000000), &(0x7f0000000040)={'L+', 0x1}, 0x16, 0x2)

2.332649074s ago: executing program 3 (id=1115):
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='projid_map\x00')
ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000040)={[{0x65c8, 0x9, 0x1, 0x9, 0x5, 0x1, 0x0, 0x8, 0xb, 0x0, 0x4, 0x4, 0x3}, {0x4205, 0x6, 0x8, 0x0, 0x7, 0x7, 0xff, 0x5, 0x3, 0xb8, 0x9, 0x86, 0x6}, {0x9, 0xe, 0xc1, 0x3, 0xa, 0xe, 0x6, 0x4, 0x6, 0xf, 0xc, 0x9, 0x80000001}]})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x228, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "1ae3b6a9498af44468"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_REALM={0x94, 0xfa, "7ad4e4cf8421e3f5843665c940cceb476b4d6aeb21abb87eb0814fc6d87c9091c48d2fbf010226ab7a7e08262cd0106b60a94313de87bf8ea51de427768570f8461508305fb93fc9cc8d336ade66dba9816bb2f5c6c8429bc8e5ccd253b67c83d7edc929da9c128a7d6533b79464fcf130de088b243fc6f1f42d2087a215c8456a42aa06403dcd134ec1add1e14296d6"}, @NL80211_ATTR_FILS_ERP_RRK={0x6e, 0xfc, "4e47f63ab1be0c70b5c0186477c52e7e9513b92edd2c16bd3d487ff4f45931706a5dd8d32c9b1e90eed67dcf957ae90e03bc4eee407fdb16341bcd0f06309fc3c6e519507e1564909448ff3452384a58b35b9bf142cc22a859669636067aeb89f09bde187fefd5d7da0f"}, @NL80211_ATTR_FILS_ERP_REALM={0xcc, 0xfa, "49631df075bbe5d3bfb602d4a20796975f99988e2839164ac745bb9a4306ad6e48028b4f2c6f9ee643a0002af387f6f0a4b655d189e7de92260ef502ca7c08d061612195b3548c962345f51e440f136d1e06c544a30fa40560ffc52a0f89e02e0e30a294de09b278bb012aeaf7254f304cb4bbc9621ed5dbde608ec1a2b5983e34acaf2e7a22148c440baf8102576b226efa759ab2054ea1fc24b76e9e2fb2d393a7a752c46c53c1681219fa7afbf4413b7a6dc5aef5279477f2a0e58d9360d507a908b88b840c6c"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "29bd7e1624569394cc4fdcbb"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "51156f13226c0225a25b6d123b6c1244"}]]}, 0x228}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x40000)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x200801, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40010001}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb, 0x9}}}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x1702}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000)
pipe(&(0x7f00000006c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40020002}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r1, 0x220, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6d}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r8, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x400, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000011}, 0x24004011)
ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000980))
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r7, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, r10, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="20ed37ed344b"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e597ce7b1d20"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="30f96beeece8"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e7506b2b1fa9"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000800)
connect$pppoe(r6, &(0x7f0000000b40)={0x18, 0x0, {0x0, @local, 'veth1_to_batadv\x00'}}, 0x1e)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000b80)={'veth1_to_batadv\x00', <r11=>0x0})
syz_80211_inject_frame(&(0x7f0000000bc0), &(0x7f0000000c00)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @random="1d8ced1c3250", {0x0, 0x8}, "", @value={0x3, 0x0, 0x2}}, @a_msdu=[{@broadcast, @device_b, 0xf, "9339e2987641bed028dc40c4d7034a"}, {@broadcast, @device_b, 0x5d, "60c9d4f030e861acef4b73d1ae3965788ee63ef59c60bce29c0a7f41f4d93f6aff19f27e2a39489cfc5aab82366e254fdfc3f1cc7561ea7ea5376282abd0652c36d157a10ee7ddce5e35378b3fbb5424eec97c8ea477ba53c71a702605"}, {@broadcast, @broadcast, 0xc1, "f06971eb3027156163f5d4d09d3be4afd0e8539d9b6cdee9e55b87c3a8ab5553e081094e2da9730093be49910e9704981b8f32e71275541303eb321a90b665548cfd68ae78d4ec635534154cbb0ba07a2e72d34ee1aa95c9836eab8db4481c004734c64b9bf541cb9db4e29230b899aea7efcb6de0f64e917efae8b1e2e9ab4e5f8036a0a68a216dec06ecadd9dba1361b8f864e2b055440b33e360eeafe06788270a67679d3b66444c0cbfca306e3ab75d9fc149345abf743f3c32ea2ba64351b"}, {@device_b, @device_a, 0xaa, "511af362c9bfa3ba1465e0b84d5aebf91c27125418029836f87fb534607b86fb6e11b43a1289a1d5562edaca27f3a36352a1f58aa9783f698e6227857eac4a307e1967c4e0e4a2ffe5893b504ccbe69dd718dfa63dc6232a2ba1621b4c0b6b61d9d667ea0648beb1ddf7cb33f19687e2e7f25998613a67b21a74d5e80ee723d7426ebf01f0d4857b2e6ddb4b3b224fffe4000b0c84b288e4b033f95db0229a111d316b2b73dc85691d57"}, {@broadcast, @device_a, 0xd5, "cf2c4efce9ad9a2a5ad9b7d89aa68ad2db1279a4474f09e156ecef424dd3b13500f47e28ec5dd49b1a935b57ae1324fb2102ad767e68b011de53303d9e5cc0674315972c5a56dc71384239d80a2ecfd111fc669bd47c9c429a5723ab53a835574cfa8d727dcf7728870eab94d7767e2dd9d5aa37a68efb9b0e78b750dd10a1405dffb833b754abe6029f2a1e0bb289a092afc573a3c30ff0ce4fcd58c3e63a8ee73bfe5a5b9d204fa218d807658a9567e2f7829b1515621603ed1d6dd77d378a11983b5913ba6c75f5833598da1acf65e6171f7e99"}]}, 0x312)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000001000)={&(0x7f0000000f40), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, r10, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc, 0x2c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004800}, 0xc0080)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001040), 0x8a00, 0x0)
r12 = syz_genetlink_get_family_id$smc(&(0x7f00000010c0), r6)
sendmsg$SMC_PNETID_GET(r0, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x48, r12, 0x10, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}}, 0x18010)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000001200)={{0x1, 0x3, 0x0, 0x3, 0x4}, 0x7, 0xffffffa1, 'id0\x00', 'timer0\x00', 0x0, 0xc000000000000, 0x0, 0x0, 0x1})
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000001440)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x1, 0x4e23, 0x7, 0xa, 0x0, 0x80, 0x73, r11}, {0xffffffffffffcf9d, 0xfffffffffffffffa, 0x5, 0x3, 0x200, 0x7, 0xfffffffffffffff7, 0x3}, {0x7fff, 0xff, 0x4, 0xfff}, 0x81, 0x6e6bbf, 0x0, 0x0, 0x2, 0x2}, {{@in6=@loopback, 0x4d3, 0x32}, 0x8, @in=@multicast2, 0x34ff, 0x0, 0x0, 0xff, 0x3, 0x3, 0xffffff7f}}, 0xe8)

1.821978557s ago: executing program 3 (id=1128):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000001780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r1, 0x0, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000011)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x28, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
read$ptp(r6, 0x0, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
r7 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "20fd7d26e14afcfd83e866371afdfeb3fc2dd13495998a182bc9772209221dee5d75f89b366f4468decb7fa38d01a95bd77b49a3fce7867ced7e199470d6672c", 0x14}, 0x48, 0xfffffffffffffffd)
add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000600)="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", 0x1000, r7)
syz_clone(0x320200, &(0x7f00000004c0)="3e580c23ac510172f227b5220bad74348fe8be47dc2b1e1c88b93d2e814e5e5a6fb5e08e94d10b634a645136a04bd04e121f5ef8942d902bda6a88ec46a45db2a5490e955e589057e19380492db6a7bed40d632bf967a14500dbc81a3911a2406d9371854135a0d03f139724af5126e8a286336934b3c6efdea3f7e3d67218a852a6a207111a6d0f0d9edec37860fb35320221a15cab9ff873ceb8cf3148cb00cdaef4519ec08febc7dc7a6f4a3d6d360be9dbab2779f9dcd2a2", 0xba, &(0x7f00000002c0), &(0x7f0000000400), &(0x7f0000001600)="04182b3282f46c070b73d959d5b32f26d6eae77479b18885088ba6726de17929cf01caa32bb17310be632ec316e06dc231f2f8b0910e8181fdb7ddbd139dfc57307f5ff72217ec55570a8d62e836aae0025a4ee3f3197f8bbeda84d2ff724f36a7fd60da2ccb93e6c93486305fd5fd77f9a76ca61b8d4f2b9c3cd17f63ae95666cd74cf3bcef4b60e7c1574786521b595a0c18169679d782f2db1f5f260148777f3ff9f3d8c5579063c7734f16a4a18d0aed58816099c2af605cb46dbe5f62ab32b6f7e91e29932c0f6c467fa5ba8264310661f34b22cb5612c8f094c5848bdd440680990cf9d38333d48abb4c")
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)
ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x147bfe28ad63f17, 0x14})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x20000000)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, r10, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0xc010)
ioctl$CDROMVOLCTRL(r3, 0x31e, &(0x7f0000000080)={0xe1, 0x6, 0xfe, 0x8})

1.451981414s ago: executing program 4 (id=1136):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002000010027bd7200fddbdf250a002040003a65224e2214000200fe8000000000000000000000000000175a86744b14eeabc7b7d01bb7df7d48ad039d70032d3d5be7478ef741bee1e0b74689fbc281386352681e0bab63930585d1d74d0e6a3bf579005363b32d6fafcf1ef0ffbfdf4665da6f8c83a740b7debc189ca311102bb2ed5e9757fabdbfa271d05a01c2390158c3272a443c4e9c96"], 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async)
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4603248095028000000000000003203e0001010000940200000000000040000000000000004902000000000000f6ffffff00003800010001007f0007000300000004000000d6070000000000000a000000000000000101000000000000060000000000000007000023000000007fffffffffffffff"], 0x78) (async)
close(r0) (async)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
accept4$unix(r3, 0x0, 0x0, 0x0) (async)
execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x1000)

1.382791638s ago: executing program 4 (id=1137):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x1, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0xffffffff, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x2, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0xffffffff, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x6, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00041, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x9, 0x5, 0xb, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0xfb2, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x200005, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x401, 0xff, 0x5, 0x7fffffff, 0x17, 0xe, 0x9, 0x81, 0x7fff, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0xa, 0x80000001, 0x7777, 0x1, 0x6, 0x100, 0xd8cb, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0x7, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0xd, 0xbe24]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0xc, &(0x7f0000000040), 0x4)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x37, 0x3, "07682c020b7b37f27f5101007f51010049f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0xc, 0x9, 0x4, 0x2, @loopback, @mcast2, 0x80, 0x8000, 0x0, 0x10}})

1.134727393s ago: executing program 4 (id=1140):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r3, &(0x7f00000093c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000400)={0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@gettfilter={0x5c, 0x2e, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x4, 0xb}, {0x3, 0x3}, {0xfff1, 0xb}}, [{0x8, 0xb, 0x100008}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}]}, 0x5c}}, 0x48040)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0x400, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x30, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3e}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x75}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xeb}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}]}]}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @private=0xa010102}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

1.051961041s ago: executing program 2 (id=1141):
r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000140)=[{0x9, 0x0, 0x70, &(0x7f00000007c0)="2b16b125a97cf66489d236c6ea7aaf2dee51ce7eb4392730b92c0c2375827bff5811f9d9d357288c3bc9a56145905511920e3ff475c4cd0608b2e08137a5fc29054f631b6a35e6bdd755ee87a7503043ed4d02746d0860128cd9706c2e605e5030c2481b1a576129050790f37f99f2be"}], 0x1})

1.05156787s ago: executing program 2 (id=1142):
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0x9, 0x3, 0x8, 0xd, 0x4, 0xe, 0xd214})

981.77524ms ago: executing program 2 (id=1143):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000680)={0x0, 0x1000}, &(0x7f00000006c0)=0x8)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

930.469908ms ago: executing program 3 (id=1145):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
keyctl$session_to_parent(0x12)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, 0xffffffffffffffff, 0x852ac000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x6, 0x5635}]})
recvmsg(0xffffffffffffffff, 0x0, 0x12020)
setreuid(0xee00, 0x0)
keyctl$session_to_parent(0x12)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB="02000000", @ANYRESDEC=r0, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

810.169776ms ago: executing program 2 (id=1148):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', <r3=>0x0})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
fcntl$lock(r4, 0x7, &(0x7f00000010c0)={0x0, 0x2, 0x1, 0x1fe})
preadv(r4, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r5, 0x0, 0x1}, 0x18)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0c47fb312278a29b0000", @ANYRES32=r3, @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x4048040}, 0x24048080)
ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f00000000c0)={0x3, 0x7, 0x3de8, 0x4, 0x4, 0x10, 0x22, "8a403da2890500030500", "a8000b8431db82d3e65de242dd0615724d00"})
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1) (async)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) (async)
fcntl$lock(r4, 0x7, &(0x7f00000010c0)={0x0, 0x2, 0x1, 0x1fe}) (async)
preadv(r4, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r5, 0x0, 0x1}, 0x18) (async)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0c47fb312278a29b0000", @ANYRES32=r3, @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x4048040}, 0x24048080) (async)
ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f00000000c0)={0x3, 0x7, 0x3de8, 0x4, 0x4, 0x10, 0x22, "8a403da2890500030500", "a8000b8431db82d3e65de242dd0615724d00"}) (async)

762.467065ms ago: executing program 2 (id=1149):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfffffffffffffcf6, 0x80800})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={<r3=>r1, 0x0, 0x4800000000000000, 0x4})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40086602, &(0x7f0000000000))
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="6daf0f04e67b4f2e9f733bf05ad6ad605407b53146fd9651c9cfd6fd53e8b8c71a25f8449b9d521a5c64c692f34afbd4fee23ef0e260269c2f10d2edf0328a2b6a5b42126048a7845a245963f6f7ac7a115e7fc405f4363ab5dddc8ef680b88da1c6d842909cbd41f4753fb7d0eb8ef2c9", 0x71)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0xfffffffffffffffd})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

761.652904ms ago: executing program 0 (id=1150):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r3=>0x0}) (async)
r4 = socket$kcm(0x2d, 0x2, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async)
connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x0, 0x7ffe}, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0)
write$uinput_user_dev(r10, &(0x7f0000000900)={'syz1\x00', {0x3, 0x4, 0x4, 0x3}, 0x3, [0x0, 0x10001, 0x0, 0x40, 0xfffffffd, 0x0, 0x0, 0xc, 0x5, 0x7, 0x80000001, 0x1, 0x1, 0x5, 0x8, 0x5, 0x6, 0xfffffff7, 0x1, 0x1, 0x9, 0x2, 0xb70c, 0x1, 0x4, 0x6, 0x8a6, 0x0, 0x5, 0x7, 0x800, 0x400, 0x5, 0x9, 0xa1, 0x42e, 0x100, 0x800, 0xffff, 0x401, 0xffffffff, 0x7, 0x7, 0x4, 0xfffffffc, 0xc0000000, 0xe2b, 0xc, 0x7, 0x7, 0x3, 0x1ff, 0x4, 0xffffffff, 0x6, 0xa15, 0x0, 0x1, 0x4, 0x5, 0xe, 0x8, 0x5, 0x3888], [0x4, 0xfffff3b4, 0x1, 0x8, 0x401, 0x0, 0x9, 0x0, 0x7fff, 0x7ff, 0x9, 0xadee, 0x80000000, 0x0, 0x1, 0x662, 0x81aa, 0x8, 0x1, 0xf0, 0x7, 0xac, 0x9, 0x8, 0x8, 0x5, 0x4, 0xed, 0x1, 0x6, 0x8, 0xffff, 0x8, 0x5, 0x6, 0x800, 0x4, 0xa3, 0xd7, 0xffffffff, 0xfffff499, 0x4, 0x0, 0x2f3, 0xd, 0x9, 0x4, 0x81, 0x9b, 0x4, 0x5, 0x8, 0x8, 0x80000001, 0x9, 0x1, 0x1, 0x3ff, 0x101, 0x400, 0x7f, 0x7, 0x0, 0xc4], [0x2, 0x0, 0x5, 0x0, 0x7f, 0x5, 0x2, 0x6, 0x6, 0x5, 0x3, 0x3, 0x8a3, 0x4, 0x7fff, 0x1, 0x3dc, 0xd3, 0x6, 0x0, 0x0, 0x40, 0x53, 0x1, 0xb53, 0x9db3, 0x10000000, 0x9, 0x80000000, 0xc2b, 0x5, 0xe, 0x2, 0x6, 0xe, 0x1, 0xffffff00, 0x1, 0x8, 0x10001, 0x0, 0x0, 0x4, 0xc, 0x76, 0x100, 0x8, 0x0, 0x4, 0x9, 0x3, 0xb3d, 0x58f7, 0x401, 0x800, 0x1, 0x0, 0x1000, 0x0, 0x7, 0x4, 0x2, 0xc, 0x7], [0x0, 0xef7, 0x7, 0xd0e, 0x3, 0x1, 0x9, 0x8, 0x0, 0xc53, 0x7, 0x0, 0x3, 0x9, 0x9, 0x3, 0xfffffffb, 0x8, 0x7, 0x7, 0x800, 0x0, 0x1, 0x5, 0x5, 0x8, 0x4f, 0x81, 0x0, 0xd880, 0xfffffff8, 0x4, 0xc23, 0xe, 0x2, 0xa, 0xcd3a, 0xfffffffb, 0x7ff, 0xd5c3, 0x1, 0x0, 0xfff, 0x8, 0x6, 0x6, 0x8000, 0x0, 0x6, 0xfffffffa, 0x0, 0x4, 0x6, 0xfffffffd, 0x7f, 0x4e, 0x10000, 0x2, 0x9, 0x1, 0xea9, 0x1, 0x4, 0x1000]}, 0x45c) (async)
r11 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='generic_add_lease\x00', r11, 0x0, 0x2}, 0x18)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0xa7, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r12, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r13, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r14, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x44010) (async)
ppoll(&(0x7f0000000140)=[{r8, 0x404}], 0x1, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@gettaction={0x68, 0x32, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x400}]}, 0x68}}, 0x4000800) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newchain={0x3c, 0x64, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffff, 0x8}, {0x7, 0x4}, {0x4, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_RATE={0x6, 0x5, {0xc2, 0x5b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

