last executing test programs:

1m52.530404314s ago: executing program 3 (id=208):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f00000006c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, 0x0, 0x7})
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="140000000000000029000000340000000400000000000000f8000000000000002900000004000000041c000000000000fe70f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3892eca7ff4e630614c9ecfa5e6f8eee16c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b08801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad072800000001087a01800900000000000000040000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc020000000000000000000000000000930fe80ee304ecb784ec4655260cecea14040000000000000029000000340000000000000000000000980000000000000029000000360000005e10000000000000ff4050d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f0001000001000720000000030600ff0f02000000000000006609000000000000f7ffffffffffffff07080000000000facf874dcf60a737267de0a03eba3a31cc979eb55310ccefb022b8b9d430fabd0674b2ad75850bb008"], 0x1c0}}], 0x1, 0x810)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m52.323687231s ago: executing program 3 (id=212):
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_opts(r0, 0x0, 0x5, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a300000000060000000030a010400000000000000000100ffff0900030073797a310000000034000480140003006272696467655f736c6176655f30000008000140000000051400030076657468315f6d6173767461700000000900010073797a310000000014000000110001"], 0xa8}, 0x1, 0xf5ff}, 0x0)

1m52.323498639s ago: executing program 3 (id=213):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="01000000000000000c003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1m52.244631775s ago: executing program 3 (id=214):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x401, 0x204080)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x2}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x3}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xa320, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0xfffffffc, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x400, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800, 0x7fff}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x801}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000500)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x800200, &(0x7f0000000900)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@version_u}, {@version_9p2000}, {@version_9p2000}, {@fscache}, {@cachetag={'cachetag', 0x3d, '*]'}}, {@uname={'uname', 0x3d, '(%'}}, {@noxattr}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@permit_directio}, {@flag='silent'}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x66, 0x30, 0x31, 0x30, 0x39, 0x38, 0x61], 0x2d, [0x38, 0x0, 0x38, 0x33], 0x2d, [0x33, 0x31, 0x66, 0x62], 0x2d, [0x31, 0x39, 0x34, 0x62], 0x2d, [0x32, 0x39, 0x32, 0x38, 0x31, 0x39, 0x62, 0x64]}}}, {@euid_lt={'euid<', r3}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}})
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x4000)
setresuid(r4, r4, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x3)
mkdir(0x0, 0x10)
setuid(0xee01)
r5 = semget$private(0x0, 0x4, 0x29b)
semop(r5, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x80000, 0x2)
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb})
semctl$GETZCNT(r5, 0x0, 0xf, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x2840)
ioctl$EVIOCGBITKEY(r6, 0x80404521, &(0x7f0000000840)=""/160)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r7, 0x4)
listen(r7, 0x5)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

1m51.374725845s ago: executing program 3 (id=235):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r2, 0x0, &(0x7f0000000480)='L', 0x1, 0xfffffffffffffffe})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r2, 0x0, 0x0, 0x1})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11)
ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000080))

1m51.164660724s ago: executing program 3 (id=238):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0x10000004, 0x8}, 0x2c)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x4e21, 0x0, 0x4e22, 0x6, 0xa, 0xa0, 0xa0, 0x4, 0x0, r2}, {0x6, 0x4, 0x0, 0x2, 0x749, 0x7, 0x9, 0x8}, {0x7, 0x100, 0x0, 0xc1c}, 0x6, 0x6e6bb4, 0x2, 0x1, 0x2, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x8843b865ac8366cf}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x0, 0x2, 0x1, 0x5f, 0x5, 0x9, 0x8}}, 0xe8)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0x10000004, 0x8}, 0x2c) (async)
socket$kcm(0xa, 0x2, 0x0) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)
statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x24, &(0x7f00000000c0)) (async)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x4e21, 0x0, 0x4e22, 0x6, 0xa, 0xa0, 0xa0, 0x4, 0x0, r2}, {0x6, 0x4, 0x0, 0x2, 0x749, 0x7, 0x9, 0x8}, {0x7, 0x100, 0x0, 0xc1c}, 0x6, 0x6e6bb4, 0x2, 0x1, 0x2, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x8843b865ac8366cf}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x0, 0x2, 0x1, 0x5f, 0x5, 0x9, 0x8}}, 0xe8) (async)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (async)

1m51.113164853s ago: executing program 32 (id=238):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0x10000004, 0x8}, 0x2c)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x4e21, 0x0, 0x4e22, 0x6, 0xa, 0xa0, 0xa0, 0x4, 0x0, r2}, {0x6, 0x4, 0x0, 0x2, 0x749, 0x7, 0x9, 0x8}, {0x7, 0x100, 0x0, 0xc1c}, 0x6, 0x6e6bb4, 0x2, 0x1, 0x2, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x8843b865ac8366cf}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x0, 0x2, 0x1, 0x5f, 0x5, 0x9, 0x8}}, 0xe8)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0x10000004, 0x8}, 0x2c) (async)
socket$kcm(0xa, 0x2, 0x0) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)
statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x24, &(0x7f00000000c0)) (async)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x4e21, 0x0, 0x4e22, 0x6, 0xa, 0xa0, 0xa0, 0x4, 0x0, r2}, {0x6, 0x4, 0x0, 0x2, 0x749, 0x7, 0x9, 0x8}, {0x7, 0x100, 0x0, 0xc1c}, 0x6, 0x6e6bb4, 0x2, 0x1, 0x2, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x8843b865ac8366cf}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x0, 0x2, 0x1, 0x5f, 0x5, 0x9, 0x8}}, 0xe8) (async)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (async)

1m5.923689493s ago: executing program 2 (id=571):
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000100)={0x10, 0x1, 0x9, 0x7})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000004c0), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
mknodat$loop(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0)

1m5.906414273s ago: executing program 2 (id=572):
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xb, 0x4, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x41c}, [@jmp={0x5, 0x0, 0xb, 0x4, 0xb, 0xfffffffffffffffe, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)

1m5.906292013s ago: executing program 2 (id=573):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f23, 0x5, 0x2, 0x4000401, 0x1, 0x40000cc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x8, 0x10001, 0x1, 0x9, 0xe1cb, 0x6, 0x401, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x32, 0xfffffff5, 0xffffeadb, 0x7, 0x3c, 0x8, 0x3, 0x8000000, 0x2ec0]})
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4001c0)
ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000180)={0x1, 0x6})
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f00000d76c0)=[{0xa000005, 0x0, 0x0, 0x0, 0x2da}]})

1m5.833205055s ago: executing program 2 (id=574):
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x24)
fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [{}], {}, [], {0x10, 0x7}}, 0x2c, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb8}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

1m5.833058487s ago: executing program 2 (id=575):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]})
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
write$cgroup_pressure(r2, &(0x7f0000000080)={'full', 0x20, 0x8, 0x20, 0x8001}, 0x2f)
close_range(r3, 0xffffffffffffffff, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]})

1m5.779732129s ago: executing program 2 (id=577):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x18, 0x6, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2, 0x0, 0x79002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async)
listen(r3, 0x0) (async)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async)
r5 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)={0x2, 0x0, @c}, 0x29, 0xffffffffffffffff)
keyctl$read(0xb, r5, &(0x7f0000000300)=""/40, 0x28) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x48810)
r7 = socket$kcm(0x2, 0xa, 0x2)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)={0x1, 0x1, 0x2}, 0x18) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='veth1_macvtap\x00'}) (async)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write$tun(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xbf) (async)
ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'ip6gre0\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x0, 0x7}}) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007600090700000000000000000702e1ff", @ANYRES32=0x0, @ANYBLOB="0c000d80080003"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async)
ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) (async)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES16=r7], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
bind$inet(r11, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r11, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)

1m3.942084831s ago: executing program 4 (id=602):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000000c0)="f058fe7dad777f8f", 0xa888}], 0x2}, 0x5)

1m3.793294393s ago: executing program 4 (id=606):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r3, 0x8942, &(0x7f00000014c0)={'ip6tnl0\x00', @ifru_names='vlan0\x00'})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fanotify_init(0x4c, 0x0)
r5 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x2, '\x00', @p_u32=&(0x7f00000000c0)}})
write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m3.713933769s ago: executing program 4 (id=607):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) (async)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x4200, 0x0) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8)
r3 = getegid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file1\x00'})
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']})

1m3.664210272s ago: executing program 4 (id=610):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x122)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500003000f5ffffff009078ac1e0001ac1414382b189078030000004510000000000000bc14148aac1414aa00000000"], 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000))
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180))
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000300))
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001300), 0x80802, 0x0)
ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r2, 0x40096100, &(0x7f00000015c0)={{&(0x7f0000001540)={'Accelerator1\x00', {&(0x7f0000001400)=@adf_hex={@format={'Cy', '2', 'RingSymRx\x00'}, {0x2}, {&(0x7f0000001340)=@adf_str={@bank={'Bank', '4', 'InterruptCoalescingEnabled\x00'}, {"eb74dc673459211a5f742690d74f53769cfd0cddd68d063747e4cf1311231d4ed9eb19fc19b2bf75c5f5f18173f6762ad45ba77d434abf658cbb0ce3d90b46b0"}}}}}, {&(0x7f00000014c0)={'Accelerator0\x00'}}}}, 0x9})
r3 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r4, 0x0, 0x0, 0x24048885, &(0x7f0000001680)={0xa, 0x4e24, 0x6, @mcast2}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)='\x00', 0x1}], 0x1}}], 0x1, 0x400c404)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x5d3a, &(0x7f0000000040)={0x0, 0xc89f, 0x1000, 0x203, 0x20002f7})
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_clone(0x80200, &(0x7f0000000140)="94d4ba7bdaddf5bd19e583af26bbf6aaec50ca029a30e25de47f5f966b5d75c0bda360db7802831adc3c6e6833f2b7ff66df2691c6f5a385d35747050d9122217a2c459a39ead5dd65e3078b96e3d8ed8e226325fae26484a5b40f21430a69342d7fe84ec21d74752eaab3567fe8e24341b329ec8195e0eaecd1820bc7a5eba2802b6e0a33d1c5ecdc08a1f1d8cfb060f3b9bc02ca8493de4989bafa48f08f", 0x9f, &(0x7f0000000200), &(0x7f00000012c0), &(0x7f0000000280)="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")
chdir(&(0x7f0000001600)='./file0/file0\x00')
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20)
openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8000, 0x180, 0x1}, 0x18)
openat$dir(0xffffffffffffff9c, &(0x7f0000001280)='./file0/file0\x00', 0x10000, 0x81)