690.824945ms ago: executing program 0 (id=1151):
r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000140)=[{0x9, 0x0, 0x70, &(0x7f00000007c0)="2b16b125a97cf66489d236c6ea7aaf2dee51ce7eb4392730b92c0c2375827bff5811f9d9d357288c3bc9a56145905511920e3ff475c4cd0608b2e08137a5fc29054f631b6a35e6bdd755ee87a7503043ed4d02746d0860128cd9706c2e605e5030c2481b1a576129050790f37f99f2be"}], 0x1})

642.515173ms ago: executing program 0 (id=1152):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004cc0)=ANY=[@ANYBLOB="1c0000001d0000010000000000000000070000000500000008ef0000"], 0x1c}}, 0x4)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'nicvf0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x6, 0x2]}, &(0x7f00000000c0)=0x44)
r5 = socket(0x400000000010, 0x3, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000fff60000000000339500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r7}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68)
getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000380)=""/214, &(0x7f0000000480)=0xd6) (async)
getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000380)=""/214, &(0x7f0000000480)=0xd6)
socket$unix(0x1, 0x1, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {}, {0x7, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084)
socket$unix(0x1, 0x1, 0x0) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000f00"/32], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000f00"/32], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
r12 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r12, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002f900"/72], 0x48)

551.494527ms ago: executing program 2 (id=1153):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
r1 = dup(r0) (async)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x7, 0xfff, 0x2, 0x8000}) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB="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", @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=','])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
ppoll(&(0x7f0000000140)=[{r4}], 0x1, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0xaba3, {0x45}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) (async)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f00000002c0)={0x4001, 0x9})

392.610285ms ago: executing program 0 (id=1154):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
flistxattr(r2, 0xfffffffffffffffe, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
pwrite64(r1, &(0x7f0000000280)="87fc7621d25c1a82581641704a12d7751a0d6580418266790f97aae792ac91263468ab0fe5278478a2a3f751c610b2efd0a59fcfd3d3e77007a7715c40f05a4c1a6b1f8e950acd6aaac41529f6ffaeacd0cf9b38b25906697f5f1bde23f538b2a1fea2f0563e", 0x66, 0x0)
prctl$PR_MCE_KILL(0x41, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000aa0000000060a0b0400000000000200000074000480700001800a000100696e6e61720000006000028008000240000000840800034000000007080004400000000f08000140000000003c000580090001006d657461000000002c0002800800014000000014080002400000000e08000140000000050800024000000021080002c5d55544f83ccf40000000100900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a", @ANYRES64=r0, @ANYRES64=r0, @ANYRESHEX=r1], 0xc8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

391.824051ms ago: executing program 0 (id=1155):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000300), 0x0, &(0x7f0000000380))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1)
ioctl$TCSETA(r1, 0x8925, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x0, 0x13, "31f40000f7ece2f4"})
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xb8, 0x29, 0x4, {0x4, 0x13, '\x00', [@generic={0xfe, 0x39, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36"}, @generic={0x80, 0xa, "09e12e5f0b6bdcf72f2e"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x188}}], 0x1, 0x810)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x984073, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x150, 0x10, 0x713, 0x0, 0x24dfdbfe, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in=@remote, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0)

91.583065ms ago: executing program 0 (id=1156):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x7d30, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r3, 0x400, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xe6, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x40004)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x80, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002780)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r5, 0x3, r2, 0x5})
pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7fffffff, 0x2, 0xffffffffffffff35, 0xedbf, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r6, @ANYBLOB="6e99f6374be59ea5c7b1b727c3e24f771eb2972f4dc11fb67ae8c1450324186b75f789f6293a8e9968860d2e418d7797e7e56d0b8f1bfbb4f94735ab2e91daa8b7797bee5ca01d16ec531fa01b43042927aae8ecb4c1b481617368dda1624a6fa338a3ca1d51eb1234ac37049493472be5650baa160b2b3844e7d6a7e71c39921d081f18285007180ea9a924077909fe83faf71ee999a8dbb5de9d40be42ac437e8e4636ab8a6eaf9ceef633e13510998dff8d4c54"], 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)

91.080008ms ago: executing program 4 (id=1157):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x800) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
read(r1, &(0x7f0000000100)=""/41, 0x29)
r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
close_range(r6, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r7=>r0, {0x2}}, './file0\x00'})
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
read$midi(r7, &(0x7f0000000100)=""/180, 0xb4)

90.37777ms ago: executing program 3 (id=1158):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200)=0xf, 0x12) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x9}, &(0x7f0000000040)=0x8) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01072bbd70000000001a05"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)

11.773722ms ago: executing program 3 (id=1159):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a140000000b0a8601000000000000000003007e90921b0004140000001100010000000000000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x24048801}, 0x20000800)

10.274767ms ago: executing program 4 (id=1160):
r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000140)=[{0x9, 0x0, 0x70, &(0x7f00000007c0)="2b16b125a97cf66489d236c6ea7aaf2dee51ce7eb4392730b92c0c2375827bff5811f9d9d357288c3bc9a56145905511920e3ff475c4cd0608b2e08137a5fc29054f631b6a35e6bdd755ee87a7503043ed4d02746d0860128cd9706c2e605e5030c2481b1a576129050790f37f99f2be"}], 0x1})

294.458µs ago: executing program 3 (id=1161):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xcac1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = fsmount(r0, 0x1, 0x0)
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r3, 0x402, 0x40000029)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r4}, 0x18)

0s ago: executing program 4 (id=1162):
unshare(0x24020400)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000640)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r2, <r3=>0x0})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r0, r0, 0x4, 0x2, r0, @void, @value=r0}, 0x20)
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000400)={r3, 0x0, 0xffffffff, 0x0, 0x0, [<r4=>0x0], [0x2, 0xffffffff, 0xf, 0x7], [0x1000, 0x0, 0xf2], [0x0, 0x0, 0x0, 0xffffffffffffffff]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r4})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r5, 0x8b25, &(0x7f0000000040))
unshare(0x24020400) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r2}) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r0, r0, 0x4, 0x2, r0, @void, @value=r0}, 0x20) (async)
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000400)={r3, 0x0, 0xffffffff, 0x0, 0x0, [], [0x2, 0xffffffff, 0xf, 0x7], [0x1000, 0x0, 0xf2], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r4}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl(r5, 0x8b25, &(0x7f0000000040)) (async)

0s ago: executing program 4 (id=1163):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x200008, 0x3, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80004}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x2800)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="796100000000000000007e000000c13793b662e1b12b940a3bd19e5f9bd47e3f7f600e7406a5129bb288f78573610564130ca7a8e45dd686f4014dcd42a656f07e91858fd92337541a37b8f1c9fa300b5539261cf90e85bf7592719bb6e3"], 0x14}}, 0x4000054)
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r10, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r11, 0x40000)

kernel console output (not intermixed with test programs):