1m3.551414238s ago: executing program 4 (id=614):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000000c0)="f058fe7dad777f8f", 0xa888}], 0x2}, 0x5)

1m2.42401017s ago: executing program 4 (id=630):
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000001c0)={0x6, 0x4, 0x2, 0x5})
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async)
sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e22, 0xf, @mcast2}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)="ac", 0x1}], 0x1}}], 0x2, 0x400ec04) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94)
ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0x19) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async, rerun: 64)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0) (rerun: 64)
recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0)
write(r3, &(0x7f0000004200)="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", 0xf81)
mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x1008001, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000000)=0x6, 0x4) (async)
ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000080)={0xa1, 0x3, 0xfe, 0x5}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4f, 0xa017, 0x9, 0x3, 0x4, 0x3, 0x7f, 0x24, 0xb, 0x7b, 0xe, 0x7, 0x3, 0x1, 0x1, 0x306eced0, [0x9]}})
setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="a2cbd1357365722e6e696d6ff4f02b5b20a091c0b3fa4577"], &(0x7f0000000140)='!$\x00', 0x3, 0x3)

1m2.33149675s ago: executing program 33 (id=630):
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000001c0)={0x6, 0x4, 0x2, 0x5})
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async)
sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e22, 0xf, @mcast2}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000600)="ac", 0x1}], 0x1}}], 0x2, 0x400ec04) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94)
ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0x19) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async, rerun: 64)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0) (rerun: 64)
recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0)
write(r3, &(0x7f0000004200)="96e827e9333b69b3839e8d48ff9707c09b944352045f27a1f4f0c33d991dead684363012c2f7c4b04e524a99d96e5eecd1de0e946b5333f2d8d941a8cb2c8f35f3726d79f2661435907016f29e497f06145ea685fc3b4e4db3db8409d80fa7c022efd7c2544a5e3ecdac09f0265ccace6e330e6dfd8f61e0012c43cc68f15376d53b57c73f2bffa0ef27e0c68facbdc373c50811ab52f3ad8210097c608373387581e0d7306ab8c887bd1e24e1eaf3d36e30cbcdad183710e5ccdc8c2b8eecba5e3d41d02ec16f24e74543daeca5d7cd1bd347ba4f3235c0369bcd1eb85ec015ef0cb50c068f4dd2a39be4b84b52f5e3311482d72ff29c6ff65730273c186e851e8b0343b5c47bfd8686ceddeb889e318f50380a933fc123060a2780b17acf75d0e78062bfc62bd16cde45825296ca055f0ae37d6bde91adef2692a4fd0d5987009894ef7e55fc7783448a8acee63710ce9e0d8cc3e5d9a0a7d46ec4c6f26f6909f92bfb828d0168c93ca06c0e77cdaef94e0cbafd83e6ceb82841ac28c965ae1c1400ce193479f9fac8631effa60c0bf4ed6accd244024ebe3f6530e1474ed05524911262518525f2411c9cbfc047aae348c41367f6cf6fe31565064225fa34d34badc1405eb86112fef5bca75b81f90a9b5ea79dd1d885242dc7930c2ee4332e3a215c072032041ed91e51bb463dc49dc0216f3d1b5fe1142a83a913d1d707baf7f65fd8c0638b7d4813cc9899a1023ed8fc2e4f896ca284e3bbbb801d57deba1da02523450d047eabd88c066dc70e972803428f384bb88f77d6a47ed216827e8beb5a895bacdfa4af579758aeef54c332db73b2b71a73798122ab190be471a7686f030819f6cf90abee1cbec0261e52a0c1d69c2139c472a99c5e05965c542da5f91fbabd34b9e10fedd910c200a6892fbcd68b79997220297edbe3c5e34ccec453c3d76743891ea2d76c966c2a95ccb3640c73f6f57ea98aa71757afe6a375b1b6f822d4f35ed1c316914a0f8dec874920e918079de360b2ee1d9d6dea2eb7cd0e23afae7c2a78d1b0d89d898e67a767b0a33dde519cbce660dc6fdf2728b8712f513a0ac87718241050859ffc65f3745634a0a8ef25fba230590f728547da0bf3d07609d89ed7451956889ed6b59ed00dadda304c9d52504f7370bfb81a047b5a18c566673e55ff6e2dd4a60f2ef104a9765ecd11715aa136dd65359978f3f4c22cabbc4a59349c882dd299bd5e411d3856846ad8bdfa6217cc614113bde95845d5a70d7599ce5626073c96444c7bbf49f72c1445355276fe6b2f0c3984ea14ba8abdc28a67112db642c0bd668b213d891ab647d04d834a9d59fa97d4f3d16d1f728340a4efccb545a59a3e7e9fccb65ddfc188821072d19230c6c40987b5ea672090251392d1cb7fc161a0bca86d1cfef06afe7ed14e0ae3122922af81a9c303e34470299d762734209cb78a0a707d849647097aab8c7d2b527580d4d0b1a136969258090124f05ed7b4916c8fe238b390a14e8ffccc9ed926856dd104f0bf2c14cd0c356a7671a20bbaae8456da25ea973324477c68d9a881ffacadc926e7638237c2588fba6e6dce760738d851f02311b5175ecf3cef58084a2a77777ce1425c9c916f5668d3ef1e392950abe6ed9ad40ef3c60511a5faa4da5319c3d7671ad352d8f3eae5a90d571a1e61fcb6c5876c42d73504e933d8cf4ea42e0df391409133ad1761f871665b1a20b626939243bc93bd05169869144a3bf692ab44c6d5189df641641f60aba3f3c76a92b771c1f299299833bb50a6628645ec8a6dc1e0d557ae889c7426767a7e54b77b350dcf76d93aeed2281e3f8bd0835b00bb2675a66b3b674c6fa30f7561036d5b19d28b4f9d303c6ab3120dfc459ebf235cf15c623f1e7908ce7c7676af13d5786ca0626af31ea9f250d74d12eae1d63cc70a7724a2fc9b5fa1782a2e21fc11a13e7c1b032a26e75431eac77d41fb4f12e444c09a1b8eb636145646e0a620e01647898e1d8de82fc2a7b8475fddf143542640055f3a75311b057fd2cf4ae9820bc781de79a0644a4d8c1b87738cb49754f178f133298c306aa17161ab690b03702b2be7c5fc0b6a11c4103dc79d2ddea07ed968ebca0957d46cbf7151e180420e6b8ebd022ce22b93da1ecbdaaf2c4b55a671fc7eb52391a9617192661fecd00ec8f6db961d28fc0be711807112524889e9557f53b77e29bb886dc3d9c94e2227b71906372fee4cda1d02d4d63a6a8b224681f21b74b1c20d3532d36f9c01462c405be1c760bdf0c812b28ea0995e957e3c6f83a7db1dbc1f1985f7eac974eb46ba4ca1bf6e1da828ddcdca9faef5ccc2427512ae5c34270c4490c27b0ead8b314b97d562e9ab8b82d5ed7ccb4e7825d0d6749e5c29c252a53349c3010d62481e7a11d8398482f29af5ad00d17bf8b3a8f32a03153bf9f304bbfaeafd7bc58ce844158aa74a875c6d5af97aabd5e1827f526d8783576b61d3e5b32e76f1edd9c58d19ad76df900e697967644ba4fb431a75856210db1fcd113de875e6f91129021b2ede3e55eb277add3a41e00b4efac39f09870f43348af47c4d6d9a92c878dc1c2c121311bd94c2249cb8ffd05cfa67ed8d32a32e70536c3bc9a5c79ea4fc429307748b440de47e5edb945ab4898cb3ee20313976e85a64ee892c0cf550dacb8c0ce65de1c9f0e43d5910c76d2475a76d2ff30cfb966918cbed432ca21b50e694cdc4b0de989fdb1e528c0719ced0e823a8f9158062b459fe4b632cdf23f1917038df917bd3b4a37c805baee2e49e0f28f2367a361fe193131fdc21cd8d99f1240e2e2d3b234d25ee82772bf9cad7712d05afa63501bd70c3a0d920ccb5f7ca08e08a156c862d098b2c120c683442ff059279e8ec11ac14e84c37af3526060b9b53ff0274256d592cc45c029a90651a7a0d6107cb8555c8ec3ee5aaec0fbe25ef86ce831aae464e05b9150ac87068f7b58518dc1c6991018196ed9a7f136b66f6ab8f5e865a042d8a07a354f4eaf9a3b490852aafd5b646eff042b446849755aacab74e6272f341766efa3e5f3ddac3200b609ddb0a8578510132da16904c2cc1736722fb4771871aa0c37d962e3d966787e93961a0a6d40df2c2280960fa1143056f5ad2712bc70c8decfc8a75a22d01f4e0baaf37f2ce29736b2522ce2b585ccab26498df47bf60ddbe8a179a4fdb6737bd8b62632f92b5b0fd86d884fc230803679852c183925d3f6c2899f286cd3fa63db4d7bf2b61524f2d206eb053bc10ddccfd6adeaba1c2e91eb2a7e8cef9359e683afb6729285317c2d7c82779a93005b4ac8f27f3b0c166eaba8c6e8e1093770a25ef7c812b01333006f8a135f61063fcf76d2bd20b69e6e29195c32de0ec58bb6a7e536b411600ed9d651dec14d292ceda15d750948031d14e024048365e31d9fb83ec67708fe3088c07d719f7f0331f715b70ccaa150a00033710f83ab9f31695924eb4ac50bf6861229370d19ddc132e46461e04b0a24c77b19614e932743ee5432dd519513999e14d65402e3ae751c1849f1b30273a3bd94a987598884fd6adfa01f713aca30a61a56780e4a92be79b23013e4ee541b81754a96d1fcb0218e8fb061a82dec16c4b4b8a84f6061e38b8888b62a8e2aefd10050dc07caf4758021d4c72bec09e0bec3f40daf30864cca45e498d18abcb42bca2a098a7aedfabeaae4d97b7509b87b770843997f11d8c77ab1d850d57143f983b3aa03b88894be808193fbb57a09617b89ccec834eb5a308febac97067203882ecb386722349a99606ba03cd365dcbd5dc06637bd2cb5f3a9c93a6c29a5eed1fd70cfcf7c090f3bdbec714e4002a48016a277efe548529def977b3fb3f4145c4b1b3725612306c204fd8c0ef5f25792fc49ebbeb3e9c3a158366e4c884b77f91f2829613a9a852dcb09186d325914516996c4360cef71d1f56b8911b36f21a08fe3fee76b9364483ccad64c40a76ac1784fbab0253b5ceb5926cd270fcbbef7c1edb885ebe6d8e7ef7b598c1c4dd420de30661d4661abf1e2640bd29c7f2822868f1c412ac5ef2f078ddb42c8a9521b419fc3a1aa1678feab31e0f5f6bdc320a9f651783e2ed26336d77ed85c8535ae498ff7b1195586b6c6b4ba01a576533eff879604679d255698b814ffafc94acbafa775686cd6e129c1541b62a3bd20682cebd1f9aec852a4702bf53ca05aace6723366df3278007c66adf8db3522943a4443836347a0b2d1f05ad99240a0917a7a37300ab730fe1b9a55910c40c74159d3447f4af08ce5468dbfa7fe3091d87fd1391f1a94590ce09d98b32d77335d4c6262d07d2a2385041fa918d9d01bd1433400b49cc47ec1ab8f5acf86ee8c1f1c588c39ec2563209f182f401e60a9ad0c5c011bf26c3da75c870aab81c657261eb853c8ee6c1d0fa6f2d978b776a6e1ce8a0674c66c1261133146dbc08481c0a6c5aebf8fa3c3fe7404c6b4bfb763090fab2ded589776e65aef997f60865a953abb0a0ba6f87258a30239737b9fb062927ed97b9f68334184a025d0c0cbf185ed6b484e244818c18f76590b6cfd2b7491ec6683c2173b3ffdc1f5394d50e0f2e820136eef687e600996a669507bcb394dd7120cb74ea2d141bc9cf2df044328c045b39f523e51c95e863a9164721c849e1a397c3d77a5808f10c82cd1a31e62d6f0a0089b23a495e7cd0fe6f42f1bb373efd951b5c57cc0749b9be9cbcee5781c5f6b2516bfca41c6a81b69c579451e1b65434becd6e80479d6867bc96ad8a3cd348663568cf16a73669f77dedbdaa890b47c8ad4dedeef04127cea2c27974771b188eedf5ad15b9dde07921c68ee4238f67f5fe4ca00ae589ad2edc48a755acafd63b3d83f705ed6d549259bad5a7a736a21275207a4633a080e0c0ffbc8d3e8229b1ba665586349117b6799691d0dc68c2feaf93ac1166dc1564e0229c14c1e873edfc1f1ea9e75d43fcd95d2858e3c7717c58744ef3527bd51a70ec6ce0939d46d16735474f969fad19ca1a94f0fd867ba1c0b291f7b8bb3a29c35229285b18aeb322b05c949f0ba0504cd2b4f05d409577f3b142421fb94c5ea1c16c456f7b6723c9856784db0cf742d296c605ff3548f75dd46bde6db1b3927a98cba9ff260e58d3b79bc2f92397d85ab5a4358740653a0f8af98d2080c19ccef1138270af284fab4f763e20eae2a56bb47f8da7b726624b35e1c7ceaf8ad8e81a8870a9bc52f6c8448eba0c688dbf14e6e3881b6cc19551f15e7cce6e181caebf2d37833c73310936f164a561381c682b6dd965def966288b8c66c948fed3ceb1a29c4d2754bbe8dbc39351b337515066532d1f74c75967638d8448e0f54a054f068bf494683bebef99d93386130cd47bf286188134f0d7fa796f8998ecb9167932e3c7b21b6de6524eaaef1e4be0e9a60972372170dae4a6645c70be6f35254ad1d3726e77846e8ba752db7a2fd1566e750112d0ac32a8b3b27ba0a4cc154326d9520a4a6f3e2b42f101c6d15ad9e9ac61059ba2bdc220431e8f1d15a654e28cabd1948140fefc39c447f9f18f30efc0ac5ab16e3443abf31b7d87eaa97f624a0c01539e7977ce47d", 0xf81)
mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x1008001, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000000)=0x6, 0x4) (async)
ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000080)={0xa1, 0x3, 0xfe, 0x5}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4f, 0xa017, 0x9, 0x3, 0x4, 0x3, 0x7f, 0x24, 0xb, 0x7b, 0xe, 0x7, 0x3, 0x1, 0x1, 0x306eced0, [0x9]}})
setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="a2cbd1357365722e6e696d6ff4f02b5b20a091c0b3fa4577"], &(0x7f0000000140)='!$\x00', 0x3, 0x3)