0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.145255][    C3] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.149580][    C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.153209][    C3] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.156670][    C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.160289][    C3] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.164887][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.168359][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.170997][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.174946][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.178267][ T6230] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[   60.178658][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.183022][ T6230] VFS: Can't find a romfs filesystem on dev nullb0.
[   60.183022][ T6230] 
[   60.185118][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.192008][    C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.195619][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.198760][ T6217] ldm_validate_partition_table(): Disk read failed.
[   60.207379][    C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.210993][    C3] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.222300][    C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.225957][    C3] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.230039][    C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.233780][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[   60.243849][ T6217] Dev loop4: unable to read RDB block 0
[   60.253351][ T6217]  loop4: unable to read partition table
[   60.256055][ T6217] loop4: partition table beyond EOD, truncated
[   60.262728][ T6217] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[   60.337459][ T6244] 9pnet_virtio: no channels available for device syz
[   60.375042][   T64] Bluetooth: hci2: command tx timeout
[   60.443206][ T6247] syzkaller0: entered promiscuous mode
[   60.445463][ T6247] syzkaller0: entered allmulticast mode
[   60.453536][   T64] Bluetooth: hci3: command tx timeout
[   60.455349][   T64] Bluetooth: hci0: command tx timeout
[   60.457060][   T64] Bluetooth: hci1: command tx timeout
[   60.744230][ T6275] bridge: RTM_NEWNEIGH with invalid state 0x20
[   61.086787][ T6312] __nla_validate_parse: 3 callbacks suppressed
[   61.086800][ T6312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.83'.
[   61.093184][ T6007] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   61.254206][ T6007] usb 7-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[   61.259307][ T6007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.265387][ T6007] usb 7-1: config 0 descriptor??
[   61.275683][ T6007] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input6
[   61.342743][ T6324] loop2: detected capacity change from 0 to 7
[   61.347060][ T6324]  loop2:
[   61.348181][ T6324] loop2: partition table partially beyond EOD, truncated
[   61.419158][ T6329] netlink: 696 bytes leftover after parsing attributes in process `syz.0.90'.
[   61.423243][ T6329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19926 sclass=netlink_route_socket pid=6329 comm=syz.0.90
[   61.429011][ T6329] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   61.465984][ T6333] xt_hashlimit: invalid rate
[   61.542092][ T6336] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.550182][ T6336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.91'.
[   61.626289][ T6251] kexec: Could not allocate control_code_buffer
[   61.797060][ T5939] Bluetooth: hci3: Malformed LE Event: 0x02
[   61.799220][ T5939] Bluetooth: hci3: Malformed LE Event: 0x02
[   61.801342][ T6343] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[   61.803519][ T6343] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   61.809582][ T6343] vhci_hcd vhci_hcd.0: Device attached
[   61.812564][ T6345] vhci_hcd: connection closed
[   61.815435][ T1157] vhci_hcd: stop threads
[   61.819203][ T1157] vhci_hcd: release socket
[   61.820765][ T1157] vhci_hcd: disconnect device
[   61.950680][   T40] kauditd_printk_skb: 151 callbacks suppressed
[   61.950695][   T40] audit: type=1400 audit(1762805453.594:353): avc:  denied  { unmount } for  pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   61.985888][   T40] audit: type=1400 audit(1762805453.634:354): avc:  denied  { unlink } for  pid=6347 comm="syz.0.95" name="#1" dev="tmpfs" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   61.990489][ T6348] overlayfs: failed to get inode (-116)
[   61.995552][   T40] audit: type=1400 audit(1762805453.634:355): avc:  denied  { mount } for  pid=6347 comm="syz.0.95" name="/" dev="overlay" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   62.003342][ T6348] overlayfs: failed to get inode (-116)
[   62.008021][ T6348] overlayfs: failed to get inode (-116)
[   62.009929][ T6348] overlayfs: failed to get inode (-116)
[   62.081012][ T6351] hfsplus: unable to find HFS+ superblock
[   62.154493][   T40] audit: type=1400 audit(1762805453.804:356): avc:  denied  { ioctl } for  pid=6355 comm="syz.0.99" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   62.162638][   T40] audit: type=1400 audit(1762805453.804:357): avc:  denied  { ioctl } for  pid=6355 comm="syz.0.99" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   62.232753][ T6365] kvm: kvm [6364]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407
[   62.238496][ T6365] kvm: kvm [6364]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07
[   62.264853][ T6297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.345308][ T6297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.459730][ T6297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.532944][ T5939] Bluetooth: hci3: command tx timeout
[   62.576911][   T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.582221][   T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.582738][   T40] audit: type=1400 audit(1762805454.224:358): avc:  denied  { connect } for  pid=6377 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   62.585646][   T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.592968][   T40] audit: type=1400 audit(1762805454.234:359): avc:  denied  { name_connect } for  pid=6377 comm="syz.0.106" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   62.599435][   T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.605386][ T6297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.608890][   T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.665947][   T40] audit: type=1400 audit(1762805454.314:360): avc:  denied  { write } for  pid=6382 comm="syz.0.107" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   62.762246][ T6297] bridge_slave_1: left allmulticast mode
[   62.764941][ T6297] bridge_slave_1: left promiscuous mode
[   62.768263][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.775530][ T6297] bridge_slave_0: left allmulticast mode
[   62.777342][ T6297] bridge_slave_0: left promiscuous mode
[   62.779220][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.036527][ T6297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.042567][ T6297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.047672][ T6297] bond0 (unregistering): Released all slaves
[   63.067625][ T6375] chnl_net:caif_netlink_parms(): no params data found
[   63.149210][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.151451][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.153888][ T6375] bridge_slave_0: entered allmulticast mode
[   63.156427][ T6375] bridge_slave_0: entered promiscuous mode
[   63.160713][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.164823][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.167785][ T6375] bridge_slave_1: entered allmulticast mode
[   63.170551][ T6375] bridge_slave_1: entered promiscuous mode
[   63.222608][ T6375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.228629][ T6375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.268268][ T6375] team0: Port device team_slave_0 added
[   63.273238][ T6375] team0: Port device team_slave_1 added
[   63.340148][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.342366][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.352434][ T6375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.356677][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.359429][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.368473][ T6375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.405564][ T6297] hsr_slave_0: left promiscuous mode
[   63.407942][ T6297] hsr_slave_1: left promiscuous mode
[   63.410754][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.413904][ T6297] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.418002][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.420909][ T6297] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.438427][ T6297] veth1_macvtap: left promiscuous mode
[   63.440363][ T6297] veth0_macvtap: left promiscuous mode
[   63.442199][ T6297] veth1_vlan: left promiscuous mode
[   63.444478][ T6297] veth0_vlan: left promiscuous mode
[   63.852635][ T6018] usb 7-1: USB disconnect, device number 6
[   63.937589][ T6297] team0 (unregistering): Port device team_slave_1 removed
[   63.986080][ T6297] team0 (unregistering): Port device team_slave_0 removed
[   64.364978][ T6375] hsr_slave_0: entered promiscuous mode
[   64.367326][ T6375] hsr_slave_1: entered promiscuous mode
[   64.369389][ T6375] debugfs: 'hsr0' already exists in 'hsr'
[   64.371252][ T6375] Cannot create hsr debugfs directory
[   64.526086][ T6375] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   64.536526][ T6375] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   64.546562][ T6375] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   64.550949][ T6375] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   64.636955][ T6375] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.648726][ T6375] 8021q: adding VLAN 0 to HW filter on device team0
[   64.653526][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.655990][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.663598][ T6291] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.665788][ T6291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.684625][ T5939] Bluetooth: hci2: command tx timeout
[   64.813759][ T6297] IPVS: stop unused estimator thread 0...
[   64.825461][ T6375] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.006909][ T6375] veth0_vlan: entered promiscuous mode
[   65.014603][ T6375] veth1_vlan: entered promiscuous mode
[   65.037872][ T6375] veth0_macvtap: entered promiscuous mode
[   65.045078][ T6375] veth1_macvtap: entered promiscuous mode
[   65.059173][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.067526][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.078076][ T6291] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.081750][ T6291] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.086433][ T6291] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.090019][ T6291] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.133534][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.136763][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.156779][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.160051][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.174087][   T40] audit: type=1400 audit(1762805456.824:361): avc:  denied  { mounton } for  pid=6375 comm="syz-executor" path="/syzkaller.zIWReB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   66.763217][ T5939] Bluetooth: hci2: command tx timeout
[   68.843337][ T5939] Bluetooth: hci2: command tx timeout
[   70.923120][ T5939] Bluetooth: hci2: command tx timeout
[   76.059086][   T40] audit: type=1400 audit(1762805467.704:362): avc:  denied  { name_bind } for  pid=6472 comm="syz.0.111" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   76.065409][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'.
[   76.068763][   T40] audit: type=1400 audit(1762805467.704:363): avc:  denied  { ioctl } for  pid=6472 comm="syz.0.111" path="socket:[12912]" dev="sockfs" ino=12912 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   76.069571][ T6476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.113'.
[   76.079152][   T40] audit: type=1400 audit(1762805467.724:364): avc:  denied  { shutdown } for  pid=6477 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   76.099586][   T40] audit: type=1400 audit(1762805467.744:365): avc:  denied  { getopt } for  pid=6477 comm="syz.3.114" lport=46462 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   76.103365][ T6478] netlink: 32 bytes leftover after parsing attributes in process `syz.4.112'.
[   76.109626][   T40] audit: type=1400 audit(1762805467.744:366): avc:  denied  { write } for  pid=6477 comm="syz.3.114" lport=46462 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   76.123635][   T40] audit: type=1400 audit(1762805467.744:367): avc:  denied  { setopt } for  pid=6477 comm="syz.3.114" lport=46462 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   76.132837][   T40] audit: type=1326 audit(1762805467.744:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.3.114" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d62b8f6c9 code=0x0
[   76.142223][   T40] audit: type=1400 audit(1762805467.774:369): avc:  denied  { create } for  pid=6474 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   76.144809][ T6485] netlink: 'syz.0.115': attribute type 10 has an invalid length.
[   76.152502][ T6485] netlink: 40 bytes leftover after parsing attributes in process `syz.0.115'.
[   76.153003][   T40] audit: type=1400 audit(1762805467.774:370): avc:  denied  { read write } for  pid=6484 comm="syz.0.115" name="udmabuf" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   76.160238][ T6485] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[   76.170815][ T6485] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   76.172788][   T40] audit: type=1400 audit(1762805467.774:371): avc:  denied  { open } for  pid=6484 comm="syz.0.115" path="/dev/udmabuf" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   76.175405][ T6485] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   76.195816][ T6489] qnx4: no qnx4 filesystem (no root dir).
[   76.301297][ T6500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.121'.
[   76.301689][ T6501] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[   76.311276][ T6501] bond0: (slave sit0): Error -95 calling set_mac_address
[   76.448818][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[   76.451644][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[   76.545661][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'.
[   76.665752][ T6531] x_tables: duplicate underflow at hook 2
[   76.773056][ T6018] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   76.783501][ T6542] binder: 6536:6542 ioctl c0306201 200000000640 returned -22
[   76.932932][ T6018] usb 8-1: Using ep0 maxpacket: 8
[   76.937197][ T6018] usb 8-1: config 0 interface 0 has no altsetting 0
[   76.939327][ T6018] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   76.942091][ T6018] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.945928][ T6018] usb 8-1: config 0 descriptor??
[   77.139216][ T6551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.133'.
[   77.145604][ T6551] netlink: 'syz.2.133': attribute type 63 has an invalid length.
[   77.151122][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.154459][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.166551][ T6018] usbhid 8-1:0.0: can't add hid device: -71
[   77.168607][ T6018] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[   77.175785][ T6018] usb 8-1: USB disconnect, device number 2
[   77.917827][ T6588] random: crng reseeded on system resumption
[   78.432175][ T5939] Bluetooth: hci1: Malformed Event: 0x02
[   78.549328][ T6601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6601 comm=syz.4.147
[   78.549379][ T6602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6602 comm=syz.4.147
[   78.559757][ T6602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6602 comm=syz.4.147
[   78.565437][ T6601] netlink: 'syz.4.147': attribute type 1 has an invalid length.
[   78.569016][ T6601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=6601 comm=syz.4.147
[   78.739998][ T6613] netlink: 44 bytes leftover after parsing attributes in process `syz.0.151'.
[   78.744204][ T6613] netlink: 35 bytes leftover after parsing attributes in process `syz.0.151'.
[   78.748313][ T6613] netlink: 'syz.0.151': attribute type 5 has an invalid length.
[   78.751597][ T6613] netlink: 'syz.0.151': attribute type 6 has an invalid length.
[   78.757417][ T6613] netlink: 35 bytes leftover after parsing attributes in process `syz.0.151'.
[   78.852716][ T6622] autofs: Unknown parameter '8l7À˜V™´'
[   78.901208][ T6631] binder_alloc: binder_alloc_mmap_handler: 6630 200000ffe000-200000fff000 already mapped failed -16
[   78.971692][ T6635] SET target dimension over the limit!
[   79.911592][ T6694] netlink: 'syz.0.176': attribute type 1 has an invalid length.
[   79.953065][ T6694] 8021q: adding VLAN 0 to HW filter on device bond3
[   79.954498][ T6694] bond2: (slave bond3): making interface the new active one
[   79.955123][ T6694] bond2: (slave bond3): Enslaving as an active interface with an up link
[   79.956954][ T6694] bond2: entered promiscuous mode
[   79.956965][ T6694] bond3: entered promiscuous mode
[   79.957034][ T6694] bond2: entered allmulticast mode
[   79.957042][ T6694] bond3: entered allmulticast mode
[   79.957621][ T6694] 8021q: adding VLAN 0 to HW filter on device bond2
[   80.029484][ T6700] ksmbd: Unknown IPC event: 3, ignore.
[   80.410682][ T6714] bridge0: port 3(syz_tun) entered blocking state
[   80.411492][ T6714] bridge0: port 3(syz_tun) entered disabled state
[   80.411728][ T6714] syz_tun: entered allmulticast mode
[   80.415171][ T6714] syz_tun: entered promiscuous mode
[   80.417668][ T6714] bridge0: port 3(syz_tun) entered blocking state
[   80.417799][ T6714] bridge0: port 3(syz_tun) entered forwarding state
[   80.685368][ T6731] batadv_slave_1: entered promiscuous mode
[   80.685566][ T6731] batadv_slave_1: left promiscuous mode
[   80.765563][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   80.815832][ T6749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=6749 comm=syz.3.195
[   80.893327][ T6760] program syz.2.197 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   80.917157][ T6763] overlayfs: failed lookup in lower (newroot/53, name='file0', err=-40): overlapping layers
[   81.035277][ T6781] syzkaller0: entered promiscuous mode
[   81.037002][ T6781] syzkaller0: entered allmulticast mode
[   81.041052][ T6776] netlink: 'syz.3.202': attribute type 10 has an invalid length.
[   81.061934][ T6776] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   81.080585][   T40] kauditd_printk_skb: 46 callbacks suppressed
[   81.080599][   T40] audit: type=1400 audit(1762805472.724:418): avc:  denied  { setopt } for  pid=6777 comm="syz.4.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   81.090481][   T40] audit: type=1400 audit(1762805472.724:419): avc:  denied  { write } for  pid=6777 comm="syz.4.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   81.159258][   T40] audit: type=1400 audit(1762805472.804:420): avc:  denied  { write } for  pid=6789 comm="syz.4.207" path="socket:[13895]" dev="sockfs" ino=13895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   81.159352][ T6790] Bluetooth: MGMT ver 1.23
[   81.236711][ T6799] overlayfs: failed lookup in lower (newroot/68, name='file0', err=-40): overlapping layers
[   81.277992][   T40] audit: type=1400 audit(1762805472.924:421): avc:  denied  { read append } for  pid=6801 comm="syz.4.212" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   81.286529][   T40] audit: type=1400 audit(1762805472.924:422): avc:  denied  { open } for  pid=6801 comm="syz.4.212" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   81.353263][ T5802] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   81.368810][   T40] audit: type=1400 audit(1762805473.014:423): avc:  denied  { mount } for  pid=6807 comm="syz.0.213" name="/" dev="hugetlbfs" ino=14623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   81.377070][   T40] audit: type=1400 audit(1762805473.014:424): avc:  denied  { execute } for  pid=6807 comm="syz.0.213" path="/cpuacct.usage_percpu" dev="hugetlbfs" ino=14626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   81.393978][ T6810] __nla_validate_parse: 11 callbacks suppressed
[   81.393989][ T6810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.214'.
[   81.422905][   T40] audit: type=1400 audit(1762805473.064:425): avc:  denied  { map } for  pid=6801 comm="syz.4.212" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   81.430986][   T40] audit: type=1400 audit(1762805473.074:426): avc:  denied  { write execute } for  pid=6801 comm="syz.4.212" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   81.481724][ T6823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.218'.
[   81.515573][ T5802] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   81.520213][ T5802] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   81.525702][ T5802] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   81.529410][ T5802] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.537347][ T6788] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   81.546312][ T5802] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[   81.637024][ T6834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'.
[   81.668554][ T6832] netlink: 'syz.2.220': attribute type 4 has an invalid length.
[   81.671673][ T6832] netlink: 17 bytes leftover after parsing attributes in process `syz.2.220'.
[   81.684568][   T40] audit: type=1400 audit(1762805473.334:427): avc:  denied  { ioctl } for  pid=6836 comm="syz.0.222" path="socket:[13257]" dev="sockfs" ino=13257 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   81.811246][ T6847] autofs: Unknown parameter 'Lä'
[   81.876858][ T6852] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   81.883865][ T6852] netlink: 'syz.0.226': attribute type 1 has an invalid length.
[   81.897263][ T6852] bond4 (unregistering): Released all slaves
[   81.926170][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'.
[   81.940904][ T6862] ip6t_REJECT: ECHOREPLY is not supported
[   81.944753][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.226'.
[   82.021477][ T6869] misc userio: Begin command sent, but we're already running
[   82.024896][ T6869] misc userio: Begin command sent, but we're already running
[   82.027948][ T6869] misc userio: Begin command sent, but we're already running
[   82.030982][ T6869] misc userio: Begin command sent, but we're already running
[   82.035315][ T6869] misc userio: Begin command sent, but we're already running
[   82.038327][ T6869] misc userio: Begin command sent, but we're already running
[   82.041360][ T6869] misc userio: Begin command sent, but we're already running
[   82.045001][ T6869] misc userio: Begin command sent, but we're already running
[   82.048128][ T6869] misc userio: Begin command sent, but we're already running
[   82.051143][ T6869] misc userio: Begin command sent, but we're already running
[   82.054978][ T6869] misc userio: Begin command sent, but we're already running
[   82.058748][ T6869] misc userio: Begin command sent, but we're already running
[   82.061717][ T6869] misc userio: Begin command sent, but we're already running
[   82.064945][ T6869] misc userio: Begin command sent, but we're already running
[   82.067886][ T6869] misc userio: Begin command sent, but we're already running
[   82.071041][ T6869] misc userio: Begin command sent, but we're already running
[   82.074707][ T6869] misc userio: Begin command sent, but we're already running
[   82.077817][ T6869] misc userio: Begin command sent, but we're already running
[   82.218063][ T6882] SELinux:  Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped).
[   82.282946][ T6018] psmouse serio3: Failed to reset mouse on : -5
[   82.335618][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'.
[   82.346795][ T6887] gretap0: entered promiscuous mode
[   82.349217][ T6887] macvtap1: entered promiscuous mode
[   82.351624][ T6887] macvtap1: entered allmulticast mode
[   82.355578][ T6887] gretap0: entered allmulticast mode
[   82.648542][ T6910] Cannot find add_set index 65532 as target
[   82.689489][ T6917] capability: warning: `syz.0.243' uses 32-bit capabilities (legacy support in use)
[   82.756247][ T6923] PKCS8: Unsupported PKCS#8 version
[   82.821348][ T6919] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.244'.
[   82.944708][ T6931] netlink: 'syz.4.248': attribute type 4 has an invalid length.
[   82.957735][ T6930] netlink: 'syz.4.248': attribute type 4 has an invalid length.
[   83.149123][ T6942] binder: 6941:6942 ioctl c0306201 200000000080 returned -22
[   83.860307][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'.
[   83.967220][ T6965] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   83.971922][ T6965] block device autoloading is deprecated and will be removed.
[   84.024028][ T6964] md: superblock version 3 not known
[   84.026329][ T6964] md: couldn't set array info. -22
[   84.027292][ T6965] overlayfs: conflicting options: nfs_export=on,index=off
[   84.186158][ T6974] IPv6: NLM_F_REPLACE set, but no existing node found!
[   84.452072][ T6991] kvm: MWAIT instruction emulated as NOP!
[   84.494329][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   84.573020][   T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   84.578624][ T6998] ceph: Unknown parameter 'aclkcipher'
[   84.723009][   T34] usb 9-1: device descriptor read/64, error -71
[   84.805264][ T7003] netlink: 'syz.3.272': attribute type 21 has an invalid length.
[   84.983625][   T34] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   85.123024][   T34] usb 9-1: device descriptor read/64, error -71
[   85.129577][ T7017] xt_l2tp: missing protocol rule (udp|l2tpip)
[   85.134147][ T7017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'.
[   85.146457][   T93] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.150334][   T93] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.155987][   T93] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.159844][   T93] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.206250][ T7023] sctp: [Deprecated]: syz.0.278 (pid 7023) Use of int in max_burst socket option deprecated.
[   85.206250][ T7023] Use struct sctp_assoc_value instead
[   85.247008][   T34] usb usb9-port1: attempt power cycle
[   85.261497][ T7025] sch_tbf: burst 32852 is lower than device lo mtu (65550) !
[   85.522015][ T7034] warning: `syz.0.281' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   85.529059][ T7034] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   85.593016][   T34] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   85.623607][   T34] usb 9-1: device descriptor read/8, error -71
[   85.873091][   T34] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[   85.893434][   T34] usb 9-1: device descriptor read/8, error -71
[   86.013661][   T34] usb usb9-port1: unable to enumerate USB device
[   86.145027][   T40] kauditd_printk_skb: 40 callbacks suppressed
[   86.145041][   T40] audit: type=1400 audit(1762805477.794:468): avc:  denied  { ioctl } for  pid=7054 comm="syz.0.287" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   86.272968][ T6018] misc userio: Buffer overflowed, userio client isn't keeping up
[   86.451243][ T7065] sctp: [Deprecated]: syz.0.291 (pid 7065) Use of int in max_burst socket option.
[   86.451243][ T7065] Use struct sctp_assoc_value instead
[   86.453803][ T7064] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7064 comm=syz.3.292
[   86.461458][ T7064] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7064 comm=syz.3.292
[   86.469507][   T40] audit: type=1400 audit(1762805478.114:469): avc:  denied  { audit_write } for  pid=7062 comm="syz.3.292" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   86.539356][ T7067] pim6reg13: entered allmulticast mode
[   86.666547][   T40] audit: type=1400 audit(1762805478.314:470): avc:  denied  { write } for  pid=7072 comm="syz.0.294" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   86.687018][   T10] cfg80211: failed to load regulatory.db
[   86.757218][   T40] audit: type=1400 audit(1762805478.404:471): avc:  denied  { call } for  pid=7081 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   86.758004][ T7084] binder_alloc: binder_alloc_mmap_handler: 7081 200000ffe000-200001000000 already mapped failed -16
[   86.768249][ T7082] binder_alloc: 7081: binder_alloc_buf, no vma
[   86.788513][   T40] audit: type=1400 audit(1762805478.434:472): avc:  denied  { append } for  pid=7085 comm="syz.0.298" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   86.788748][ T7086] dlm: no locking on control device
[   86.797026][   T40] audit: type=1400 audit(1762805478.434:473): avc:  denied  { getopt } for  pid=7085 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   86.827003][   T40] audit: type=1400 audit(1762805478.474:474): avc:  denied  { remount } for  pid=7087 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[   86.906947][ T7090] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   87.035541][   T40] audit: type=1400 audit(1762805478.684:475): avc:  denied  { accept } for  pid=7094 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   87.070168][ T7099] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.152044][ T6018] input: PS/2 Generic Mouse as /devices/serio3/input/input13
[   87.154098][ T7103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7103 comm=syz.0.306
[   87.156160][ T7104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7104 comm=syz.0.306
[   87.259740][   T40] audit: type=1400 audit(1762805478.904:476): avc:  denied  { ioctl } for  pid=7107 comm="syz.3.308" path="socket:[15281]" dev="sockfs" ino=15281 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   87.283112][   T40] audit: type=1400 audit(1762805478.924:477): avc:  denied  { write } for  pid=7115 comm="syz.4.309" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   87.373090][ T6018] psmouse serio3: Failed to enable mouse on 
[   87.480884][ T7136] __nla_validate_parse: 4 callbacks suppressed
[   87.480897][ T7136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.312'.
[   87.553040][ T7143] overlayfs: missing 'lowerdir'
[   87.895566][ T7178] tipc: Started in network mode
[   87.897998][ T7178] tipc: Node identity 46cbde9a2615, cluster identity 4711
[   87.901204][ T7178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.946988][ T7178] syzkaller0: entered promiscuous mode
[   87.949455][ T7178] syzkaller0: entered allmulticast mode
[   87.955695][ T7178] tipc: Resetting bearer <eth:syzkaller0>
[   87.984309][ T7187] mmap: syz.0.321 (7187) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   87.991348][ T7177] tipc: Resetting bearer <eth:syzkaller0>
[   88.122482][ T7195] netlink: 27 bytes leftover after parsing attributes in process `syz.3.323'.
[   88.914180][ T7177] tipc: Disabling bearer <eth:syzkaller0>
[   88.961330][ T7200] program syz.4.325 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   88.968675][ T7202] netlink: 100 bytes leftover after parsing attributes in process `syz.0.324'.
[   89.002783][ T7206] binder: 7205:7206 ioctl 4018620d 0 returned -22
[   89.049063][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.330'.
[   89.201018][ T7231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65024 sclass=netlink_route_socket pid=7231 comm=syz.2.335
[   89.233080][   T54] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   89.404211][   T54] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[   89.407974][   T54] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[   89.416628][   T54] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   89.421048][   T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.436149][ T7202] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   89.437131][ T7268] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[   89.438465][ T7202] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   89.452700][   T54] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[   89.560426][ T7276] netlink: 96 bytes leftover after parsing attributes in process `syz.2.350'.
[   89.562294][ T7275] netlink: 96 bytes leftover after parsing attributes in process `syz.2.350'.
[   89.662818][   T54] usb 5-1: USB disconnect, device number 2
[   89.674326][ T7284] kvm: kvm [7283]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xffff0007
[   89.904886][ T7293] binder: 7292:7293 ioctl c018620c 2000000000c0 returned -1
[   89.905937][ T7293] binder: 7292:7293 ioctl c0306201 200000000080 returned -22
[   90.108301][ T7310] netlink: 'syz.3.358': attribute type 4 has an invalid length.
[   90.122088][ T7310] netlink: 'syz.3.358': attribute type 4 has an invalid length.
[   90.191834][ T7314] netfs: Couldn't get user pages (rc=-14)
[   90.194431][ T7314] netfs: Zero-sized read [R=2]
[   90.240917][ T7319] vcan1: entered allmulticast mode
[   90.427564][ T7327] overlayfs: missing 'workdir'
[   90.461138][ T7330] syzkaller1: entered promiscuous mode
[   90.464394][ T7330] syzkaller1: entered allmulticast mode
[   90.496515][ T7330] netlink: 32 bytes leftover after parsing attributes in process `syz.3.365'.
[   90.555211][ T7341] support for cryptoloop has been removed.  Use dm-crypt instead.
[   90.688150][ T7347] netlink: 36 bytes leftover after parsing attributes in process `syz.4.369'.
[   90.958923][ T7368] overlayfs: missing 'workdir'
[   91.009080][ T7374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.009307][ T7374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.010724][ T7374] ptrace attach of "/syz-executor exec"[5944] was attempted by "/syz-executor exec"[7374]
[   91.088164][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'.
[   91.113059][ T7383] /dev/sg0: Can't lookup blockdev
[   91.199009][   T40] kauditd_printk_skb: 21 callbacks suppressed
[   91.199024][   T40] audit: type=1400 audit(1762805482.844:499): avc:  denied  { map } for  pid=7386 comm="syz.2.381" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   91.212436][   T40] audit: type=1400 audit(1762805482.854:500): avc:  denied  { write } for  pid=7391 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   91.221480][   T40] audit: type=1400 audit(1762805482.854:501): avc:  denied  { read } for  pid=7391 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   91.221996][ T7394] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   91.234908][ T7394] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   91.303844][ T7402] overlayfs: missing 'workdir'
[   91.309512][ T7399] 8021q: adding VLAN 0 to HW filter on device bond4
[   91.321228][ T7403] cgroup: release_agent respecified
[   91.391112][ T7409] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32
[   91.394933][   T40] audit: type=1400 audit(1762805483.044:502): avc:  denied  { write } for  pid=7406 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   91.395231][ T7408] tipc: Failed to obtain node identity
[   91.405256][ T7408] tipc: Enabling of bearer <ib:ipvlan0> rejected, failed to enable media
[   91.540990][ T7432] netlink: 72 bytes leftover after parsing attributes in process `syz.4.396'.
[   91.629782][ T7442] all: renamed from lo (while UP)
[   91.639401][ T7442] netlink: 'syz.0.399': attribute type 3 has an invalid length.
[   91.642314][ T7442] netlink: 'syz.0.399': attribute type 3 has an invalid length.
[   91.788126][   T40] audit: type=1400 audit(1762805483.434:503): avc:  denied  { mount } for  pid=7452 comm="syz.2.403" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[   91.803073][   T54] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[   91.901263][ T7457] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[   91.907287][ T7457] exFAT-fs (nullb0): invalid boot record signature
[   91.910009][ T7457] exFAT-fs (nullb0): failed to read boot sector
[   91.912442][ T7457] exFAT-fs (nullb0): failed to recognize exfat type
[   91.965609][   T54] usb 9-1: config 1 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 56, changing to 9
[   91.970875][   T54] usb 9-1: config 1 interface 0 has no altsetting 0
[   91.976912][   T54] usb 9-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.40
[   91.981227][   T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.986729][   T54] usb 9-1: Product: syz
[   91.988498][   T54] usb 9-1: Manufacturer: syz
[   91.990472][   T54] usb 9-1: SerialNumber: syz
[   92.004555][   T40] audit: type=1326 audit(1762805483.654:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.0.407" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd98578f6c9 code=0x0
[   92.065432][ T7462] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   92.227976][   T54] usbhid 9-1:1.0: can't add hid device: -71
[   92.228500][   T54] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[   92.230135][   T54] usb 9-1: USB disconnect, device number 6
[   92.643688][ T7472] /dev/sg0: Can't lookup blockdev
[   92.697763][ T7474] process 'syz.0.411' launched '/dev/fd/7' with NULL argv: empty string added
[   92.703051][   T40] audit: type=1400 audit(1762805484.344:505): avc:  denied  { execute_no_trans } for  pid=7473 comm="syz.0.411" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=16291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   92.844341][   T40] audit: type=1400 audit(1762805484.494:506): avc:  denied  { map } for  pid=7479 comm="syz.4.414" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   92.855054][   T40] audit: type=1400 audit(1762805484.494:507): avc:  denied  { execute } for  pid=7479 comm="syz.4.414" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   92.861315][ T7478] netlink: 'syz.0.413': attribute type 10 has an invalid length.
[   92.866774][   T40] audit: type=1800 audit(1762805484.494:508): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.414" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[   92.867755][ T7478] __nla_validate_parse: 1 callbacks suppressed
[   92.867769][ T7478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.413'.
[   92.960729][ T7489] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   93.064265][ T7499] fuse: Bad value for 'group_id'
[   93.066508][ T7499] fuse: Bad value for 'group_id'
[   93.100471][ T7501] netlink: 'syz.2.421': attribute type 1 has an invalid length.
[   93.147868][ T7501] 8021q: adding VLAN 0 to HW filter on device bond2
[   93.150905][ T7501] bond1: (slave bond2): making interface the new active one
[   93.156379][ T7501] bond1: (slave bond2): Enslaving as an active interface with an up link