50.703599627s ago: executing program 34 (id=577):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x18, 0x6, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2, 0x0, 0x79002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async)
listen(r3, 0x0) (async)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async)
r5 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)={0x2, 0x0, @c}, 0x29, 0xffffffffffffffff)
keyctl$read(0xb, r5, &(0x7f0000000300)=""/40, 0x28) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x48810)
r7 = socket$kcm(0x2, 0xa, 0x2)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)={0x1, 0x1, 0x2}, 0x18) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='veth1_macvtap\x00'}) (async)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write$tun(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xbf) (async)
ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'ip6gre0\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x0, 0x7}}) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007600090700000000000000000702e1ff", @ANYRES32=0x0, @ANYBLOB="0c000d80080003"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async)
ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) (async)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES16=r7], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
bind$inet(r11, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r11, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)

1.413819568s ago: executing program 0 (id=1655):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0xfffffffe, 0x5, 0x4, 0x0, 0x0, 0x4})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000680)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118)
r5 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, {0x3}}) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, {0x3}})
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000000c0)={r0, 0x0, 0x4, 0x60}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000000c0)={r0, 0x0, 0x4, 0x60})
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async)
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0)

1.213656619s ago: executing program 0 (id=1657):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x9)
bind$rds(r0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r3 = epoll_create1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000954000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.143723811s ago: executing program 1 (id=1661):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@redirect_dir_nofollow}, {@nfs_export_on}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, 0x0, &(0x7f0000000400)=""/160}, 0x20) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xcc040, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x1}}, './bus\x00'})
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) (async)
ioctl(r2, 0x6, &(0x7f0000000100)="ce37bcdb0b4379d5d17849eb0799271bbfc289bef1876fc8beb52de34e9c35f4d4427f749b97779df53ac69c9b0c588080fedb49c0d9ef29154df27741302dc394fb530edadc4b6f8e644f6097d7ebfff49fe11f0b7f25a016782fee9f73836d42bb8385d1d8d21ace6bebd86c4c57a0b8a65277e6b7a4990ce8f4e9f55bfeff17749d456a7a7a54fa290fa04c1b7c86c7854759f5f157803a2d1626bfe59300b4b98dbe52") (async)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64)
r7 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) (async)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 32)
connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x800, 0x0, 0x0, {0xa, 0x0, 0x9, @mcast1}}}, 0x32) (async, rerun: 32)
sendmmsg(r5, &(0x7f000000afc0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="427c8be605be178d546f4f211bd6bc33c15a888d73ea0e7e72cd541d7b508906b720c6d1cd0e18f1f6657971188163dba86b4ac14de16bbd7079ff498fec181a237d86a3a0f303bd4e9326cb044c3f6ce1aa54772915904bbfffa2238cc7928894cd9f70486d55edbec1b1e5d10be74a52f18441204fcfa99002076c145d8d3ed3b38c018b520c5bda198690c6b6f93d893f", 0x92}, {&(0x7f0000000200)="a3653e2d23ed937a9a9f37fee0f917fb37bee95fc6417ea8a8ecc18475cfccd83e9811e5e0e1ad381ea1f1c9829ffccce019c791fc3b05b447a1fc496e82c241", 0x40}, {&(0x7f00000004c0)="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", 0x4b3}], 0x3}}], 0x1, 0xc000080) (async)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r2, 0x85, '\x00', 0x0, r2, 0x4, 0x3, 0x3}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000bc0)={r8, &(0x7f0000000a00)="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", &(0x7f0000000b00)=""/172}, 0x20)

1.073862296s ago: executing program 1 (id=1662):
r0 = socket$l2tp(0x2, 0x2, 0x73)
io_uring_setup(0x67bb, &(0x7f0000000280)={0x0, 0x0, 0x2})
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x8000, @empty}, 0x10) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a0104000000000000000000000000080014"], 0x80}}, 0x0)
timer_create(0x5, &(0x7f0000000040)={0x0, 0x15, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=<r2=>0x0) (async)
clock_gettime(0x0, &(0x7f0000000180)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0x0, &(0x7f00000001c0)={{r3, r4+60000000}, {0x0, 0x989680}}, &(0x7f0000000200)) (async)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='caif0\x00', 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$netlink(r5, 0x0, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6d0ac4ff02"], 0x0}, 0x94) (async)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000080)={0x3})

1.073710696s ago: executing program 1 (id=1663):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)='u\b\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x20008000)

1.073446006s ago: executing program 0 (id=1664):
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, 0x0, 0x7})
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1c0}}], 0x1, 0x810)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{0x0}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.068539393s ago: executing program 5 (id=1665):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x10220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xff81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0}, &(0x7f0000000140)=0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ppoll(&(0x7f00000001c0)=[{r3, 0x100}, {r0, 0x4}, {r3, 0x40}, {r2, 0x8021}, {r2, 0x8001}, {r3, 0x2}, {r0, 0x1101}, {r0, 0x8000}], 0x8, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x8]}, 0x8)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x4a, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, [0x2]}})
sendto$packet(r0, &(0x7f0000000040)="5d91fdbc86981ba3f5b714792373a96d030a48e9925ec0fef9f8bac9c7047e7e8e610c7c5e8476597d1a1cf1896de458132588b0b1bf6119c7c9c10401e42b3d03a0ac19d440532346c0d57ce65ee621118abd65de", 0x55, 0x1, &(0x7f0000000180)={0x11, 0xd, r1, 0x1, 0x8, 0x6, @local}, 0x14)
socket$netlink(0x10, 0x3, 0xc) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x10220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xff81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) (async)
ppoll(&(0x7f00000001c0)=[{r3, 0x100}, {r0, 0x4}, {r3, 0x40}, {r2, 0x8021}, {r2, 0x8001}, {r3, 0x2}, {r0, 0x1101}, {r0, 0x8000}], 0x8, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x8]}, 0x8) (async)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x4a, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, [0x2]}}) (async)
sendto$packet(r0, &(0x7f0000000040)="5d91fdbc86981ba3f5b714792373a96d030a48e9925ec0fef9f8bac9c7047e7e8e610c7c5e8476597d1a1cf1896de458132588b0b1bf6119c7c9c10401e42b3d03a0ac19d440532346c0d57ce65ee621118abd65de", 0x55, 0x1, &(0x7f0000000180)={0x11, 0xd, r1, 0x1, 0x8, 0x6, @local}, 0x14) (async)

973.670142ms ago: executing program 5 (id=1666):
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}}, 0x0)
sendto$packet(r3, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0x11, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x780}}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

916.119819ms ago: executing program 5 (id=1667):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x40000)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
close(0x3)

915.257884ms ago: executing program 5 (id=1669):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211"], 0x288}, 0x1, 0x3f00000000000000, 0x0, 0x800}, 0x0)

853.377401ms ago: executing program 0 (id=1670):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x1000000, &(0x7f0000000600)="9efd"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r5 = semget$private(0x0, 0x3, 0x17)
semop(r5, &(0x7f0000000300)=[{0x1, 0xff00, 0x3000}, {0x0, 0x7, 0x800}], 0x2)
semctl$GETNCNT(r5, 0x1, 0xe, 0x0)
semop(r5, &(0x7f0000000240)=[{0x0, 0x2, 0x1000}, {0x3, 0x9e6, 0x800}, {0x3, 0x1}, {0x0, 0x3, 0x1000}, {0x0, 0x2, 0x1000}, {0x0, 0x400, 0x1000}, {0x4, 0x7, 0x1800}], 0x7)

850.331147ms ago: executing program 5 (id=1672):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x9)
bind$rds(r0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r3 = epoll_create1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000c54000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)

683.5785ms ago: executing program 5 (id=1674):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x0, 0x0, 0xb, 0x1, 0x4f3, 0xc6e, 0x9, 0x1, 0x1, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000380)={@none, 0x3000, 0x1ba7, 0x2b, 0x0, 0x4, "69d84c2bcb4c61d9baf80666420e22552bcb4ad7de276392bab335cf6943f2f28695e3ce964faf931efe009f1a88dc9d07dc62c8f642f48b0773f6304740a62af2c7ef122e8c131ab61e20214eae32466bdef9961548df502e31da0b64eab722a1d131691785b321971b948ef099b0a47e2663b0ab0b2be7dead4a9f427be901"})
r2 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7d7, 0x7f, 0x0)
prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x2000)=nil)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15)
remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x0})

413.343515ms ago: executing program 6 (id=1678):
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, 0x0, 0x7})
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1c0}}], 0x1, 0x810)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{0x0}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

243.098929ms ago: executing program 6 (id=1679):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
clock_gettime(0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000)
madvise(&(0x7f0000136000/0x3000)=nil, 0x3000, 0x11)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x161, 0x103)
execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000280)={[&(0x7f00000001c0)='name']})
r2 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x101980, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000009c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1dc7f39000080d00600000003a9f4f600000000400080", "129c9707", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1)
writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
close_range(r3, 0xffffffffffffffff, 0x0)
mmap$fb(&(0x7f0000289000/0x1000)=nil, 0x1000, 0x2000000, 0x30, r2, 0xc8000)

183.225134ms ago: executing program 1 (id=1680):
r0 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x6}) (async)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) (async)
bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) (async)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xc) (async, rerun: 32)
r2 = socket(0x10, 0x3, 0x0) (rerun: 32)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004) (async)
socket(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c001000000fae0090f000000000000a2bc5603ca0000327f89000000200000004a2c71083e09001778581acb6c0101ff0000000309", 0x48}], 0x1) (async)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r2], 0x40}}, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0xb)
sendto(r5, &(0x7f0000000440)="628d007775577c7ac6129e1e368beb719ef3bb94bd447fac31bed713a9e00b1b4437b50c4ab6feffa9c0bb511a2632d93d4b465ab28380d7cdb1a26f367c4a8a9483cf35a8849f9eaf80c298a6de485be5dd4e27825422ebf8ca31ab110fbdbfa16d7467037c592b9a1b7a07894c074ebeb80c80eb37d14348c73877bfee0b33a884c82c9766836a90ab6171a71e06ef7a45e2d35b4632ab2db9883a20249fbeae41cf217ce9ee0d44d58f29ebe46fe4a86899653af0577edd5020bc166c68a4a437981db1d7599d2e1595ca22ce6d69a834cf7dff80db42680c85c3d12b96055c68263193b749ffea9d0fe93a1702", 0xef, 0x800, 0x0, 0x0) (async, rerun: 32)
close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x100, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0e1d6c77e161"}]}, 0x40}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) (async)
r6 = gettid() (async, rerun: 32)
syslog(0x2, &(0x7f00000000c0)=""/225, 0xe1) (async, rerun: 32)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r7, &(0x7f0000000080)="99", 0x1) (async)
clock_getres(0x2, &(0x7f0000000380))
epoll_create(0xdf93)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
syz_open_procfs$namespace(r6, &(0x7f0000000240)='ns/cgroup\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffaefe}, [@map_fd={0x18, 0x9}]}, &(0x7f0000000400)='GPL\x00', 0x10, 0x84, &(0x7f0000000540)=""/132, 0x41000, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x7, 0x7fffffff, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x1, 0x2, 0x8, 0xa}, {0x0, 0x2, 0x3, 0x9}], 0x10, 0x8001}, 0x94) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x3e, "ab855294a95be0900ba75e15643e15634818dc71a353da25f752249a122bbe57ee3c1a1e8428ce47cf4dff689dfc005096f4909fd3133395e8f4e51216bc"}, &(0x7f0000000300)=0x46) (rerun: 32)

182.671558ms ago: executing program 6 (id=1681):
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b)
ioctl$KVM_GET_TSC_KHZ_vm(r0, 0xaea3)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)

182.593945ms ago: executing program 6 (id=1682):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211"], 0x288}, 0x1, 0x8800000000000000, 0x0, 0x800}, 0x0)

113.845893ms ago: executing program 6 (id=1683):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x9)
bind$rds(r0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
r3 = epoll_create1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000f54000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)

113.580395ms ago: executing program 1 (id=1684):
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000ee43f6642531e0800450000200000e00002119078000000000200000000004e20000c907861020000"], 0x0)

113.459889ms ago: executing program 1 (id=1685):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000000c0)="f058fe7dad777f8f", 0xa888}], 0x2}, 0x5)

553.85µs ago: executing program 0 (id=1686):
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fspick(r0, &(0x7f0000000000)='.\x00', 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000a40)={{0x1, 0x5, 0x3, 0xc7, 'syz0\x00', 0xc}, 0x4002, 0x200, 0x3, 0x0, 0x0, 0x9, 'syz1\x00', 0x0})
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x208001, 0x0)

150.25µs ago: executing program 6 (id=1687):
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, 0x0, 0x7})
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="140000000000000029000000340000000400000000000000f8000000000000002900000004000000041c000000000000fe70f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3892eca7ff4e630614c9ecfa5e6f8eee16c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b08801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad072800000001087a01800900000000000000040000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc020000000000000000000000000000930fe80ee304ecb784ec4655260cecea14040000000000000029000000340000000000000000000000980000000000000029000000360000005e10000000000000ff4050d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f0001000001000720000000030600ff0f02000000000000006609000000000000f7ffffffffffffff07080000000000facf874dcf60a737267de0a03eba3a31cc979eb55310ccefb022b8b9d430fabd0674b2ad75850bb008"], 0x1c0}}], 0x1, 0x810)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{0x0}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