[   93.177043][ T7501] TCP: TCP_TX_DELAY enabled
[   93.388643][ T7534] Bluetooth: hci0: invalid length 0, exp 2 for type 15
[   94.042233][ T7528] netlink: 228 bytes leftover after parsing attributes in process `syz.0.426'.
[   94.075320][ T7561] overlayfs: failed lookup in lower (newroot/110, name='file0', err=-40): overlapping layers
[   94.196239][ T1157] Bluetooth: Error in BCSP hdr checksum
[   94.336458][ T7581] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   94.336506][ T7581] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock
[   94.336715][ T7581] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   94.336732][ T7581] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock
[   94.439123][ T7574] could not allocate digest TFM handle cryptd(blake2b-160)
[   94.457083][ T1157] Bluetooth: Error in BCSP hdr checksum
[   94.778871][ T7597] netlink: 'syz.2.444': attribute type 1 has an invalid length.
[   94.824227][ T7597] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   94.824874][ T7597] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   94.869065][ T7604] gretap1: entered promiscuous mode
[   94.875989][ T7604] bond3: (slave gretap1): making interface the new active one
[   94.876468][ T7604] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   94.977075][ T7606] netlink: 32 bytes leftover after parsing attributes in process `syz.3.446'.
[   95.036635][ T7597] macvlan2: entered promiscuous mode
[   95.036650][ T7597] macvlan2: entered allmulticast mode
[   95.036953][ T7597] bond3: entered promiscuous mode
[   95.037392][ T7597] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   95.039600][ T7597] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   95.040511][ T7597] bond3: left promiscuous mode
[   95.177816][ T7611] Bluetooth: hci0: unsupported parameter 255
[   95.177836][ T7611] Bluetooth: hci0: unsupported parameter 255
[   95.343669][ T7620] comedi comedi0: no devices specified
[   95.400880][ T7623] veth0: entered promiscuous mode
[   95.401331][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'.
[   95.640058][ T7629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.455'.
[   95.674590][ T7635] netlink: 'syz.2.457': attribute type 4 has an invalid length.
[   95.700053][ T7638] netlink: 'syz.0.458': attribute type 1 has an invalid length.
[   95.738710][ T7641] Bluetooth: hci0: unsupported parameter 255
[   95.741114][ T7641] Bluetooth: hci0: unsupported parameter 255
[   95.742297][ T7638] 8021q: adding VLAN 0 to HW filter on device bond5
[   95.778316][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.784207][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.794287][ T7651] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   95.797242][ T7652] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   95.798351][ T7651] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   95.800078][ T7652] ip6t_srh: unknown srh match flags  4000
[   95.868286][ T7656] veth0: entered promiscuous mode
[   95.874607][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'.
[   95.962992][   T64] Bluetooth: hci4: command 0x1003 tx timeout
[   95.963057][ T5939] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   95.967292][ T7663] netlink: 'syz.0.465': attribute type 21 has an invalid length.
[   95.971918][ T7663] netlink: 'syz.0.465': attribute type 6 has an invalid length.
[   95.976572][ T7663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.465'.
[   96.107660][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'.
[   96.212078][   T40] kauditd_printk_skb: 20 callbacks suppressed
[   96.212092][   T40] audit: type=1400 audit(1762805487.854:529): avc:  denied  { module_request } for  pid=7691 comm="syz.3.476" kmod="bt-proto-8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   96.218863][ T7699] sctp: [Deprecated]: syz.0.475 (pid 7699) Use of int in maxseg socket option.
[   96.218863][ T7699] Use struct sctp_assoc_value instead
[   96.224581][ T7698] dns_resolver: Unsupported content type (234)
[   96.242252][   T40] audit: type=1400 audit(1762805487.884:530): avc:  denied  { accept } for  pid=7695 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   96.324457][ T7711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.480'.
[   96.501099][ T7725] comedi comedi0: no devices specified
[   96.535611][   T40] audit: type=1400 audit(1762805488.184:531): avc:  denied  { create } for  pid=7726 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   96.538053][ T7727] IPv6: NLM_F_REPLACE set, but no existing node found!
[   96.541560][   T40] audit: type=1400 audit(1762805488.184:532): avc:  denied  { ioctl } for  pid=7726 comm="syz.2.485" path="socket:[20017]" dev="sockfs" ino=20017 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   96.545025][ T7727] netlink: 44 bytes leftover after parsing attributes in process `syz.2.485'.
[   96.554456][ T7727] netlink: 'syz.2.485': attribute type 5 has an invalid length.
[   96.557146][ T7727] netlink: 'syz.2.485': attribute type 6 has an invalid length.
[   96.576007][ T7729] sp0: Synchronizing with TNC
[   96.606101][   T40] audit: type=1400 audit(1762805488.254:533): avc:  denied  { unmount } for  pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   96.630435][ T7731] [U] è`
[   96.646575][ T7742] netlink: 'syz.2.489': attribute type 5 has an invalid length.
[   96.758169][   T40] audit: type=1400 audit(1762805488.404:534): avc:  denied  { setopt } for  pid=7754 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   96.765420][   T40] audit: type=1400 audit(1762805488.404:535): avc:  denied  { read } for  pid=7754 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   96.946915][ T7781] bond4: option mode: unable to set because the bond device is up
[   96.967470][   T40] audit: type=1400 audit(1762805488.614:536): avc:  denied  { mount } for  pid=7782 comm="syz.4.502" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   97.080801][   T40] audit: type=1400 audit(1762805488.724:537): avc:  denied  { append } for  pid=7805 comm="syz.0.507" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   97.103045][ T6524] udevd[6524]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory
[   97.166206][   T40] audit: type=1400 audit(1762805488.814:538): avc:  denied  { create } for  pid=7811 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   97.174701][ T7817] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   97.329632][    C0] IPv4: Oversized IP packet from 172.20.20.24
[   97.624004][ T7836] program syz.0.513 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   97.665549][ T7840] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   97.665573][ T7840] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock
[   97.665645][ T7840] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   97.665662][ T7840] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock
[   97.742589][ T7838] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[   97.796121][ T7842] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7842 comm=syz.3.518
[   97.805752][ T7842] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(16)
[   97.805794][ T7842] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   97.805871][ T7842] vhci_hcd vhci_hcd.0: Device attached
[   97.816783][ T7851] vhci_hcd: connection closed
[   97.825638][   T93] vhci_hcd: stop threads
[   97.830002][   T93] vhci_hcd: release socket
[   97.830019][   T93] vhci_hcd: disconnect device
[   97.906218][    C0] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[   97.906266][    C0] sr 2:0:0:0: [sr0] tag#10 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5
[   97.909297][ T7855] __nla_validate_parse: 8 callbacks suppressed
[   97.909310][ T7855] netlink: 72 bytes leftover after parsing attributes in process `syz.0.521'.
[   97.965780][ T7860] netlink: 92 bytes leftover after parsing attributes in process `syz.2.523'.
[   98.504239][ T7880] batadv0: entered promiscuous mode
[   98.518135][ T7879] batadv0: left promiscuous mode
[   98.555527][ T5802] IPVS: starting estimator thread 0...
[   98.558380][ T7876] IPVS: fo: FWM 3 0x00000003 - no destination available
[   98.643352][ T7882] IPVS: using max 28 ests per chain, 67200 per kthread
[   98.796966][ T7862] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   98.799125][ T7862] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   98.805154][ T7862] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   98.809193][ T7862] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   98.811624][ T7862] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   98.816180][ T7862] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   98.820681][ T7862] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   98.825023][ T7862] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   98.827539][ T7862] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   98.832587][ T7862] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   98.837550][ T7862] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   98.841264][ T7862] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   98.843832][ T7862] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   98.848503][ T7862] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   98.969508][ T7898] erofs (device nbd0): cannot find valid erofs superblock
[   98.986846][ T7905] netlink: 60 bytes leftover after parsing attributes in process `syz.2.536'.
[   98.990218][ T7905] netlink: 60 bytes leftover after parsing attributes in process `syz.2.536'.
[   99.006896][ T7903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.535'.
[   99.050914][ T7914] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.075874][ T7916] loop2: detected capacity change from 0 to 7
[   99.107793][ T1151] IPVS: stop unused estimator thread 0...
[   99.223780][ T6524] Dev loop2: unable to read RDB block 7
[   99.225636][ T6524]  loop2: unable to read partition table
[   99.227522][ T6524] loop2: partition table beyond EOD, truncated
[   99.349419][ T7919] comedi comedi3: comedi_config --init_data is deprecated
[   99.383318][ T7916] Dev loop2: unable to read RDB block 7
[   99.385553][ T7916]  loop2: unable to read partition table
[   99.385845][ T7919] netlink: 36 bytes leftover after parsing attributes in process `syz.4.540'.
[   99.387420][ T7916] loop2: partition table beyond EOD, truncated
[   99.392048][ T7919] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   99.392537][ T7916] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[   99.471723][ T7929] netem: incorrect ge model size
[   99.474658][ T7929] netem: change failed
[   99.765023][ T7958] vcan0: tx drop: invalid da for name 0x0000000000000003
[   99.922635][ T7948] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=7948 comm=syz.3.550
[   99.922785][ T7948] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=7948 comm=syz.3.550
[   99.923117][ T7948] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=7948 comm=syz.3.550
[  100.043063][   T64] Bluetooth: hci0: command 0x0c1a tx timeout
[  100.116210][ T7982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.116481][ T7982] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.152951][   T34] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  100.302955][   T34] usb 9-1: Using ep0 maxpacket: 16
[  100.305844][   T34] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  100.305860][   T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.305869][   T34] usb 9-1: Product: syz
[  100.305876][   T34] usb 9-1: Manufacturer: syz
[  100.305884][   T34] usb 9-1: SerialNumber: syz
[  100.308669][   T34] usb 9-1: config 0 descriptor??
[  100.312692][   T34] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  100.312718][   T34] em28xx 9-1:0.0: DVB interface 0 found: bulk
[  100.805163][ T7998] ISOFS: Unable to identify CD-ROM format.
[  100.815152][ T8000] netlink: 44 bytes leftover after parsing attributes in process `syz.3.565'.
[  100.818963][ T8000] netlink: 84 bytes leftover after parsing attributes in process `syz.3.565'.
[  100.842975][   T64] Bluetooth: hci2: command 0x0c1a tx timeout
[  100.843052][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout
[  100.852964][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout
[  100.893608][ T8010] FAULT_INJECTION: forcing a failure.
[  100.893608][ T8010] name failslab, interval 1, probability 0, space 0, times 1
[  100.897557][ T8010] CPU: 1 UID: 0 PID: 8010 Comm: syz.0.570 Not tainted syzkaller #0 PREEMPT(full) 
[  100.897570][ T8010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  100.897576][ T8010] Call Trace:
[  100.897590][ T8010]  <TASK>
[  100.897594][ T8010]  dump_stack_lvl+0x16c/0x1f0
[  100.897625][ T8010]  should_fail_ex+0x512/0x640
[  100.897642][ T8010]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  100.897660][ T8010]  should_failslab+0xc2/0x120
[  100.897672][ T8010]  kmem_cache_alloc_noprof+0x75/0x6e0
[  100.897686][ T8010]  ? getname_flags.part.0+0x4c/0x550
[  100.897703][ T8010]  ? getname_flags.part.0+0x4c/0x550
[  100.897716][ T8010]  getname_flags.part.0+0x4c/0x550
[  100.897731][ T8010]  getname_flags+0x93/0xf0
[  100.897741][ T8010]  __x64_sys_renameat2+0xc7/0x130
[  100.897754][ T8010]  do_syscall_64+0xcd/0xfa0
[  100.897765][ T8010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.897775][ T8010] RIP: 0033:0x7fd98578f6c9
[  100.897784][ T8010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.897793][ T8010] RSP: 002b:00007fd9839f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  100.897803][ T8010] RAX: ffffffffffffffda RBX: 00007fd9859e5fa0 RCX: 00007fd98578f6c9
[  100.897809][ T8010] RDX: ffffffffffffff9c RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  100.897815][ T8010] RBP: 00007fd9839f6090 R08: 0000000000000002 R09: 0000000000000000
[  100.897821][ T8010] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000001
[  100.897827][ T8010] R13: 00007fd9859e6038 R14: 00007fd9859e5fa0 R15: 00007fff75971158
[  100.897840][ T8010]  </TASK>
[  100.915789][   T34] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[  101.045050][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'.
[  101.051080][ T8011] overlay: Unknown parameter 'euid>00000000000000000000'
[  101.051764][ T8017] macvlan0: entered promiscuous mode
[  101.057693][ T8017] batadv_slave_1: entered promiscuous mode
[  101.059922][ T8017] batadv_slave_1: left promiscuous mode
[  101.062591][ T8017] macvlan0: left promiscuous mode
[  101.194099][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'.
[  101.200457][ T8017] macvlan0: entered promiscuous mode
[  101.203095][ T8017] batadv_slave_1: entered promiscuous mode
[  101.205134][ T8017] batadv_slave_1: left promiscuous mode
[  101.207180][ T8017] macvlan0: left promiscuous mode
[  101.287307][   T40] kauditd_printk_skb: 37 callbacks suppressed
[  101.287322][   T40] audit: type=1400 audit(1762805492.934:576): avc:  denied  { ioctl } for  pid=8019 comm="syz.2.574" path="socket:[22586]" dev="sockfs" ino=22586 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  101.331222][ T8017] macvlan0: entered promiscuous mode
[  101.335834][ T8017] batadv_slave_1: entered promiscuous mode
[  101.338498][ T8017] batadv_slave_1: left promiscuous mode
[  101.341124][ T8017] macvlan0: left promiscuous mode
[  101.382981][ T8020] netlink: 'syz.2.574': attribute type 10 has an invalid length.
[  101.384729][   T34] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  101.390689][   T34] em28xx 9-1:0.0: board has no eeprom
[  101.391401][ T8020] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  101.391649][ T7971] 9pnet_virtio: no channels available for device syz
[  101.396242][   T40] audit: type=1400 audit(1762805493.044:577): avc:  denied  { append } for  pid=7970 comm="syz.4.558" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  101.411223][ T8017] macvlan0: entered promiscuous mode
[  101.414059][ T8017] batadv_slave_1: entered promiscuous mode
[  101.415996][ T8017] batadv_slave_1: left promiscuous mode
[  101.418393][ T8017] macvlan0: left promiscuous mode
[  101.430755][   T40] audit: type=1400 audit(1762805493.074:578): avc:  denied  { create } for  pid=8021 comm="syz.2.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  101.437718][   T40] audit: type=1400 audit(1762805493.084:579): avc:  denied  { write } for  pid=8021 comm="syz.2.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  101.499180][ T8017] macvlan0: entered promiscuous mode
[  101.502639][ T8017] batadv_slave_1: entered promiscuous mode
[  101.507090][ T8017] batadv_slave_1: left promiscuous mode
[  101.511849][ T8017] macvlan0: left promiscuous mode
[  101.533340][   T34] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  101.536224][   T34] em28xx 9-1:0.0: dvb set to bulk mode.
[  101.538480][ T6007] em28xx 9-1:0.0: Binding DVB extension
[  101.549798][   T34] usb 9-1: USB disconnect, device number 7
[  101.553488][   T34] em28xx 9-1:0.0: Disconnecting em28xx
[  101.579691][ T6007] em28xx 9-1:0.0: Registering input extension
[  101.581974][ T8017] macvlan0: entered promiscuous mode
[  101.582523][   T34] em28xx 9-1:0.0: Closing input extension
[  101.586965][ T8017] batadv_slave_1: entered promiscuous mode
[  101.589863][ T8017] batadv_slave_1: left promiscuous mode
[  101.592593][ T8017] macvlan0: left promiscuous mode
[  101.610802][   T34] em28xx 9-1:0.0: Freeing device
[  101.669321][ T8017] macvlan0: entered promiscuous mode
[  101.671683][ T8017] batadv_slave_1: entered promiscuous mode
[  101.673837][ T8017] batadv_slave_1: left promiscuous mode
[  101.675894][ T8017] macvlan0: left promiscuous mode
[  101.683132][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.687587][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.699457][ T8032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  101.740209][ T8038] geneve2: entered promiscuous mode
[  101.742328][ T8038] geneve2: entered allmulticast mode
[  101.751540][ T8017] macvlan0: entered promiscuous mode
[  101.755177][ T8017] batadv_slave_1: entered promiscuous mode
[  101.757555][ T8017] batadv_slave_1: left promiscuous mode
[  101.790188][ T8044] overlayfs: missing 'lowerdir'
[  101.817634][ T8017] macvlan0: left promiscuous mode
[  101.919290][ T8056] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  101.952661][   T40] audit: type=1400 audit(1762805493.594:580): avc:  denied  { create } for  pid=8055 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  101.991346][ T8063] random: crng reseeded on system resumption
[  102.078309][   T40] audit: type=1400 audit(1762805493.724:581): avc:  denied  { write } for  pid=8069 comm="syz.4.592" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  102.082211][ T8070] random: crng reseeded on system resumption
[  102.098040][   T40] audit: type=1400 audit(1762805493.744:582): avc:  denied  { execmem } for  pid=8073 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  102.133011][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout
[  102.179365][   T40] audit: type=1400 audit(1762805493.824:583): avc:  denied  { unmount } for  pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  102.208577][   T40] audit: type=1400 audit(1762805493.854:584): avc:  denied  { getopt } for  pid=8087 comm="syz.3.599" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  102.212195][ T8088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8088 comm=syz.3.599
[  102.224765][ T8088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8088 comm=syz.3.599