0s ago: executing program 0 (id=1688):
mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x1000004, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'macvlan1\x00'})
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200)

kernel console output (not intermixed with test programs):

configured BSSID 50:50:50:50:50:50
[  122.684485][ T8410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.694120][ T8416] syzkaller0: entered promiscuous mode
[  122.695899][ T8416] syzkaller0: entered allmulticast mode
[  123.062033][ T8442] netlink: 'syz.0.695': attribute type 14 has an invalid length.
[  123.126837][ T8448] syzkaller0: entered promiscuous mode
[  123.128615][ T8448] syzkaller0: entered allmulticast mode
[  123.220673][ T8458] Bluetooth: hci0: unsupported parameter 255
[  123.225743][ T8458] Bluetooth: hci0: unsupported parameter 255
[  123.228878][ T8460] use of bytesused == 0 is deprecated and will be removed in the future,
[  123.229538][ T8458] netlink: 'syz.0.701': attribute type 1 has an invalid length.
[  123.231743][ T8460] use the actual size instead.
[  123.236767][ T8458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.701'.
[  123.292738][ T5943] Bluetooth: hci3: command tx timeout
[  124.050540][ T8458] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  124.053220][ T8458] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  124.060171][ T8458] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  124.062155][ T8458] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  124.067160][ T8458] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  124.069241][ T8458] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  124.074506][ T8458] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  124.077711][ T8458] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  124.079677][ T8458] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  124.084510][ T8458] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  124.172465][ T8470] binder: 8469:8470 ioctl c0306201 200000000280 returned -14
[  124.215065][ T8476] netlink: 'syz.1.707': attribute type 10 has an invalid length.
[  124.218078][ T8476] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.220953][ T8476] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.228711][ T8476] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.230981][ T8476] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.233468][ T8476] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.235867][ T8476] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.243410][ T8476] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  124.250289][ T8475] ALSA: mixer_oss: invalid OSS volume ''
[  124.358566][ T5943] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  124.388804][ T8491] netlink: 'syz.1.711': attribute type 1 has an invalid length.
[  124.409620][ T8491] bond4: entered promiscuous mode
[  124.411533][ T8491] 8021q: adding VLAN 0 to HW filter on device bond4
[  124.424739][ T8491] bond4: (slave bridge2): making interface the new active one
[  124.427173][ T8491] bridge2: entered promiscuous mode
[  124.429436][ T8491] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  124.487463][ T8499] trusted_key: encrypted_key: insufficient parameters specified
[  124.526463][ T8505] syzkaller0: entered promiscuous mode
[  124.528471][ T8505] syzkaller0: entered allmulticast mode
[  124.582432][   T65] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  124.641449][ T8513] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  124.643716][ T8513] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  124.649241][ T8513] vhci_hcd vhci_hcd.0: Device attached
[  124.651348][ T8514] vhci_hcd: cannot find a urb of seqnum 512 max seqnum 0
[  124.655096][ T8397] vhci_hcd vhci_hcd.5: stop threads
[  124.657407][ T8397] vhci_hcd vhci_hcd.5: release socket
[  124.659265][ T8397] vhci_hcd vhci_hcd.5: disconnect device
[  125.049869][ T8537] bond1 (unregistering): Released all slaves
[  125.225990][ T5943] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  125.240963][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.730'.
[  125.295088][ T8560] binder: 8556:8560 ioctl c0306201 200000000280 returned -14
[  125.370598][ T8575] hfsplus: unable to find HFS+ superblock
[  125.372767][ T8573] bridge3: entered promiscuous mode
[  125.373903][ T8574] hfsplus: unable to find HFS+ superblock
[  125.377697][ T8575] netlink: 80 bytes leftover after parsing attributes in process `syz.0.735'.
[  125.381052][ T8575] ªªªªªª: renamed from vlan0 (while UP)
[  125.452560][ T5943] Bluetooth: hci0: command 0x0406 tx timeout
[  125.577347][ T5943] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  125.924994][   T40] kauditd_printk_skb: 3 callbacks suppressed
[  125.925006][   T40] audit: type=1400 audit(1769263045.499:515): avc:  denied  { create } for  pid=8625 comm="syz.1.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  125.936097][   T40] audit: type=1400 audit(1769263045.499:516): avc:  denied  { setopt } for  pid=8625 comm="syz.1.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  125.936146][ T8628] xt_bpf: check failed: parse error
[  126.092401][ T5943] Bluetooth: hci2: command 0x040f tx timeout
[  126.092436][   T65] Bluetooth: hci3: command 0x0c1a tx timeout
[  126.096407][ T5939] Bluetooth: hci1: command 0x0406 tx timeout
[  126.168762][ T5943] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  126.191206][ T8640] binder: 8636:8640 ioctl c0306201 0 returned -14
[  126.363750][ T8653] syzkaller0: entered promiscuous mode
[  126.365677][ T5943] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  126.368134][ T8653] syzkaller0: entered allmulticast mode
[  126.644879][ T5939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  126.649098][ T5939] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  126.651780][ T5939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  126.662064][ T5939] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  126.665547][ T5939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  126.827208][ T8667] chnl_net:caif_netlink_parms(): no params data found
[  126.843396][ T5939] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  126.903261][ T8667] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.905947][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.908275][ T8667] bridge_slave_0: entered allmulticast mode
[  126.910962][ T8667] bridge_slave_0: entered promiscuous mode
[  126.917063][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.919373][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.921681][ T8667] bridge_slave_1: entered allmulticast mode
[  126.924643][ T8667] bridge_slave_1: entered promiscuous mode
[  126.940810][ T8667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.945283][ T8667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.959979][ T8667] team0: Port device team_slave_0 added
[  126.963825][ T8667] team0: Port device team_slave_1 added
[  126.980636][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.983436][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  126.991471][ T8667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.998113][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.000335][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  127.008920][ T8667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.033907][ T8667] hsr_slave_0: entered promiscuous mode
[  127.036294][ T8667] hsr_slave_1: entered promiscuous mode
[  127.081533][   T40] audit: type=1400 audit(1769263046.649:517): avc:  denied  { getopt } for  pid=8687 comm="syz.5.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  127.090303][ T8688] __nla_validate_parse: 5 callbacks suppressed
[  127.090313][ T8688] netlink: 360 bytes leftover after parsing attributes in process `syz.5.763'.
[  127.121144][ T8691] isofs_fill_super: bread failed, dev=nbd0, iso_blknum=16, block=32
[  127.170585][ T8667] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  127.177451][ T8667] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  127.183823][ T8667] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  127.189184][ T8667] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  127.196624][   T40] audit: type=1400 audit(1769263046.769:518): avc:  denied  { setopt } for  pid=8695 comm="syz.5.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  127.205329][ T8696] netlink: 'syz.5.767': attribute type 2 has an invalid length.
[  127.239577][ T8667] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.248535][ T8667] 8021q: adding VLAN 0 to HW filter on device team0
[  127.256154][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.258451][ T8410] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.261707][ T5939] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  127.266841][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.269153][ T8410] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.300730][ T8707] binder: BINDER_SET_CONTEXT_MGR already set
[  127.305522][ T8707] binder: 8706:8707 ioctl 4018620d 200000004a80 returned -16
[  127.308088][ T5939] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  127.308774][ T8707] binder: 8706:8707 ioctl c0306201 200000000280 returned -14
[  127.314265][ T8707] binder: 8706:8707 ioctl c0306201 0 returned -14
[  127.357198][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'.
[  127.360544][   T40] audit: type=1400 audit(1769263046.929:519): avc:  denied  { ioctl } for  pid=8713 comm="syz.1.771" path="socket:[32304]" dev="sockfs" ino=32304 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  127.439309][ T8667] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.463794][   T40] audit: type=1400 audit(1769263047.039:520): avc:  denied  { read } for  pid=8723 comm="syz.5.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  127.490958][ T8731] netlink: 'syz.0.776': attribute type 1 has an invalid length.
[  127.493646][ T8731] netlink: 'syz.0.776': attribute type 2 has an invalid length.
[  127.497634][   T40] audit: type=1400 audit(1769263047.069:521): avc:  denied  { bind } for  pid=8730 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  127.532683][ T5939] Bluetooth: hci0: command 0x0406 tx timeout
[  127.603535][ T8667] veth0_vlan: entered promiscuous mode
[  127.608805][ T8667] veth1_vlan: entered promiscuous mode
[  127.625533][ T8667] veth0_macvtap: entered promiscuous mode
[  127.629492][ T8667] veth1_macvtap: entered promiscuous mode
[  127.638473][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.644174][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.649906][ T8406] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.653340][ T8406] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.656663][ T8406] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.659571][ T8406] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.695078][ T8397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.697571][ T8397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.713484][ T8397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.716055][ T8397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.760201][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'.
[  127.762360][   T24] usb 10-1: new low-speed USB device number 2 using dummy_hcd
[  127.790104][ T5939] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  127.825175][ T8752] qrtr: Invalid version 0
[  127.905559][ T8755] can0: slcan on ttyS3.
[  127.910853][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.782'.
[  127.914089][ T8755] netlink: 3 bytes leftover after parsing attributes in process `syz.1.782'.
[  127.942318][   T24] usb 10-1: Invalid ep0 maxpacket: 64
[  128.072933][   T24] usb 10-1: new low-speed USB device number 3 using dummy_hcd
[  128.172324][ T5939] Bluetooth: hci2: command 0x040f tx timeout
[  128.182393][ T5939] Bluetooth: hci1: command 0x0406 tx timeout
[  128.182446][ T5943] Bluetooth: hci3: command 0x0c1a tx timeout
[  128.232316][   T24] usb 10-1: Invalid ep0 maxpacket: 64
[  128.234253][   T24] usb usb10-port1: attempt power cycle
[  128.265907][   T40] audit: type=1400 audit(1769263047.839:522): avc:  denied  { map } for  pid=8773 comm="syz.1.786" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  128.349354][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'.
[  128.458152][   T40] audit: type=1400 audit(1769263048.029:523): avc:  denied  { write } for  pid=8796 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  128.588150][ T5943] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  128.592339][   T24] usb 10-1: new low-speed USB device number 4 using dummy_hcd
[  128.613407][   T24] usb 10-1: Invalid ep0 maxpacket: 64
[  128.733465][ T5943] Bluetooth: hci4: command tx timeout
[  128.744555][   T24] usb 10-1: new low-speed USB device number 5 using dummy_hcd
[  128.774608][   T24] usb 10-1: Invalid ep0 maxpacket: 64
[  128.776383][   T24] usb usb10-port1: unable to enumerate USB device
[  128.798986][ T8818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.810903][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'.
[  129.078427][ T8855] syzkaller0: entered promiscuous mode
[  129.080686][ T8855] syzkaller0: entered allmulticast mode
[  129.230001][ T8863] : entered promiscuous mode
[  129.235813][ T8863] xt_hashlimit: max too large, truncated to 1048576
[  129.346389][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.809'.
[  129.379887][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.810'.
[  129.545812][ T8883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=8883 comm=syz.6.816
[  129.579888][   T40] audit: type=1400 audit(1769263049.149:524): avc:  denied  { getopt } for  pid=8885 comm="syz.0.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  129.703919][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.820'.
[  129.842367][   T62] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  130.012614][   T62] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  130.015623][   T62] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.018119][   T62] usb 11-1: Product: syz
[  130.019585][   T62] usb 11-1: Manufacturer: syz
[  130.021875][   T62] usb 11-1: SerialNumber: syz
[  130.036224][   T62] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  130.059686][   T53] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  130.190931][ T5943] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  130.252294][ T5943] Bluetooth: hci3: command 0x0c1a tx timeout
[  130.252383][ T5939] Bluetooth: hci2: command 0x040f tx timeout
[  130.434904][ T8943] ªªªªªª: renamed from vlan0 (while UP)
[  130.436920][ T8944] fuse: Bad value for 'fd'
[  130.441153][ T8946] sctp: [Deprecated]: syz.0.830 (pid 8946) Use of int in maxseg socket option.
[  130.441153][ T8946] Use struct sctp_assoc_value instead
[  130.474116][ T8886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.478452][ T8886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.812474][ T5939] Bluetooth: hci4: command tx timeout
[  131.132462][   T53] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive
[  131.135083][   T53] ath9k_htc: Failed to initialize the device
[  131.156278][   T40] audit: type=1400 audit(1769263050.729:525): avc:  denied  { getopt } for  pid=8978 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  131.157287][   T53] usb 11-1: ath9k_htc: USB layer deinitialized
[  132.342317][ T5939] Bluetooth: hci2: command 0x040f tx timeout
[  132.573396][ T8886] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  132.577050][ T8886] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  132.579308][ T8886] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  132.581786][ T8886] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  132.585648][ T8886] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  132.587867][ T8886] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  132.602824][ T8886] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  132.669432][   T10] usb 11-1: USB disconnect, device number 2
[  132.744906][ T5943] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  132.775336][ T9013] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  132.897050][ T5943] Bluetooth: hci0: command 0x0406 tx timeout
[  132.931955][ T9033] syzkaller0: entered promiscuous mode
[  132.934366][ T9033] syzkaller0: entered allmulticast mode
[  132.965061][ T9032] __nla_validate_parse: 3 callbacks suppressed
[  132.965075][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.851'.
[  133.161394][ T9061] futex_wake_op: syz.5.859 tries to shift op by 32; fix this program
[  133.314131][ T9078] veth0_to_bond: entered allmulticast mode
[  133.378404][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.862'.
[  133.465835][ T9096] syzkaller0: entered promiscuous mode
[  133.467558][ T9096] syzkaller0: entered allmulticast mode
[  133.649955][ T9019] binder: 9018:9019 ioctl c0306201 200000000280 returned -14
[  133.784117][ T5943] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  133.806107][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'.
[  133.813583][ T9125] netlink: 72 bytes leftover after parsing attributes in process `syz.6.872'.
[  133.819192][ T9130] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  134.019220][ T5943] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  134.046729][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'.
[  134.199324][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.882'.
[  134.203477][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.882'.
[  134.218278][ T9153] overlayfs: failed to resolve './bus': -2
[  134.518240][ T9158] netlink: 'syz.1.885': attribute type 4 has an invalid length.
[  134.553862][   T53] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  134.554586][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'.
[  134.652377][ T5939] Bluetooth: hci2: command 0x040f tx timeout
[  134.652378][ T5943] Bluetooth: hci4: command 0x0419 tx timeout
[  134.652466][   T65] Bluetooth: hci3: command 0x0c1a tx timeout
[  134.652491][   T65] Bluetooth: hci1: command 0x0406 tx timeout
[  134.702299][   T53] usb 5-1: Using ep0 maxpacket: 32
[  134.707124][   T53] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  134.710376][   T53] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  134.715780][   T53] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.719242][   T53] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  134.725847][   T53] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  134.728851][   T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.731290][   T53] usb 5-1: Product: syz
[  134.733587][   T53] usb 5-1: Manufacturer: syz
[  134.735108][   T53] usb 5-1: SerialNumber: syz
[  134.741468][    C3] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  134.749595][   T53] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input10
[  134.759422][   T40] audit: type=1400 audit(1769263054.329:526): avc:  denied  { read } for  pid=5330 comm="acpid" name="mouse2" dev="devtmpfs" ino=3192 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  134.766595][   T40] audit: type=1400 audit(1769263054.329:527): avc:  denied  { open } for  pid=5330 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3192 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  134.926919][ T9174] syzkaller0: entered promiscuous mode
[  134.928852][ T9174] syzkaller0: entered allmulticast mode
[  134.953665][ T5943] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  134.962773][   T53] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  134.966320][   T53]  (id 0x00)
[  134.996407][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.892'.
[  135.024305][   T53] rc_core: IR keymap rc-imon-pad not found
[  135.026266][   T53] Registered IR keymap rc-empty
[  135.029790][   T53] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  135.033644][   T53] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  135.074601][ T9185] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  135.077730][ T9185] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  135.080830][ T9185] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  135.154704][   T53] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0
[  135.159872][   T53] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input11
[  135.167282][   T53] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:5> initialized
[  135.173950][ T5943] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  135.174071][   T40] audit: type=1400 audit(1769263054.749:528): avc:  denied  { write } for  pid=9188 comm="syz.5.898" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  135.187434][   T40] audit: type=1400 audit(1769263054.749:529): avc:  denied  { open } for  pid=9188 comm="syz.5.898" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  135.195392][   T40] audit: type=1400 audit(1769263054.749:530): avc:  denied  { getopt } for  pid=9188 comm="syz.5.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  135.341602][ T9155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.884'.
[  135.352662][ T9155] imon:send_packet: task interrupted
[  135.354822][ T9155] imon:send_packet: packet tx failed (-512)
[  135.356907][ T9155] imon:vfd_write: send packet #0 failed
[  135.358991][ T9155] imon:send_packet: packet tx failed (-32)
[  135.361054][ T9155] imon:vfd_write: send packet #0 failed
[  135.364421][ T6020] usb 5-1: USB disconnect, device number 5
[  135.448383][ T5943] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  135.908761][ T8397] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.912629][ T8397] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.915457][ T8397] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.918216][ T8397] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.957105][ T9214] syzkaller0: entered promiscuous mode
[  135.958881][ T9214] syzkaller0: entered allmulticast mode
[  136.174637][ T5943] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  136.255013][ T9241] overlay: filesystem on ./bus not supported as upperdir
[  136.376229][ T9209] binder: 9208:9209 ioctl c0306201 200000000280 returned -14
[  136.410923][ T5943] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  136.546288][ T9262] fuse: Unknown parameter ''
[  136.550664][ T9263] fuse: Unknown parameter ''
[  136.602341][   T40] audit: type=1400 audit(1769263056.139:531): avc:  denied  { connect } for  pid=9261 comm="syz.0.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  136.608647][   T40] audit: type=1400 audit(1769263056.139:532): avc:  denied  { shutdown } for  pid=9261 comm="syz.0.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  136.612328][ T5943] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  136.614830][   T40] audit: type=1400 audit(1769263056.139:533): avc:  denied  { setattr } for  pid=9265 comm="syz.5.925" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  136.633686][ T9270] syzkaller0: entered promiscuous mode
[  136.635510][ T9270] syzkaller0: entered allmulticast mode
[  136.724382][   T40] audit: type=1400 audit(1769263056.299:534): avc:  denied  { connect } for  pid=9280 comm="syz.0.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  136.732482][ T5943] Bluetooth: hci4: command 0x0419 tx timeout
[  137.284327][   T40] audit: type=1400 audit(1769263056.859:535): avc:  denied  { ioctl } for  pid=9317 comm="syz.1.941" path="socket:[35704]" dev="sockfs" ino=35704 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  137.482879][   T40] audit: type=1400 audit(1769263057.049:536): avc:  denied  { setopt } for  pid=9331 comm="syz.5.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  137.696809][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  137.700280][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  137.752501][ T9300] binder: 9299:9300 ioctl c0306201 200000000280 returned -14
[  137.869935][ T9347] hsr_slave_1 (unregistering): left promiscuous mode
[  138.238081][ T9376] __nla_validate_parse: 15 callbacks suppressed
[  138.238224][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.6.960'.
[  138.307606][   T40] audit: type=1400 audit(1769263057.879:537): avc:  denied  { mount } for  pid=9380 comm="syz.6.962" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  138.322164][   T40] audit: type=1400 audit(1769263057.889:538): avc:  denied  { read } for  pid=9380 comm="syz.6.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  138.323773][ T9381] sysfs: Unknown parameter '/'