[  102.224895][ T8086] mkiss: ax0: crc mode is auto.
[  102.275592][ T8096] netem: change failed
[  102.294556][ T8096] tmpfs: Bad value for 'mpol'
[  102.553069][ T8114] gtp0: entered promiscuous mode
[  102.579425][   T40] audit: type=1400 audit(1762805494.224:585): avc:  denied  { read write } for  pid=8116 comm="syz.0.607" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  102.802465][ T5939] Bluetooth: hci3: ISO packet for unknown connection handle 3584
[  102.844097][ T8131] overlayfs: failed to resolve './file0/file0': -2
[  102.923494][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout
[  102.923997][   T64] Bluetooth: hci1: command 0x0c1a tx timeout
[  102.933002][   T64] Bluetooth: hci2: command 0x0c1a tx timeout
[  102.941682][ T8134] __nla_validate_parse: 7 callbacks suppressed
[  102.941691][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'.
[  102.947402][ T8134] netlink: 'syz.0.613': attribute type 11 has an invalid length.
[  102.950556][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'.
[  102.954732][ T8134] netlink: 'syz.0.613': attribute type 11 has an invalid length.
[  103.026089][ T8144] cgroup: name respecified
[  103.303882][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'.
[  103.364175][ T8153] hsr_slave_1 (unregistering): left promiscuous mode
[  103.697202][ T8175] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  103.704754][ T8175] fuse: Bad value for 'fd'
[  103.714594][ T8168] netlink: 'syz.3.621': attribute type 4 has an invalid length.
[  103.717828][ T8168] netlink: 17 bytes leftover after parsing attributes in process `syz.3.621'.
[  103.824548][ T8183] netlink: 'syz.4.624': attribute type 10 has an invalid length.
[  103.856468][ T8183] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  103.966046][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.629'.
[  103.977733][ T8189] 8021q: adding VLAN 0 to HW filter on device bond5
[  104.046280][ T8212] sp0: Synchronizing with TNC
[  104.097768][ T8219] netlink: 36 bytes leftover after parsing attributes in process `syz.3.639'.
[  104.137171][ T8226] netlink: 88 bytes leftover after parsing attributes in process `syz.0.640'.
[  104.150278][ T8228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.641'.
[  104.203317][   T64] Bluetooth: hci0: command 0x0c1a tx timeout
[  104.429800][ T8259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28692 sclass=netlink_route_socket pid=8259 comm=syz.0.650
[  104.522540][ T8262] kvm: pic: non byte read
[  104.527275][ T8262] kvm: pic: non byte read
[  104.532169][ T8262] kvm: pic: non byte read
[  104.537770][ T8262] kvm: pic: non byte read
[  104.544534][ T8262] kvm: pic: non byte read
[  104.548668][ T8262] kvm: pic: non byte read
[  104.551616][ T8262] kvm: pic: single mode not supported
[  104.551943][ T8262] kvm: pic: non byte read
[  104.556793][ T8262] kvm: pic: non byte read
[  104.560836][ T8262] kvm: pic: non byte read
[  104.774032][ T8272] overlayfs: missing 'lowerdir'
[  105.013462][   T64] Bluetooth: hci3: command 0x0c1a tx timeout
[  105.013577][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout
[  105.014330][ T5297] Bluetooth: hci1: command 0x0c1a tx timeout
[  105.302615][ T8307] FAULT_INJECTION: forcing a failure.
[  105.302615][ T8307] name failslab, interval 1, probability 0, space 0, times 0
[  105.309349][ T8307] CPU: 0 UID: 0 PID: 8307 Comm: syz.0.666 Not tainted syzkaller #0 PREEMPT(full) 
[  105.309373][ T8307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  105.309383][ T8307] Call Trace:
[  105.309400][ T8307]  <TASK>
[  105.309408][ T8307]  dump_stack_lvl+0x16c/0x1f0
[  105.309456][ T8307]  should_fail_ex+0x512/0x640
[  105.309483][ T8307]  ? kmem_cache_alloc_lru_noprof+0x66/0x6e0
[  105.309514][ T8307]  should_failslab+0xc2/0x120
[  105.309534][ T8307]  kmem_cache_alloc_lru_noprof+0x79/0x6e0
[  105.309561][ T8307]  ? __lock_acquire+0x622/0x1c90
[  105.309576][ T8307]  ? __d_alloc+0x32/0xae0
[  105.309601][ T8307]  ? __d_alloc+0x32/0xae0
[  105.309618][ T8307]  __d_alloc+0x32/0xae0
[  105.309641][ T8307]  d_alloc_parallel+0x111/0x1510
[  105.309668][ T8307]  ? avc_has_perm_noaudit+0x117/0x3b0
[  105.309696][ T8307]  ? map_id_range_up+0x2ce/0x3b0
[  105.309719][ T8307]  ? __pfx_d_alloc_parallel+0x10/0x10
[  105.309746][ T8307]  ? lockdep_init_map_type+0x5c/0x280
[  105.309764][ T8307]  ? lockdep_init_map_type+0x5c/0x280
[  105.309786][ T8307]  __lookup_slow+0x193/0x460
[  105.309812][ T8307]  ? __pfx___lookup_slow+0x10/0x10
[  105.309839][ T8307]  ? shmem_link+0x500/0x530
[  105.309870][ T8307]  ? shmem_link+0x500/0x530
[  105.309894][ T8307]  ? d_lookup+0xe7/0x190
[  105.309944][ T8307]  lookup_one_unlocked+0xd4/0x120
[  105.309970][ T8307]  ovl_lookup_single+0x435/0x1330
[  105.310007][ T8307]  ? __pfx_ovl_lookup_single+0x10/0x10
[  105.310043][ T8307]  ovl_lookup_layer+0x3d4/0x480
[  105.310076][ T8307]  ? __pfx_ovl_lookup_layer+0x10/0x10
[  105.310111][ T8307]  ovl_lookup+0x5bc/0x21a0
[  105.310129][ T8307]  ? find_held_lock+0x2b/0x80
[  105.310158][ T8307]  ? __pfx_ovl_lookup+0x10/0x10
[  105.310180][ T8307]  ? __lock_acquire+0xb8a/0x1c90
[  105.310202][ T8307]  ? rcu_is_watching+0x12/0xc0
[  105.310229][ T8307]  ? do_raw_spin_lock+0x12c/0x2b0
[  105.310256][ T8307]  ? do_raw_spin_unlock+0x172/0x230
[  105.310276][ T8307]  ? _raw_spin_unlock+0x28/0x50
[  105.310305][ T8307]  lookup_one_qstr_excl+0x1d1/0x250
[  105.310340][ T8307]  ? mnt_want_write+0x161/0x450
[  105.310370][ T8307]  do_renameat2+0x575/0xc20
[  105.310399][ T8307]  ? __pfx_do_renameat2+0x10/0x10
[  105.310421][ T8307]  ? find_held_lock+0x2b/0x80
[  105.310441][ T8307]  ? __might_fault+0xe3/0x190
[  105.310466][ T8307]  ? __might_fault+0x13b/0x190
[  105.310504][ T8307]  ? getname_flags.part.0+0x1c5/0x550
[  105.310534][ T8307]  __x64_sys_renameat2+0xe7/0x130
[  105.310557][ T8307]  do_syscall_64+0xcd/0xfa0
[  105.310577][ T8307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.310595][ T8307] RIP: 0033:0x7fd98578f6c9
[  105.310610][ T8307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.310625][ T8307] RSP: 002b:00007fd9839f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  105.310642][ T8307] RAX: ffffffffffffffda RBX: 00007fd9859e5fa0 RCX: 00007fd98578f6c9
[  105.310653][ T8307] RDX: ffffffffffffff9c RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  105.310665][ T8307] RBP: 00007fd9839f6090 R08: 0000000000000002 R09: 0000000000000000
[  105.310675][ T8307] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000001
[  105.310685][ T8307] R13: 00007fd9859e6038 R14: 00007fd9859e5fa0 R15: 00007fff75971158
[  105.310711][ T8307]  </TASK>
[  105.444480][    C0] vkms_vblank_simulate: vblank timer overrun
[  105.479468][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.483233][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.646578][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'.
[  105.693324][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'.
[  105.696916][ T8316] netlink: 'syz.2.670': attribute type 30 has an invalid length.
[  105.705696][ T1151] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.709607][ T1151] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.714284][ T1151] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.718239][ T1151] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.743253][   T60] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  105.910379][   T60] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  105.913881][   T60] usb 5-1: config 0 has no interface number 0
[  105.916614][   T60] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  105.921305][   T60] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  105.926783][   T60] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  105.930711][   T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.938366][   T60] usb 5-1: config 0 descriptor??
[  105.941314][ T8312] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  105.954739][   T60] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  106.076747][ T8335] netlink: 'syz.3.678': attribute type 11 has an invalid length.
[  106.077771][ T8335] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) !
[  106.134805][ T8344] SELinux:  Context system_u:object_r:auditd_var_run_t:s0 is not valid (left unmapped).
[  106.142688][ T8342] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  106.148708][ T8312] MTD: Couldn't look up '/dev/sg0': -15
[  106.148737][ T8312] /dev/sg0: Can't lookup blockdev
[  106.153182][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  106.180310][ T8344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8344 comm=syz.4.680
[  106.181475][   T64] Bluetooth: hci4: sending frame failed (-49)
[  106.182007][ T5939] Bluetooth: hci4: Opcode 0x1003 failed: -49
[  106.213793][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  106.241192][ T8348] syzkaller1: entered promiscuous mode
[  106.241207][ T8348] syzkaller1: entered allmulticast mode
[  106.280744][   T34] usb 5-1: USB disconnect, device number 3
[  106.294654][   T40] kauditd_printk_skb: 201 callbacks suppressed
[  106.294669][   T40] audit: type=1400 audit(1762805497.934:787): avc:  denied  { rmdir } for  pid=6375 comm="syz-executor" name="file0" dev="tmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_var_run_t:s0"
[  106.336974][   T40] audit: type=1400 audit(1762805497.964:788): avc:  denied  { create } for  pid=8352 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  106.337016][   T40] audit: type=1400 audit(1762805497.964:789): avc:  denied  { connect } for  pid=8352 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  106.378946][   T40] audit: type=1400 audit(1762805498.024:790): avc:  denied  { write } for  pid=8352 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  106.408642][   T40] audit: type=1400 audit(1762805498.054:791): avc:  denied  { sys_module } for  pid=8352 comm="syz.4.682" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  106.410628][   T40] audit: type=1400 audit(1762805498.054:792): avc:  denied  { mount } for  pid=8359 comm="syz.3.684" name="/" dev="9p" ino=71827767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  106.424708][   T40] audit: type=1400 audit(1762805498.074:793): avc:  denied  { unmount } for  pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  106.617565][   T40] audit: type=1400 audit(1762805498.264:794): avc:  denied  { read write } for  pid=8363 comm="syz.4.686" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  106.633421][   T40] audit: type=1400 audit(1762805498.264:795): avc:  denied  { open } for  pid=8363 comm="syz.4.686" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  106.672584][   T40] audit: type=1400 audit(1762805498.314:796): avc:  denied  { setopt } for  pid=8368 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  106.676787][ T8369] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  106.686665][ T8369] Cannot find set identified by id 3 to match
[  106.705050][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  106.707790][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  106.710602][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  106.714172][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  106.716506][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  106.718835][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  106.721181][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  106.723889][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  106.726235][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7
[  106.728533][ T5999] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  106.741147][ T5999] hid-generic 0000:0000:0000.0002: hidraw1: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  106.774439][ T8376] fido_id[8376]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  106.856917][ T8386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.864655][ T8386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.876319][ T8386] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  106.888094][ T8386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.892625][ T8386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.083170][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout
[  107.083246][   T64] Bluetooth: hci1: command 0x0c1a tx timeout
[  107.265961][ T8403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.268890][ T8403] IPv6: NLM_F_CREATE should be set when creating new route
[  107.271479][ T8403] IPv6: NLM_F_CREATE should be set when creating new route
[  107.274203][ T8403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.280328][ T8404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.283058][ T8404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.441410][ T8412] netlink: 'syz.3.701': attribute type 4 has an invalid length.
[  107.447943][ T8412] netlink: 'syz.3.701': attribute type 4 has an invalid length.
[  107.458367][ T8412] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  107.461751][ T8412] overlayfs: failed to set xattr on upper
[  107.465540][ T8412] overlayfs: ...falling back to redirect_dir=nofollow.
[  107.467823][ T8412] overlayfs: ...falling back to index=off.
[  107.469662][ T8412] overlayfs: ...falling back to uuid=null.
[  107.471437][ T8412] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  107.537332][ T8420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.814396][ T8438] netlink: 'syz.4.711': attribute type 1 has an invalid length.
[  107.849456][ T8438] bond1: (slave geneve2): making interface the new active one
[  107.853189][ T8438] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  107.856766][ T1151] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  107.860449][ T1151] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  107.865123][ T1151] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  107.868769][ T1151] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  108.265365][ T8472] __nla_validate_parse: 4 callbacks suppressed
[  108.265375][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'.
[  108.270606][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.722'.
[  108.324465][ T8475] ip6erspan0: entered promiscuous mode
[  108.329679][ T8475] binder: 8474:8475 ioctl c0306201 200000000700 returned -14
[  108.331515][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'.
[  108.344083][ T8477] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  108.351025][ T8477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.355151][ T8477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.552580][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'.
[  108.921001][ T8504] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  108.927006][ T8504] netlink: 48 bytes leftover after parsing attributes in process `syz.0.733'.
[  108.934566][ T8506] netlink: 6 bytes leftover after parsing attributes in process `syz.2.732'.
[  108.938364][ T8506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  108.960538][ T8510] netlink: 'syz.4.735': attribute type 10 has an invalid length.
[  108.977638][ T8510] team0: Port device netdevsim0 added
[  109.082432][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.737'.
[  109.216562][ T8551] netlink: 164 bytes leftover after parsing attributes in process `syz.4.745'.
[  109.360290][ T8578] netlink: 56 bytes leftover after parsing attributes in process `syz.0.753'.
[  109.390148][ T8582] netlink: 'syz.2.754': attribute type 1 has an invalid length.
[  109.391676][ T8581] netlink: 40 bytes leftover after parsing attributes in process `syz.2.754'.
[  109.411236][ T8582] 8021q: adding VLAN 0 to HW filter on device bond6
[  109.460986][ T8580] veth1: entered promiscuous mode
[  109.515245][ T8580] vlan2: entered allmulticast mode
[  109.517342][ T8580] bond6: entered allmulticast mode
[  109.728679][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.731627][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.734627][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.736909][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.739042][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.741224][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.744556][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.747178][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.749521][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.751694][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.753953][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.756136][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.758288][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.760621][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.763175][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.765837][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.768527][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.771220][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.773996][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.776616][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.779270][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.781936][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.784486][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.786896][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.789177][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.791641][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.793758][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.796165][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.798831][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.801437][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.804326][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.807726][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.810818][   T64] Bluetooth: hci1: unexpected event for opcode 0x1408
[  109.908317][ T8633] openvswitch: netlink: IP tunnel dst address not specified
[  110.032039][ T8642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37165 sclass=netlink_route_socket pid=8642 comm=syz.3.768
[  110.108887][ T8664] netlink: 'syz.0.773': attribute type 4 has an invalid length.
[  110.115178][ T8664] netlink: 'syz.0.773': attribute type 4 has an invalid length.
[  110.246152][ T8682] /dev/sg0: Can't lookup blockdev
[  110.249633][ T8682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8682 comm=syz.3.776
[  110.260901][ T8682] pimreg: entered allmulticast mode
[  110.268460][ T8681] pimreg: left allmulticast mode
[  110.418210][ T8696] netlink: 'syz.3.781': attribute type 10 has an invalid length.
[  110.420883][ T8696] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  110.423629][ T8696] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  110.426941][ T8696] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  110.449446][ T8701] binder: BINDER_SET_CONTEXT_MGR already set
[  110.451609][ T8701] binder: 8700:8701 ioctl 4018620d 2000000000c0 returned -16
[  110.454538][ T8701] binder: BINDER_SET_CONTEXT_MGR already set
[  110.455902][ T8703] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  110.456924][ T8701] binder: 8700:8701 ioctl 4018620d 2000000000c0 returned -16
[  110.832955][   T34] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  110.982969][   T34] usb 9-1: device descriptor read/64, error -71
[  111.099554][ T8722] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«=
[  111.102458][ T8722] [U] J"—e:ÀÆ"