[  138.329151][   T40] audit: type=1400 audit(1769263057.899:539): avc:  denied  { ioctl } for  pid=9380 comm="syz.6.962" path="socket:[38344]" dev="sockfs" ino=38344 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  138.348171][   T40] audit: type=1400 audit(1769263057.899:540): avc:  denied  { remount } for  pid=9380 comm="syz.6.962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  138.396419][ T9389] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  138.399161][ T9389] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  138.403315][ T9389] vhci_hcd vhci_hcd.0: Device attached
[  138.416793][ T9391] usbip_core: unknown command
[  138.418511][ T9391] vhci_hcd: unknown pdu 0
[  138.420168][ T9391] usbip_core: unknown command
[  138.421942][ T8403] vhci_hcd vhci_hcd.6: stop threads
[  138.424419][ T8403] vhci_hcd vhci_hcd.6: release socket
[  138.426716][ T8403] vhci_hcd vhci_hcd.6: disconnect device
[  138.812299][ T5943] Bluetooth: hci4: command 0x0419 tx timeout
[  138.813992][ T9361] binder: 9360:9361 ioctl c0306201 200000000280 returned -14
[  138.875801][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.970'.
[  139.282474][  T942] usb 11-1: new full-speed USB device number 3 using dummy_hcd
[  139.324094][ T6049] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  139.402326][    T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  139.454207][  T942] usb 11-1: not running at top speed; connect to a high speed hub
[  139.457705][  T942] usb 11-1: config 24 has an invalid interface number: 121 but max is 1
[  139.460546][  T942] usb 11-1: config 24 has an invalid interface number: 172 but max is 1
[  139.463477][  T942] usb 11-1: config 24 has no interface number 0
[  139.465540][  T942] usb 11-1: config 24 has no interface number 1
[  139.470849][  T942] usb 11-1: config 24 interface 121 altsetting 15 has an invalid descriptor for endpoint zero, skipping
[  139.476028][  T942] usb 11-1: config 24 interface 121 altsetting 15 endpoint 0x8 has invalid wMaxPacketSize 0
[  139.479253][  T942] usb 11-1: config 24 interface 121 altsetting 15 has an invalid descriptor for endpoint zero, skipping
[  139.482799][  T942] usb 11-1: config 24 interface 172 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  139.486237][  T942] usb 11-1: config 24 interface 172 altsetting 1 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  139.489802][  T942] usb 11-1: config 24 interface 172 altsetting 1 endpoint 0xA has invalid maxpacket 61409, setting to 64
[  139.493370][  T942] usb 11-1: config 24 interface 172 altsetting 1 has a duplicate endpoint with address 0xA, skipping
[  139.496777][  T942] usb 11-1: config 24 interface 172 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64
[  139.500326][  T942] usb 11-1: config 24 interface 121 has no altsetting 0
[  139.502315][ T6049] usb 10-1: Using ep0 maxpacket: 8
[  139.503307][  T942] usb 11-1: config 24 interface 172 has no altsetting 0
[  139.507217][ T6049] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  139.508255][  T942] usb 11-1: New USB device found, idVendor=1fb9, idProduct=0200, bcdDevice=7d.cb
[  139.510898][ T6049] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  139.510923][ T6049] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  139.514028][  T942] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.517313][ T6049] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  139.520444][  T942] usb 11-1: Product: Е
[  139.523253][ T6049] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  139.526594][  T942] usb 11-1: Manufacturer: 귺�茦췪洼얌⳿�ꂿ誜桹啘텨�뮇銱
[  139.527930][ T6049] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  139.531881][  T942] usb 11-1: SerialNumber: syz
[  139.535624][ T6049] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.755419][ T9420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.756951][ T6049] usb 10-1: GET_CAPABILITIES returned 0
[  139.759752][ T9420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.759841][ T6049] usbtmc 10-1:16.0: can't read capabilities
[  139.790735][  T942] cp210x 11-1:24.121: cp210x converter detected
[  139.793226][  T942] cp210x 11-1:24.121: failed to get vendor val 0x370b size 1: -71
[  139.795862][  T942] cp210x 11-1:24.121: querying part number failed
[  139.815132][  T942] usb 11-1: cp210x converter now attached to ttyUSB0
[  139.834158][  T942] cp210x 11-1:24.172: cp210x converter detected
[  139.837670][  T942] cp210x 11-1:24.172: failed to get vendor val 0x370b size 1: -71
[  139.841080][  T942] cp210x 11-1:24.172: querying part number failed
[  139.848204][  T942] usb 11-1: cp210x converter now attached to ttyUSB1
[  139.858216][  T942] usb 11-1: USB disconnect, device number 3
[  139.892912][  T942] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  139.895760][  T942] cp210x 11-1:24.121: device disconnected
[  139.903486][  T942] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[  139.909991][  T942] cp210x 11-1:24.172: device disconnected
[  140.089075][    T9] usb 6-1: unable to read config index 0 descriptor/start: -71
[  140.094409][    T9] usb 6-1: can't read configurations, error -71
[  140.107466][   T24] usb 10-1: USB disconnect, device number 6
[  140.464105][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.6.981'.
[  140.546210][ T9457] geneve2: entered promiscuous mode
[  140.547991][ T9457] geneve2: entered allmulticast mode
[  140.868819][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.991'.
[  140.893061][ T5943] Bluetooth: hci4: command 0x0419 tx timeout
[  141.062718][ T9489] QAT: Invalid ioctl -1006595043
[  141.102343][ T1031] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  141.175923][ T9498] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.999'.
[  141.278518][ T1031] usb 10-1: unable to read config index 0 descriptor/start: -71
[  141.281242][ T1031] usb 10-1: can't read configurations, error -71
[  141.367766][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1002'.
[  141.418324][ T9510] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1003'.
[  141.421549][ T9510] hsr0: entered promiscuous mode
[  141.423712][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1003'.
[  141.427523][ T9510] hsr_slave_0: left promiscuous mode
[  141.429998][ T9510] hsr_slave_1: left promiscuous mode
[  141.444200][ T9510] hsr0 (unregistering): left promiscuous mode
[  141.534687][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.539321][ T9517] SELinux: failed to load policy
[  141.541293][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.544201][ T9517] SELinux: failed to load policy
[  141.545993][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.548832][ T9517] SELinux: failed to load policy
[  141.550584][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.553842][ T9517] SELinux: failed to load policy
[  141.555614][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.558495][ T9517] SELinux: failed to load policy
[  141.560286][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.563396][ T9517] SELinux: failed to load policy
[  141.565137][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.567910][ T9517] SELinux: failed to load policy
[  141.570231][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.573157][ T9517] SELinux: failed to load policy
[  141.574990][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.577778][ T9517] SELinux: failed to load policy
[  141.579439][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.582314][ T9517] SELinux: failed to load policy
[  141.583988][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.586911][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.589788][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.593326][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.596236][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.599121][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.601988][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.604980][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.607868][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.610731][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.616911][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.619866][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.622875][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.625839][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.628653][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.631430][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.634352][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.637761][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.641607][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.645627][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.649526][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.653539][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.657472][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.661417][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.664843][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.667709][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.670574][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.673615][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.676631][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.679416][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.682376][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.685413][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.688286][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.691135][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.694149][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.697282][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.700166][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.703304][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.706634][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.710113][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.713262][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.716746][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.720164][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.723366][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.726525][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.729413][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.732385][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.735339][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.738210][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.741100][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.744282][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.747274][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.750180][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.753192][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.756301][ T9517] SELinux:  policydb version -308156646 does not match my version range 15-35
[  141.763170][ T9521] geneve2: entered promiscuous mode
[  141.805681][ T9525] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  141.808518][ T9525] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  141.813022][   T40] kauditd_printk_skb: 7 callbacks suppressed
[  141.813037][   T40] audit: type=1400 audit(1769263061.379:548): avc:  denied  { firmware_load } for  pid=9524 comm="syz.6.1007" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  141.814366][ T9525] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  142.156445][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1015'.
[  142.160663][ T9547] random: crng reseeded on system resumption
[  142.180143][   T40] audit: type=1400 audit(1769263061.749:549): avc:  denied  { setopt } for  pid=9546 comm="syz.1.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  142.274502][ T9559] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«=
[  142.277611][ T9513] binder: 9512:9513 ioctl c0306201 200000000280 returned -14
[  142.319034][ T9561] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1019'.
[  142.347081][ T9561] hsr_slave_1 (unregistering): left promiscuous mode
[  142.404005][ T9565] [U] J"—E:ÀÆ"