[  111.223030][   T34] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  111.363051][   T34] usb 9-1: device descriptor read/64, error -71
[  111.483629][   T34] usb usb9-port1: attempt power cycle
[  111.612402][   T40] kauditd_printk_skb: 97 callbacks suppressed
[  111.612417][   T40] audit: type=1400 audit(1762805503.254:894): avc:  denied  { nlmsg_read } for  pid=8737 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  111.623782][   T40] audit: type=1400 audit(1762805503.264:895): avc:  denied  { bind } for  pid=8737 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  111.678627][   T40] audit: type=1400 audit(1762805503.324:896): avc:  denied  { write } for  pid=8741 comm="syz.0.795" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  111.712931][   T40] audit: type=1400 audit(1762805503.354:897): avc:  denied  { map } for  pid=8741 comm="syz.0.795" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  111.755176][   T40] audit: type=1400 audit(1762805503.404:898): avc:  denied  { ioctl } for  pid=8745 comm="syz.3.797" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  111.765676][   T40] audit: type=1400 audit(1762805503.404:899): avc:  denied  { ioctl } for  pid=8745 comm="syz.3.797" path="socket:[26249]" dev="sockfs" ino=26249 ioctlcmd=0x8942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  111.776142][   T40] audit: type=1400 audit(1762805503.404:900): avc:  denied  { append } for  pid=8745 comm="syz.3.797" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  111.787098][   T40] audit: type=1400 audit(1762805503.404:901): avc:  denied  { read } for  pid=8745 comm="syz.3.797" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  111.796840][   T40] audit: type=1400 audit(1762805503.414:902): avc:  denied  { bind } for  pid=8747 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  111.805083][   T40] audit: type=1400 audit(1762805503.414:903): avc:  denied  { name_bind } for  pid=8747 comm="syz.0.798" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  111.823003][   T34] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  111.855284][   T34] usb 9-1: device descriptor read/8, error -71
[  112.102963][   T34] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  112.125767][   T34] usb 9-1: device descriptor read/8, error -71
[  112.244020][   T34] usb usb9-port1: unable to enumerate USB device
[  113.282933][ T6018] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  113.413026][ T6018] usb 9-1: device descriptor read/64, error -71
[  113.875272][ T8801] [U] zÍ»´iœùÊý®Ò[27|
[  113.876978][ T8801] [U] ‘BsŠ«w×AÓer®ÇOU�]~èAÖö`1e…ÊX™!�Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµ�h$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®�<ï
[  113.881475][ T8801] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„
[  113.884122][ T8801] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚL�h»�c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i'„j«ž3€e=:3à/ÒCœ_ßÍ<i�eT^ó×.íéŠq9!´Ëc±¡�7Q��áuR›`ÖÀîSúø+ZÕ	Ø
[  113.890265][ T8801] [U] T»qtÁvèbÀ–—Ý|Û@ÏÜD D�†E/Qšu’Ù�
3Ô裠��2’±Ÿõ°…y…rrÇ|l;6êD‹Ûûš¡%×ËjKƒ›ì‘Æ·2A[Œ‡ikuCñÝë��-T1xïT·�Ìvµ‘“3ãîl<£Ž3ΑØâKÆÃŒ5IÐ.“�>¯ 81ë(FW
[  113.895582][ T8801] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný
@ox²;JD‡¶ ¹ƒ,
[  113.897570][ T8801] [U] *CÃn¯3¿Àv7‰K�E¯Xgt_3êê§ëé
[  113.899253][ T8801] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£�s«=óR@
[  113.901277][ T8801] [U] ‰ϼcEv‹û@ý
[  113.902534][ T8801] [U] aÆ
„%
[  113.903724][ T8801] [U] ’@¿Ëø±·’äæëcÃ�_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@	o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~W�ìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª`
[  113.909702][ T8801] [U] éf1Ïp±3
[  113.910802][ T8801] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï×
[  113.912475][ T8801] [U] �Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è
[  113.915959][ T8801] __nla_validate_parse: 45 callbacks suppressed
[  113.915972][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'.
[  113.926705][ T8801] netlink: 244 bytes leftover after parsing attributes in process `syz.4.818'.
[  113.930344][ T8800] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôô�ádmÿ�¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀ
í·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎�ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ	ŸÜ�X†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬�Ý{»›‡n
[  113.992275][ T8809] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  113.998000][ T8810] netlink: 'syz.4.821': attribute type 10 has an invalid length.
[  113.998407][ T8810] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.003438][ T8810] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.009769][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.012030][ T8810] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.015306][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.017551][ T8810] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.022165][ T8810] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  114.040728][ T8809] kvm: emulating exchange as write
[  114.044325][ T8805] overlayfs: statfs failed on './file0'
[  114.065104][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.822'.
[  114.068663][ T8815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.822'.
[  114.493420][ T8792] usb usb9: usbfs: process 8792 (syz.0.812) did not claim interface 0 before use
[  114.902464][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.834'.
[  114.932206][ T8855] binder: 8852:8855 unknown command 0
[  114.934884][ T8854] binder: 8852:8854 unknown command 0
[  114.936452][ T8854] binder: 8852:8854 ioctl c0306201 200000000080 returned -22
[  114.937502][ T8855] binder: 8852:8855 ioctl c0306201 200000000080 returned -22
[  114.982503][ T8854] binder: 8852:8854 ioctl c0184800 200000000280 returned -22
[  115.062236][ T8869] netlink: 'syz.2.839': attribute type 1 has an invalid length.
[  115.116479][ T8874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.839'.
[  115.239051][ T8881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.839'.
[  115.289491][ T8869] bond7: entered promiscuous mode
[  115.291383][ T8869] 8021q: adding VLAN 0 to HW filter on device bond7
[  115.295991][ T8874] bond7: entered allmulticast mode
[  115.486763][ T8897] netlink: 76 bytes leftover after parsing attributes in process `syz.4.847'.
[  115.552354][ T8901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.667433][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'.
[  115.782669][ T8931] netlink: 72 bytes leftover after parsing attributes in process `syz.0.857'.
[  115.866036][ T8943] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  116.149652][ T8967] netlink: 'syz.2.863': attribute type 1 has an invalid length.
[  116.329795][ T8977] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0
[  116.783537][   T40] kauditd_printk_skb: 40 callbacks suppressed
[  116.783552][   T40] audit: type=1400 audit(1762805508.434:944): avc:  denied  { getopt } for  pid=8998 comm="syz.0.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  116.822360][   T40] audit: type=1400 audit(1762805508.464:945): avc:  denied  { append } for  pid=9000 comm="syz.0.875" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  116.826125][ T9001] pim6reg13: entered allmulticast mode
[  116.905681][ T9015] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  116.926658][ T9019] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  116.942061][ T9019] mkiss: ax0: crc mode is auto.
[  116.942465][   T40] audit: type=1400 audit(1762805508.584:946): avc:  denied  { read } for  pid=5649 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  117.091368][ T9025] overlayfs: missing 'lowerdir'
[  117.131456][   T40] audit: type=1400 audit(1762805508.774:947): avc:  denied  { getopt } for  pid=9034 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  117.154313][   T40] audit: type=1400 audit(1762805508.804:948): avc:  denied  { search } for  pid=5649 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.161241][   T40] audit: type=1400 audit(1762805508.804:949): avc:  denied  { search } for  pid=5649 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.172067][   T40] audit: type=1400 audit(1762805508.804:950): avc:  denied  { search } for  pid=5649 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.182566][   T40] audit: type=1400 audit(1762805508.804:951): avc:  denied  { read } for  pid=5649 comm="dhcpcd" name="n114" dev="tmpfs" ino=5627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  117.187994][ T9043] netlink: 'syz.4.887': attribute type 10 has an invalid length.
[  117.190789][   T40] audit: type=1400 audit(1762805508.804:952): avc:  denied  { open } for  pid=5649 comm="dhcpcd" path="/run/udev/data/n114" dev="tmpfs" ino=5627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  117.197981][ T9043] batadv0: entered promiscuous mode
[  117.202122][   T40] audit: type=1400 audit(1762805508.804:953): avc:  denied  { getattr } for  pid=5649 comm="dhcpcd" path="/run/udev/data/n114" dev="tmpfs" ino=5627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  117.203441][ T9043] batadv0: entered allmulticast mode
[  117.215176][ T9043] bridge0: port 3(batadv0) entered blocking state
[  117.222180][ T9043] bridge0: port 3(batadv0) entered disabled state
[  117.227097][ T9043] bridge0: port 3(batadv0) entered blocking state
[  117.229431][ T9043] bridge0: port 3(batadv0) entered forwarding state
[  117.242766][ T9049] 9p: Unknown Cache mode or invalid value fs
[  117.407074][ T9077] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  117.411012][ T9077] overlayfs: missing 'lowerdir'
[  117.444767][ T1151] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  117.448457][ T1151] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  117.483247][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.681351][ T9091] netlink: 'syz.4.901': attribute type 39 has an invalid length.
[  117.771950][ T9094] SELinux:  Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped).
[  117.884133][ T9104] netlink: 'syz.3.904': attribute type 2 has an invalid length.
[  117.888599][ T9104] netlink: 'syz.3.904': attribute type 1 has an invalid length.
[  117.944812][ T9107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=9107 comm=syz.3.904
[  117.950559][ T9109] netlink: 'syz.3.904': attribute type 2 has an invalid length.
[  118.004748][ T9117] program syz.3.907 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  118.058570][ T9119] netlink: 'syz.0.908': attribute type 1 has an invalid length.
[  118.082312][ T9119] 8021q: adding VLAN 0 to HW filter on device bond7
[  118.086936][ T9119] bond6: (slave bond7): making interface the new active one
[  118.090457][ T9119] bond6: (slave bond7): Enslaving as an active interface with an up link
[  118.279918][ T9130] hsr_slave_0: left promiscuous mode
[  118.282397][ T9130] hsr_slave_1: left promiscuous mode
[  118.397106][ T9132] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  118.559877][    C2] Illegal XDP return value 16128 on prog  (id 129) dev lo, expect packet loss!
[  118.695873][ T9139] trusted_key: syz.0.915 sent an empty control message without MSG_MORE.
[  119.236560][ T9148] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  119.279272][ T9153] bridge0: port 4(veth0_to_bridge) entered blocking state
[  119.281625][ T9153] bridge0: port 4(veth0_to_bridge) entered disabled state
[  119.284719][ T9153] veth0_to_bridge: entered allmulticast mode
[  119.287665][ T9153] veth0_to_bridge: entered promiscuous mode
[  119.289838][ T9153] bridge0: port 4(veth0_to_bridge) entered blocking state
[  119.292083][ T9153] bridge0: port 4(veth0_to_bridge) entered forwarding state
[  119.324167][   T64] Bluetooth: hci2: unexpected event for opcode 0x1005
[  119.386472][   T64] Bluetooth: hci2: unexpected event for opcode 0x1005
[  119.426765][ T9162] loop2: detected capacity change from 0 to 7
[  119.430174][ T9162] Dev loop2: unable to read RDB block 7
[  119.432007][ T9162]  loop2: AHDI p1 p2 p3
[  119.433575][ T9162] loop2: partition table partially beyond EOD, truncated
[  119.437185][ T9162] loop2: p1 start 1601398130 is beyond EOD, truncated
[  119.439383][ T9162] loop2: p2 start 1702059890 is beyond EOD, truncated
[  119.548099][ T9165] overlayfs: failed to resolve './file0': -2
[  119.702564][ T9177] QAT: Stopping all acceleration devices.
[  119.745283][ T9183] netlink: 'syz.0.927': attribute type 1 has an invalid length.
[  119.745323][ T9184] netlink: 'syz.0.927': attribute type 1 has an invalid length.
[  119.758306][ T9183] 8021q: adding VLAN 0 to HW filter on device bond8
[  119.786547][ T9183] veth3: entered promiscuous mode
[  119.821245][ T9184] __nla_validate_parse: 12 callbacks suppressed
[  119.821258][ T9184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.927'.
[  119.821656][ T9190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.927'.
[  119.841281][ T9182] delete_channel: no stack
[  119.888067][ T9196] exFAT-fs (nullb0): invalid boot record signature
[  119.890972][ T9196] exFAT-fs (nullb0): failed to read boot sector
[  119.894127][ T9196] exFAT-fs (nullb0): failed to recognize exfat type
[  119.902106][ T9196] netlink: 'syz.4.929': attribute type 322 has an invalid length.
[  120.329297][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.939'.
[  120.337243][ T9229] xfrm2: entered promiscuous mode
[  120.339034][ T9229] xfrm2: entered allmulticast mode
[  120.357303][ T9231] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.361423][ T9231] batadv_slave_0: entered promiscuous mode
[  120.363529][ T9231] batadv_slave_0: entered allmulticast mode
[  120.369239][ T9233] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  120.413956][ T9237] 9pnet_fd: Insufficient options for proto=fd
[  120.690524][ T9253] unsupported nla_type 4111
[  120.830631][ T9260] netlink: 56 bytes leftover after parsing attributes in process `syz.0.950'.
[  121.107818][   T64] Bluetooth: hci2: unexpected event for opcode 0x0210
[  121.146928][ T9268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.953'.
[  121.177345][ T9268] bond1: option primary_reselect: invalid value (133)
[  121.181896][ T9268] bond1 (unregistering): Released all slaves
[  121.461128][ T9289] netlink: 64 bytes leftover after parsing attributes in process `syz.2.960'.
[  121.522380][ T9297] overlayfs: failed to get inode (-116)
[  121.525747][ T9297] overlayfs: failed to get inode (-116)
[  121.533916][ T9297] overlayfs: failed to get inode (-116)
[  121.534171][ T9297] overlayfs: failed to get inode (-116)
[  121.534575][ T9297] overlayfs: failed to get inode (-116)
[  121.535600][ T9297] overlayfs: failed to get inode (-116)
[  121.883478][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  121.887621][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  121.891551][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  121.895781][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  121.900284][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  121.904849][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  121.908698][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  121.913589][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  121.917476][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  121.921344][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  122.100328][   T40] kauditd_printk_skb: 45 callbacks suppressed
[  122.100340][   T40] audit: type=1400 audit(1762805513.744:999): avc:  denied  { accept } for  pid=9326 comm="syz.0.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  122.103286][ T9327] program syz.0.972 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.200656][   T40] audit: type=1400 audit(1762805513.844:1000): avc:  denied  { mounton } for  pid=9332 comm="syz.0.974" path="/280/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  122.202641][ T9333] overlay: filesystem on ./file0 not supported as upperdir
[  122.210907][   T40] audit: type=1400 audit(1762805513.844:1001): avc:  denied  { watch watch_reads } for  pid=9332 comm="syz.0.974" path="/280/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  122.624266][ T9319] 9pnet_fd: p9_fd_create_tcp (9319): problem connecting socket to 127.0.0.1
[  122.692037][ T9346] netlink: 48 bytes leftover after parsing attributes in process `syz.3.977'.
[  122.694960][   T40] audit: type=1400 audit(1762805514.344:1002): avc:  denied  { accept } for  pid=9345 comm="syz.3.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  122.706575][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.977'.
[  122.941193][ T9343] 8021q: adding VLAN 0 to HW filter on device bond2
[  122.945073][ T9343] bond0: (slave bond2): Enslaving as an active interface with an up link
[  123.036105][ T9364] XFS (nullb0): Invalid superblock magic number
[  123.184146][   T40] audit: type=1400 audit(1762805514.834:1003): avc:  denied  { map } for  pid=9370 comm="syz.4.983" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  123.185067][ T9371] binder: BC_ACQUIRE_RESULT not supported
[  123.193901][ T9371] binder: 9370:9371 ioctl c0306201 2000000001c0 returned -22
[  123.504760][   T40] audit: type=1400 audit(1762805515.154:1004): avc:  denied  { read append } for  pid=9386 comm="syz.3.989" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  123.511912][   T40] audit: type=1400 audit(1762805515.154:1005): avc:  denied  { open } for  pid=9386 comm="syz.3.989" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  123.999928][ T9400] tipc: Started in network mode
[  124.002101][ T9400] tipc: Node identity 563c24b1070c, cluster identity 4711
[  124.005199][ T9400] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.031547][   T93] tipc: Resetting bearer <eth:syzkaller0>
[  124.101794][ T9399] tipc: Resetting bearer <eth:syzkaller0>
[  124.478708][ T9404] tmpfs: Bad value for 'mpol'
[  124.813090][   T40] audit: type=1400 audit(1762805516.454:1006): avc:  denied  { getopt } for  pid=9411 comm="syz.4.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  124.819199][   T40] audit: type=1400 audit(1762805516.464:1007): avc:  denied  { module_load } for  pid=9411 comm="syz.4.999" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1
[  124.819512][ T9414] kernel read not supported for file /policy (pid: 9414 comm: syz.4.999)
[  124.900100][ T9416] netlink: 'syz.4.999': attribute type 10 has an invalid length.
[  124.908596][ T9416] netlink: 40 bytes leftover after parsing attributes in process `syz.4.999'.
[  124.913907][ T9417] netlink: 'syz.2.998': attribute type 4 has an invalid length.
[  125.102389][ T6018] tipc: Node number set to 1362109617
[  126.892919][    C0] net_ratelimit: 34798 callbacks suppressed
[  126.892931][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  126.898757][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  126.902574][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  126.906443][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  126.910277][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  126.914109][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  126.917909][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  126.921919][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  126.925824][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  126.929752][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  127.709099][ T9399] tipc: Disabling bearer <eth:syzkaller0>
[  127.759419][ T9414] bridge0: port 4(veth0_to_bridge) entered disabled state
[  127.761766][ T9414] bridge0: port 3(batadv0) entered disabled state
[  127.763915][ T9414] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.826864][ T9423] qnx6: unable to set blocksize
[  128.084554][   T40] audit: type=1400 audit(1762805519.734:1008): avc:  denied  { listen } for  pid=9442 comm="syz.3.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  128.207326][ T9457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=9457 comm=syz.2.1010
[  128.223018][ T6301] batman_adv: batadv0: IGMP Querier appeared
[  128.225520][ T6301] batman_adv: batadv0: MLD Querier appeared
[  128.664027][   T40] audit: type=1400 audit(1762805520.314:1009): avc:  denied  { watch watch_reads } for  pid=9464 comm="syz.3.1013" path="pipe:[3007]" dev="pipefs" ino=3007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  128.673848][   T40] audit: type=1400 audit(1762805520.314:1010): avc:  denied  { relabelfrom } for  pid=9464 comm="syz.3.1013" name="" dev="pipefs" ino=31396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  128.758621][ T9439] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  128.838246][   T40] audit: type=1400 audit(1762805520.484:1011): avc:  denied  { setopt } for  pid=9469 comm="syz.4.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  128.890475][   T40] audit: type=1400 audit(1762805520.534:1012): avc:  denied  { map } for  pid=9473 comm="syz.0.1016" path="socket:[30604]" dev="sockfs" ino=30604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  128.948338][   T40] audit: type=1400 audit(1762805520.594:1013): avc:  denied  { setopt } for  pid=9473 comm="syz.0.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  128.971949][ T9477] SELinux: syz.2.1017 (9477) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  129.319869][ T9487] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1020'.
[  129.369974][   T40] audit: type=1400 audit(1762805521.014:1014): avc:  denied  { sqpoll } for  pid=9492 comm="syz.0.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  129.508086][   T40] audit: type=1400 audit(1762805521.154:1015): avc:  denied  { ioctl } for  pid=9497 comm="syz.0.1023" path="socket:[30625]" dev="sockfs" ino=30625 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  129.869781][ T9514] overlay: Unknown parameter 'pcr'
[  129.872153][   T40] audit: type=1400 audit(1762805521.514:1016): avc:  denied  { mounton } for  pid=9508 comm="syz.0.1026" path="/298/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  129.882619][ T9514] kvm: kvm [9508]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xa
[  129.959264][ T9519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=9519 comm=syz.4.1029
[  129.964796][   T64] Bluetooth: hci0: command 0x0c1a tx timeout
[  130.222963][ T6018] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[  130.376624][ T6018] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  130.381279][ T6018] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  130.385877][ T6018] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  130.389663][ T6018] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.395913][ T9519] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  130.399112][ T9519] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  130.404988][ T6018] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  130.607280][ T5802] usb 9-1: USB disconnect, device number 14
[  130.851151][ T9537] netlink: 'syz.0.1033': attribute type 4 has an invalid length.
[  130.856403][ T9537] netlink: 'syz.0.1033': attribute type 4 has an invalid length.
[  131.315156][   T40] audit: type=1400 audit(1762805522.964:1017): avc:  denied  { bind } for  pid=9552 comm="syz.0.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  131.324371][ T9553] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  131.465103][ T9560] netlink: 'syz.4.1042': attribute type 3 has an invalid length.
[  131.468039][ T9560] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1042'.
[  131.789642][ T9578] program syz.4.1049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  131.823495][ T6018] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  131.974484][ T9586] SELinux:  policydb magic number 0x757cff8c does not match expected magic number 0xf97cff8c
[  131.978467][ T9586] SELinux: failed to load policy
[  131.983363][ T6018] usb 5-1: Using ep0 maxpacket: 8
[  131.990858][ T6018] usb 5-1: unable to get BOS descriptor or descriptor too short
[  131.993911][ T6018] usb 5-1: no configurations
[  131.995596][ T6018] usb 5-1: can't read configurations, error -22
[  132.832971][ T6018] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  132.919266][ T9616] mkiss: ax0: crc mode is auto.
[  132.993188][ T6018] usb 5-1: Using ep0 maxpacket: 8
[  132.997007][ T6018] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  133.000468][ T6018] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  133.004767][ T6018] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  133.008816][ T6018] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  133.012816][ T6018] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  133.014676][ T9621] binder: BINDER_SET_CONTEXT_MGR already set
[  133.018157][ T6018] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  133.020605][ T9621] binder: 9619:9621 ioctl 4018620d 200000000100 returned -16
[  133.027711][ T6018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.078510][ T9625] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  133.082584][ T9625] block device autoloading is deprecated and will be removed.
[  133.244527][ T9591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.248696][ T9591] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.253137][ T9591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.257145][ T9591] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.261632][ T9591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.265640][ T9591] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.268351][ T9634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1066'.
[  133.269716][ T9591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.275513][ T9591] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.282130][ T9591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.285871][ T9591] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.306011][ T6018] usb 5-1: usb_control_msg returned -32
[  133.308386][ T6018] usbtmc 5-1:16.0: can't read capabilities
[  133.333140][ T5999] usb 5-1: USB disconnect, device number 5
[  133.390611][ T9650] overlayfs: failed to resolve './file0': -2
[  133.546603][ T9653] kvm: kvm [9652]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  133.549939][ T9653] kvm: kvm [9652]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  133.589508][   T40] kauditd_printk_skb: 17 callbacks suppressed
[  133.589518][   T40] audit: type=1400 audit(1762805525.234:1035): avc:  denied  { create } for  pid=9652 comm="syz.4.1071" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  133.598533][   T40] audit: type=1400 audit(1762805525.234:1036): avc:  denied  { read write } for  pid=9652 comm="syz.4.1071" name="file0" dev="tmpfs" ino=1390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  133.607991][   T40] audit: type=1400 audit(1762805525.234:1037): avc:  denied  { open } for  pid=9652 comm="syz.4.1071" path="/245/file0" dev="tmpfs" ino=1390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  133.769134][   T40] audit: type=1400 audit(1762805525.414:1038): avc:  denied  { unlink } for  pid=6375 comm="syz-executor" name="file0" dev="tmpfs" ino=1390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  133.827471][   T40] audit: type=1400 audit(1762805525.474:1039): avc:  denied  { write } for  pid=9666 comm="syz.3.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  133.877851][ T9674] netlink: 'syz.4.1077': attribute type 2 has an invalid length.
[  133.880634][ T9674] netlink: 'syz.4.1077': attribute type 2 has an invalid length.
[  133.881893][   T40] audit: type=1400 audit(1762805525.524:1040): avc:  denied  { getopt } for  pid=9666 comm="syz.3.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  133.884107][ T9674] netlink: 'syz.4.1077': attribute type 1 has an invalid length.
[  133.896153][ T9674] netlink: 'syz.4.1077': attribute type 1 has an invalid length.
[  133.899095][ T9674] netlink: 'syz.4.1077': attribute type 1 has an invalid length.
[  133.916897][   T40] audit: type=1400 audit(1762805525.564:1041): avc:  denied  { accept } for  pid=9673 comm="syz.4.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  134.009197][   T40] audit: type=1400 audit(1762805525.654:1042): avc:  denied  { getopt } for  pid=9681 comm="syz.4.1079" lport=42985 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  134.019113][   T40] audit: type=1400 audit(1762805525.654:1043): avc:  denied  { setopt } for  pid=9681 comm="syz.4.1079" lport=42985 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  134.179208][ T9690] overlayfs: missing 'workdir'
[  134.214844][ T9692] bpf: Bad value for 'uid'
[  134.688620][ T9697] ufs: You didn't specify the type of your ufs filesystem
[  134.688620][ T9697] 
[  134.688620][ T9697] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  134.688620][ T9697] 
[  134.688620][ T9697] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  134.702147][ T9697] ufs: failed to set blocksize
[  134.742585][ T9703] 9pnet_virtio: no channels available for device syz
[  134.765079][ T9707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.768756][ T9707] syzkaller0: entered promiscuous mode
[  134.771233][ T9707] syzkaller0: entered allmulticast mode
[  134.787530][ T9707] tipc: Resetting bearer <eth:syzkaller0>
[  134.818691][ T9707] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=683742385 (683742385 ns) > initial count (18526736 ns). Using initial count to start timer.
[  134.826218][ T9707] kvm: Disabled LAPIC found during irq injection
[  134.829846][ T9707] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  134.833300][ T9707] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock
[  134.836749][ T9707] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  134.839917][ T9707] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock
[  134.848371][ T9707] comedi comedi2: dmm32at: I/O port conflict (0x8001,16)
[  134.901821][ T9717] Cannot find del_set index 4 as target
[  134.915275][ T9705] tipc: Resetting bearer <eth:syzkaller0>
[  134.926250][ T9705] tipc: Disabling bearer <eth:syzkaller0>
[  134.944822][ T9719] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  134.957840][   T40] audit: type=1400 audit(1762805526.604:1044): avc:  denied  { append } for  pid=9718 comm="syz.4.1091" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  135.220422][ T9736] binder: 9735:9736 ioctl 8933 200000000000 returned -22
[  135.260643][ T9738] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  135.887400][ T9786] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1114'.
[  135.907396][ T9784] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  135.910855][ T9784] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  136.001930][ T9797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.495571][ T9827] bridge1: entered promiscuous mode
[  136.497289][ T9827] bridge1: entered allmulticast mode
[  136.527222][ T9836] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1126'.
[  136.643379][ T9855] netlink: 'syz.0.1131': attribute type 39 has an invalid length.
[  136.647549][ T9855] veth0_macvtap: left promiscuous mode
[  136.863882][ T9865] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1135'.
[  136.916922][ T9867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1136'.
[  137.014265][ T9873] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1137'.
[  137.574611][ T9914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1150'.
[  137.665145][ T9913] kvm: pic: non byte write
[  137.778425][ T9930] fuse: Bad value for 'fd'
[  137.885392][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  137.888189][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  137.940739][ T9936] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1154'.
[  137.979062][ T9938] overlayfs: missing 'lowerdir'
[  138.279575][ T9954] binder_alloc: 9953: binder_alloc_buf, no vma
[  138.321005][ T9961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=9961 comm=syz.3.1159
[  138.399543][ T9974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  138.401863][ T9974] IPv6: NLM_F_CREATE should be set when creating new route
[  138.404139][ T9974] IPv6: NLM_F_CREATE should be set when creating new route
[  138.406987][ T9974] ------------[ cut here ]------------
[  138.408731][ T9974] WARNING: CPU: 1 PID: 9974 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xb9d/0x10d0
[  138.411900][ T9974] Modules linked in:
[  138.413662][ T9974] CPU: 1 UID: 0 PID: 9974 Comm: syz.4.1163 Not tainted syzkaller #0 PREEMPT(full) 
[  138.419486][ T9974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  138.422781][ T9974] RIP: 0010:nsim_fib_event_nb+0xb9d/0x10d0
[  138.425111][ T9974] Code: 24 20 48 8b 6c 24 38 e8 a1 a1 ca fa e8 9c a1 ca fa 89 de 44 89 ef e8 12 9c ca fa 41 39 dd 0f 84 cb fd ff ff e8 84 a1 ca fa 90 <0f> 0b 90 e9 bd fd ff ff e8 76 a1 ca fa 48 8d 7d 38 be 01 00 00 00
[  138.431061][ T9974] RSP: 0018:ffffc90005c67028 EFLAGS: 00010283
[  138.433404][ T9974] RAX: 00000000000026d5 RBX: 0000000000000001 RCX: ffffc900048c1000
[  138.435882][ T9974] RDX: 0000000000080000 RSI: ffffffff86f2474c RDI: 0000000000000004
[  138.438331][ T9974] RBP: ffff888036f45000 R08: 0000000000000004 R09: 0000000000000002
[  138.440758][ T9974] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc90005c67180
[  138.443578][ T9974] R13: 0000000000000002 R14: ffff88803b39df00 R15: ffff888052692c00
[  138.445892][ T9974] FS:  00007f212fcc16c0(0000) GS:ffff8880d6b08000(0000) knlGS:0000000000000000
[  138.448633][ T9974] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  138.450935][ T9974] CR2: 0000000000000000 CR3: 000000006062b000 CR4: 0000000000352ef0
[  138.453658][ T9974] Call Trace:
[  138.454711][ T9974]  <TASK>
[  138.455651][ T9974]  notifier_call_chain+0xbc/0x410
[  138.457621][ T9974]  ? __pfx_nsim_fib_event_nb+0x10/0x10
[  138.459697][ T9974]  atomic_notifier_call_chain+0x71/0x1c0
[  138.461657][ T9974]  call_fib_notifiers+0x33/0x70
[  138.463419][ T9974]  call_fib6_multipath_entry_notifiers+0x112/0x170
[  138.465415][ T9974]  ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10
[  138.467487][ T9974]  ? find_held_lock+0x2b/0x80
[  138.468897][ T9974]  ? ip6_route_multipath_add+0xaa2/0x1bd0
[  138.470625][ T9974]  ip6_route_multipath_add+0xb4f/0x1bd0
[  138.472271][ T9974]  ? __pfx_ip6_route_multipath_add+0x10/0x10
[  138.475974][ T9974]  ? avc_has_perm_noaudit+0x117/0x3b0
[  138.477631][ T9974]  ? avc_has_perm_noaudit+0x149/0x3b0
[  138.479323][ T9974]  ? inet6_rtm_newroute+0xe4/0x1a0
[  138.480945][ T9974]  inet6_rtm_newroute+0xe4/0x1a0
[  138.482444][ T9974]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  138.484265][ T9974]  ? __lock_acquire+0x622/0x1c90
[  138.485882][ T9974]  ? find_held_lock+0x2b/0x80
[  138.487307][ T9974]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  138.488977][ T9974]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  138.490637][ T9974]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  138.492278][ T9974]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  138.494145][ T9974]  rtnetlink_rcv_msg+0x95e/0xe90
[  138.495711][ T9974]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  138.497391][ T9974]  ? ref_tracker_free+0x37c/0x830
[  138.499005][ T9974]  netlink_rcv_skb+0x158/0x420
[  138.500440][ T9974]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  138.502089][ T9974]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  138.503761][ T9974]  ? netlink_deliver_tap+0x1ae/0xd30
[  138.505319][ T9974]  netlink_unicast+0x5aa/0x870
[  138.506776][ T9974]  ? __pfx_netlink_unicast+0x10/0x10
[  138.508356][ T9974]  netlink_sendmsg+0x8c8/0xdd0
[  138.509819][ T9974]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.511525][ T9974]  ____sys_sendmsg+0xa98/0xc70
[  138.513101][ T9974]  ? copy_msghdr_from_user+0x10a/0x160
[  138.514846][ T9974]  ? __pfx_____sys_sendmsg+0x10/0x10
[  138.516501][ T9974]  ___sys_sendmsg+0x134/0x1d0
[  138.517999][ T9974]  ? __pfx____sys_sendmsg+0x10/0x10
[  138.519656][ T9974]  ? find_held_lock+0x2b/0x80
[  138.521160][ T9974]  __sys_sendmmsg+0x200/0x420
[  138.522666][ T9974]  ? __pfx___sys_sendmmsg+0x10/0x10
[  138.524412][ T9974]  ? __pfx_do_futex+0x10/0x10
[  138.525907][ T9974]  ? __sys_socket+0xac/0x260
[  138.527353][ T9974]  ? xfd_validate_state+0x61/0x180
[  138.528871][ T9974]  __x64_sys_sendmmsg+0x9c/0x100
[  138.530362][ T9974]  ? lockdep_hardirqs_on+0x7c/0x110
[  138.531913][ T9974]  do_syscall_64+0xcd/0xfa0
[  138.533339][ T9974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.535166][ T9974] RIP: 0033:0x7f212ed8f6c9
[  138.536531][ T9974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.542245][ T9974] RSP: 002b:00007f212fcc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  138.544870][ T9974] RAX: ffffffffffffffda RBX: 00007f212efe5fa0 RCX: 00007f212ed8f6c9
[  138.547220][ T9974] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008
[  138.549610][ T9974] RBP: 00007f212ee11f91 R08: 0000000000000000 R09: 0000000000000000
[  138.551967][ T9974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.554395][ T9974] R13: 00007f212efe6038 R14: 00007f212efe5fa0 R15: 00007fff71229ea8
[  138.556742][ T9974]  </TASK>
[  138.557700][ T9974] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  138.559913][ T9974] CPU: 1 UID: 0 PID: 9974 Comm: syz.4.1163 Not tainted syzkaller #0 PREEMPT(full) 
[  138.562645][ T9974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  138.565828][ T9974] Call Trace:
[  138.566846][ T9974]  <TASK>
[  138.567779][ T9974]  dump_stack_lvl+0x3d/0x1f0
[  138.569186][ T9974]  vpanic+0x640/0x6f0
[  138.570439][ T9974]  ? nsim_fib_event_nb+0xb9d/0x10d0
[  138.572054][ T9974]  panic+0xca/0xd0
[  138.573389][ T9974]  ? __pfx_panic+0x10/0x10
[  138.575011][ T9974]  check_panic_on_warn+0xab/0xb0
[  138.577019][ T9974]  __warn+0xf6/0x3c0
[  138.578399][ T9974]  ? nsim_fib_event_nb+0xb9d/0x10d0
[  138.579968][ T9974]  report_bug+0x3c3/0x580
[  138.581321][ T9974]  ? nsim_fib_event_nb+0xb9d/0x10d0
[  138.582946][ T9974]  handle_bug+0x184/0x210
[  138.584261][ T9974]  exc_invalid_op+0x17/0x50
[  138.585721][ T9974]  asm_exc_invalid_op+0x1a/0x20
[  138.587246][ T9974] RIP: 0010:nsim_fib_event_nb+0xb9d/0x10d0
[  138.589069][ T9974] Code: 24 20 48 8b 6c 24 38 e8 a1 a1 ca fa e8 9c a1 ca fa 89 de 44 89 ef e8 12 9c ca fa 41 39 dd 0f 84 cb fd ff ff e8 84 a1 ca fa 90 <0f> 0b 90 e9 bd fd ff ff e8 76 a1 ca fa 48 8d 7d 38 be 01 00 00 00
[  138.594997][ T9974] RSP: 0018:ffffc90005c67028 EFLAGS: 00010283
[  138.596870][ T9974] RAX: 00000000000026d5 RBX: 0000000000000001 RCX: ffffc900048c1000
[  138.599274][ T9974] RDX: 0000000000080000 RSI: ffffffff86f2474c RDI: 0000000000000004
[  138.601690][ T9974] RBP: ffff888036f45000 R08: 0000000000000004 R09: 0000000000000002
[  138.604038][ T9974] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc90005c67180
[  138.606376][ T9974] R13: 0000000000000002 R14: ffff88803b39df00 R15: ffff888052692c00
[  138.608734][ T9974]  ? nsim_fib_event_nb+0xb9c/0x10d0
[  138.610291][ T9974]  ? nsim_fib_event_nb+0xb9c/0x10d0
[  138.611931][ T9974]  notifier_call_chain+0xbc/0x410
[  138.613471][ T9974]  ? __pfx_nsim_fib_event_nb+0x10/0x10
[  138.615101][ T9974]  atomic_notifier_call_chain+0x71/0x1c0
[  138.616778][ T9974]  call_fib_notifiers+0x33/0x70
[  138.618279][ T9974]  call_fib6_multipath_entry_notifiers+0x112/0x170
[  138.620182][ T9974]  ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10
[  138.622291][ T9974]  ? find_held_lock+0x2b/0x80
[  138.623738][ T9974]  ? ip6_route_multipath_add+0xaa2/0x1bd0
[  138.625448][ T9974]  ip6_route_multipath_add+0xb4f/0x1bd0
[  138.627104][ T9974]  ? __pfx_ip6_route_multipath_add+0x10/0x10
[  138.628927][ T9974]  ? avc_has_perm_noaudit+0x117/0x3b0
[  138.630585][ T9974]  ? avc_has_perm_noaudit+0x149/0x3b0
[  138.632238][ T9974]  ? inet6_rtm_newroute+0xe4/0x1a0
[  138.633794][ T9974]  inet6_rtm_newroute+0xe4/0x1a0
[  138.635279][ T9974]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  138.637179][ T9974]  ? __lock_acquire+0x622/0x1c90
[  138.639125][ T9974]  ? find_held_lock+0x2b/0x80
[  138.640680][ T9974]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  138.642400][ T9974]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  138.644054][ T9974]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  138.645662][ T9974]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  138.647381][ T9974]  rtnetlink_rcv_msg+0x95e/0xe90
[  138.648895][ T9974]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  138.650587][ T9974]  ? ref_tracker_free+0x37c/0x830
[  138.652140][ T9974]  netlink_rcv_skb+0x158/0x420
[  138.653643][ T9974]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  138.655318][ T9974]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  138.656936][ T9974]  ? netlink_deliver_tap+0x1ae/0xd30
[  138.658598][ T9974]  netlink_unicast+0x5aa/0x870
[  138.660090][ T9974]  ? __pfx_netlink_unicast+0x10/0x10
[  138.661749][ T9974]  netlink_sendmsg+0x8c8/0xdd0
[  138.663239][ T9974]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.664904][ T9974]  ____sys_sendmsg+0xa98/0xc70
[  138.666424][ T9974]  ? copy_msghdr_from_user+0x10a/0x160
[  138.668168][ T9974]  ? __pfx_____sys_sendmsg+0x10/0x10
[  138.669820][ T9974]  ___sys_sendmsg+0x134/0x1d0
[  138.671327][ T9974]  ? __pfx____sys_sendmsg+0x10/0x10
[  138.672961][ T9974]  ? find_held_lock+0x2b/0x80
[  138.674460][ T9974]  __sys_sendmmsg+0x200/0x420
[  138.675940][ T9974]  ? __pfx___sys_sendmmsg+0x10/0x10
[  138.677569][ T9974]  ? __pfx_do_futex+0x10/0x10
[  138.679070][ T9974]  ? __sys_socket+0xac/0x260
[  138.680515][ T9974]  ? xfd_validate_state+0x61/0x180
[  138.682113][ T9974]  __x64_sys_sendmmsg+0x9c/0x100
[  138.683643][ T9974]  ? lockdep_hardirqs_on+0x7c/0x110
[  138.685242][ T9974]  do_syscall_64+0xcd/0xfa0
[  138.686679][ T9974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.688448][ T9974] RIP: 0033:0x7f212ed8f6c9
[  138.689816][ T9974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.695543][ T9974] RSP: 002b:00007f212fcc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  138.698019][ T9974] RAX: ffffffffffffffda RBX: 00007f212efe5fa0 RCX: 00007f212ed8f6c9
[  138.700491][ T9974] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008
[  138.702906][ T9974] RBP: 00007f212ee11f91 R08: 0000000000000000 R09: 0000000000000000
[  138.705352][ T9974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.707765][ T9974] R13: 00007f212efe6038 R14: 00007f212efe5fa0 R15: 00007fff71229ea8
[  138.710170][ T9974]  </TASK>
[  138.712021][ T9974] Kernel Offset: disabled
[  138.713354][ T9974] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:12:10  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff888033b39980 RCX=0000000000000000 RDX=ffff888028a54900
RSI=ffffffff89cd4021 RDI=ffff888033b39980 RBP=000000000000ffcb RSP=ffffc9000370fcb0
R8 =0000000000000820 R9 =0000000000000007 R10=0000000000000004 R11=0000000000000001
R12=0000000000000001 R13=0000000000000004 R14=0000000000000001 R15=ffff88805202fc00
RIP=ffffffff81aa1770 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc403065300 ffffffff 00c00000
GS =0000 ffff8880d6a08000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fd9839b3f98 CR3=0000000028c26000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000492 0000001400000000 0000000000000000 0000000000000015
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff040380031808 0006100020100006 00719c0800000129 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a79730001000900 000000317a797300 0200090000000040 0a00080000000700
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 010a090000004c00 000000307a797300 0100090000000700
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000d000000 030a00000000200a 0000000000000000 0000000001001000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00001402d0080b80 030b80040a80030a 800403a003000800 0390030fffffffff
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000009ffffffe4 03000000ffffff9e 03000000ffffff96 030000000000000e
ZMM25=dd9da849dd9da849 dd9da849dd9da849 dd9da849dd9da849 dd9da849dd9da849 dd9da849dd9da849 dd9da849dd9da849 dd9da849dd9da849 dd9da849dd9da849
ZMM26=d10bc112d10bc112 d10bc112d10bc112 d10bc112d10bc112 d10bc112d10bc112 d10bc112d10bc112 d10bc112d10bc112 d10bc112d10bc112 d10bc112d10bc112
ZMM27=ac3addd6ac3addd6 ac3addd6ac3addd6 ac3addd6ac3addd6 ac3addd6ac3addd6 ac3addd6ac3addd6 ac3addd6ac3addd6 ac3addd6ac3addd6 ac3addd6ac3addd6
ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=2f0600002f060000 2f0600002f060000 2f0600002f060000 2f0600002f060000 2f0600002f060000 2f0600002f060000 2f0600002f060000 2f0600002f060000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85295335 RDI=ffffffff9add8780 RBP=ffffffff9add8740 RSP=ffffc90005c66990
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000039 R14=ffffffff9add8740 R15=ffffffff852952d0
RIP=ffffffff8529535f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f212fcc16c0 ffffffff 00c00000
GS =0000 ffff8880d6b08000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000000000000 CR3=000000006062b000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e9c613050
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e9c61305d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e9c613057
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e9c61306b
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e9c6130f1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e9c6131cf
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ead056d4421aa478 55b2621be92848bc 969b1051b9f18ab6 013e777608698497
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732064616200786c 6c36313025783000 657a697320786568 0004000b000c0008
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5605414447005d49 49131415005d1500 405f4c56055d404d 5751560541444700
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000005 RCX=ffffffff8b59c750 RDX=ffff888055488000
RSI=0000000000000006 RDI=0000000000000005 RBP=ffffffff8cf038c0 RSP=ffffc90004e8f710
R8 =0000000000000005 R9 =0000000000000006 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000005 R14=0000000000000006 R15=00007f6d61df8fff
RIP=ffffffff81bce292 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555564341500 ffffffff 00c00000
GS =0000 ffff8880d6c08000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000000100 CR3=00000000564af000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb844c740 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d62c13050
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d62c1305d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d62c13057
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d62c1306b
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d62c130f1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d62c131cf
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c667265766f20 6772612061746164 000a747261745374 6f687370616e5300
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49435740534a05 4257440544514441 000a515744515351 4a4d5655444b5300
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000000000dd41f RBX=0000000000000003 RCX=ffffffff8b6092a9 RDX=0000000000000000
RSI=ffffffff8da2b720 RDI=ffffffff8bf070c0 RBP=ffffed1003bd6000 RSP=ffffc90000197de8
R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000001
R12=0000000000000003 R13=ffff88801deb0000 R14=ffffffff90820cd0 R15=0000000000000000
RIP=ffffffff8b607d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6d08000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000555564341808 CR3=0000000029b53000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fc00ffff Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557f60a6a0
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557f6121c9 000055557f6120a0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fc4fb7d20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557f620e90 000055557f620770
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557f614778
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003001000048004 040007b400746166 7601ffffffffffff fffff50804800322
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0407 c00320080007b803 00080007b0030fff ffffffffff0407a0
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0407f00300 080007e803000800 07e00300080007d8 0300080007d0030f
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080008a003000800 0898032008000890 030fffffffffffff 040880030fffffff
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060806060103f600 1000000800040175 ea02a81000068004 0a1000060102a200
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 016a800408828010 006880046780040f ffffffffffff040a 0142cc6c63616f6e
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a086a8003003473 666e01ffffffffff fffffff508688003 002e01ffffffffff
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffb08678003 0fffffffffffff04 04a4b00800010800 06013cfa0010000a
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000121000060174 9400080020821000 561000060170e200 1000010800010000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000