[  143.064064][ T9598] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  143.198898][ T5943] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  143.207233][ T9614] openvswitch: netlink: VXLAN extension 145 out of range max 1
[  143.277423][ T9616] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  143.547190][ T9631] __nla_validate_parse: 5 callbacks suppressed
[  143.547203][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1044'.
[  143.593994][ T9633] 8021q: adding VLAN 0 to HW filter on device bond1
[  143.599672][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1045'.
[  143.607150][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1045'.
[  143.617562][ T9633] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.621005][ T9633] bond1: (slave bond0): making interface the new active one
[  143.624942][ T9633] bond1: (slave bond0): Enslaving as an active interface with an up link
[  143.654752][ T9639] veth0_to_bridge: entered promiscuous mode
[  143.667555][ T5943] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  143.668089][ T9638] veth0_to_bridge: left promiscuous mode
[  143.798594][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1053'.
[  143.857081][   T40] audit: type=1400 audit(1769263063.429:550): avc:  denied  { set_context_mgr } for  pid=9661 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  143.867043][   T40] audit: type=1400 audit(1769263063.439:551): avc:  denied  { call } for  pid=9661 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  143.874144][   T40] audit: type=1400 audit(1769263063.439:552): avc:  denied  { transfer } for  pid=9661 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  143.982610][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'.
[  144.006216][   T40] audit: type=1400 audit(1769263063.579:553): avc:  denied  { module_request } for  pid=9667 comm="syz.6.1057" kmod="tcp_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  144.076668][   T40] audit: type=1400 audit(1769263063.649:554): avc:  denied  { validate_trans } for  pid=9678 comm="syz.6.1060" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  144.088309][   T40] audit: type=1400 audit(1769263063.659:555): avc:  denied  { mount } for  pid=9678 comm="syz.6.1060" name="/" dev="configfs" ino=3146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  144.095992][   T40] audit: type=1400 audit(1769263063.659:556): avc:  denied  { search } for  pid=9678 comm="syz.6.1060" name="/" dev="configfs" ino=3146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  144.103264][   T40] audit: type=1400 audit(1769263063.659:557): avc:  denied  { search } for  pid=9678 comm="syz.6.1060" name="/" dev="configfs" ino=3146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  144.287677][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1063'.
[  144.562397][    T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  144.567511][ T5943] Bluetooth: hci3: Unexpected cc 0x60ac with no status
[  144.716072][    T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  144.719021][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.721567][    T9] usb 6-1: Product: syz
[  144.723399][    T9] usb 6-1: Manufacturer: syz
[  144.732703][    T9] usb 6-1: SerialNumber: syz
[  144.738226][    T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  144.750397][    T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  144.977054][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.980603][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.981086][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1071'.
[  145.019691][ T9715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1072'.
[  145.022874][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  145.059981][ T9717] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  145.095238][ T9717] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.130831][   T24] usb 6-1: USB disconnect, device number 9
[  145.183506][   T10] usb 5-1: config index 0 descriptor too short (expected 65535, got 36)
[  145.186401][   T10] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  145.189770][   T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3
[  145.193442][   T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  145.196579][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.200938][   T10] usb 5-1: rejected 1 configuration due to insufficient available bus power
[  145.203924][   T10] usb 5-1: no configuration chosen from 1 choice
[  145.282604][ T9733] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  145.287025][ T9733] cramfs: wrong magic
[  145.309607][ T9733] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1078'.
[  145.513469][ T9738] can0 (unregistered): slcan off ttyS3.
[  145.529318][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'.
[  145.599154][ T9762] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  145.601949][ T9763] netlink: 'syz.1.1085': attribute type 4 has an invalid length.
[  145.608436][ T9762] netlink: 'syz.1.1085': attribute type 4 has an invalid length.
[  145.671208][ T9772] netlink: 'syz.1.1087': attribute type 8 has an invalid length.
[  145.773039][    T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  145.775447][    T9] ath9k_htc: Failed to initialize the device
[  145.777763][   T24] usb 6-1: ath9k_htc: USB layer deinitialized
[  145.801503][ T9786] ucma_write: process 253 (syz.6.1091) changed security contexts after opening file descriptor, this is not allowed.
[  146.002846][ T9813] autofs4:pid:9813:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374)
[  146.007106][ T9813] autofs4:pid:9813:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374)
[  146.130127][ T9824] overlay: Bad value for 'verity'
[  146.135647][ T9824] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  146.139207][ T9824] overlayfs: maximum fs stacking depth exceeded
[  146.143792][ T5943] Bluetooth: hci3: unexpected event for opcode 0x2006
[  146.150523][ T9826] overlayfs: missing 'lowerdir'
[  146.154707][ T9826] overlayfs: missing 'lowerdir'
[  146.176773][ T9830] netlink: 'syz.5.1102': attribute type 1 has an invalid length.
[  146.228833][ T9836] QAT: Invalid ioctl -1071094137
[  146.315167][ T9842] bridge6: entered promiscuous mode
[  147.362333][    T9] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  147.513513][    T9] usb 6-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  147.516550][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.521364][    T9] usb 6-1: config 0 descriptor??
[  147.726609][   T40] kauditd_printk_skb: 6 callbacks suppressed
[  147.726620][   T40] audit: type=1400 audit(1769263067.299:564): avc:  denied  { getopt } for  pid=9849 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  147.727985][ T9850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.732904][ T6020] usb 5-1: USB disconnect, device number 6
[  147.735145][ T9850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.746686][ T5943] Bluetooth: hci0: adv larger than maximum supported
[  147.747690][ T5943] Bluetooth: hci0: Malformed LE Event: 0x0d
[  147.766504][    T9] usb 6-1: string descriptor 0 read error: -71
[  147.777617][    T9] usb-storage 6-1:0.0: USB Mass Storage device detected
[  147.795374][    T9] usb-storage 6-1:0.0: Quirks match for vid 05ab pid 0060: 2
[  147.862909][    T9] usb 6-1: USB disconnect, device number 10
[  147.875922][ T9861] sp0: Synchronizing with TNC
[  148.009573][   T40] audit: type=1400 audit(1769263067.579:565): avc:  denied  { write } for  pid=9863 comm="syz.6.1113" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  148.020831][   T40] audit: type=1400 audit(1769263067.579:566): avc:  denied  { open } for  pid=9863 comm="syz.6.1113" path="/98/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  148.030565][   T40] audit: type=1400 audit(1769263067.589:567): avc:  denied  { ioctl } for  pid=9863 comm="syz.6.1113" path="/98/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  148.315376][ T9892] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9892 comm=syz.1.1122
[  148.322564][ T9892] overlayfs: missing 'lowerdir'
[  148.351156][   T40] audit: type=1326 audit(1769263067.919:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9893 comm="syz.1.1123" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff61379acb9 code=0x0
[  148.645258][ T9916] __nla_validate_parse: 9 callbacks suppressed
[  148.645271][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1131'.
[  149.021818][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1140'.
[  149.038770][ T9938] bond1: entered promiscuous mode
[  149.040940][ T9938] 8021q: adding VLAN 0 to HW filter on device bond1
[  149.047370][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1140'.
[  149.050368][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'.
[  149.053339][ T9938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1140'.
[  149.087521][ T9943] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1141'.
[  149.094960][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.098040][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.107327][ T9943] IPv6: NLM_F_CREATE should be specified when creating new route
[  149.216848][ T9946] netlink: 'syz.1.1142': attribute type 1 has an invalid length.
[  149.233580][   T40] audit: type=1400 audit(1769263068.809:569): avc:  denied  { mounton } for  pid=9947 comm="syz.6.1143" path="/proc/290/task" dev="proc" ino=40874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  149.248933][ T9946] 8021q: adding VLAN 0 to HW filter on device bond5
[  149.257664][ T9946] ip6erspan0: entered allmulticast mode
[  149.297608][ T9955] syzkaller0: entered promiscuous mode
[  149.299466][ T9955] syzkaller0: entered allmulticast mode
[  149.302109][ T5943] Bluetooth: hci2: unexpected event for opcode 0x0c12
[  149.337040][   T40] audit: type=1400 audit(1769263068.909:570): avc:  denied  { ioctl } for  pid=9960 comm="syz.5.1147" path="socket:[40950]" dev="sockfs" ino=40950 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  149.391489][   T40] audit: type=1400 audit(1769263068.959:571): avc:  denied  { read } for  pid=9962 comm="syz.1.1149" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  149.491835][ T9978] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  149.525402][ T9974] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.527920][ T9974] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.609599][ T9974] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.683349][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1156'.
[  149.741003][ T1148] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.744355][ T1148] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.747265][ T1148] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.750339][ T1148] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.058819][   T40] audit: type=1400 audit(1769263069.629:572): avc:  denied  { create } for  pid=10019 comm="syz.5.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  150.066259][   T40] audit: type=1400 audit(1769263069.629:573): avc:  denied  { bind } for  pid=10019 comm="syz.5.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  150.378311][T10037] new mount options do not match the existing superblock, will be ignored
[  150.629200][T10048] netlink: 'syz.6.1174': attribute type 1 has an invalid length.
[  150.646567][T10053] xt_recent: Unsupported userspace flags (000000b2)
[  150.649140][T10048] bond2: entered promiscuous mode
[  150.651059][T10048] 8021q: adding VLAN 0 to HW filter on device bond2
[  150.670279][T10048] 8021q: adding VLAN 0 to HW filter on device bond2
[  150.674074][T10048] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  150.677285][T10048] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  150.683244][T10048] bond2: (slave vxcan3): making interface the new active one
[  150.686514][T10048] vxcan3: entered promiscuous mode
[  150.689194][T10048] vxcan3: left promiscuous mode
[  150.702034][T10055] x_tables: duplicate underflow at hook 2
[  150.705369][T10055] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1177'.
[  150.708690][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1177'.
[  150.838137][T10070] netlink: 'syz.6.1181': attribute type 1 has an invalid length.
[  150.847194][T10070] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1181'.
[  151.073553][T10089] hsr0: entered promiscuous mode
[  151.076573][T10089] hsr_slave_0: left promiscuous mode
[  151.079778][T10089] hsr_slave_1: left promiscuous mode
[  151.100137][T10089] hsr0 (unregistering): left promiscuous mode
[  151.130058][T10095] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.155385][T10095] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.242783][  T942] usb 11-1: new full-speed USB device number 4 using dummy_hcd
[  151.305829][T10112] cgroup: Unknown subsys name 'discard'
[  151.349396][T10115] netlink: 'syz.5.1195': attribute type 6 has an invalid length.
[  151.352723][T10115] netlink: 'syz.5.1195': attribute type 6 has an invalid length.
[  151.423839][  T942] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  151.427564][  T942] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 64
[  151.430959][  T942] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  151.433985][  T942] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.439395][  T942] usb 11-1: config 0 descriptor??
[  151.441814][T10087] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  151.478694][T10119] loop2: detected capacity change from 0 to 7
[  151.485227][T10119] Dev loop2: unable to read RDB block 7
[  151.487066][T10119]  loop2: AHDI p1 p2 p3
[  151.488472][T10119] loop2: partition table partially beyond EOD, truncated
[  151.491935][T10119] loop2: p1 start 1601398130 is beyond EOD, truncated
[  151.495247][T10119] loop2: p2 start 1702059890 is beyond EOD, truncated
[  151.648732][  T942] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  151.752318][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  151.852113][ T6020] usb 11-1: USB disconnect, device number 4
[  151.928213][    T9] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  151.932159][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  151.935770][    T9] usb 5-1: Product: syz
[  151.937589][    T9] usb 5-1: Manufacturer: syz
[  151.939555][    T9] usb 5-1: SerialNumber: syz
[  151.943911][    T9] usb 5-1: config 0 descriptor??
[  151.949452][    T9] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  151.953758][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  151.963699][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  151.967458][    T9] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  151.970226][    T9] usb 5-1: media controller created
[  151.981361][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  152.158162][    T9] cxusb: set interface failed
[  152.159817][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  152.183000][    T9] DVB: Unable to find symbol mt352_attach()
[  152.185330][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  152.188233][    T9] zl10353_read_register: readreg error (reg=127, ret==-121)
[  152.190713][    T9] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  152.242290][    T9] rc_core: IR keymap rc-dvico-mce not found
[  152.244286][    T9] Registered IR keymap rc-empty
[  152.246828][    T9] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0
[  152.250716][    T9] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input12
[  152.256946][    T9] dvb-usb: schedule remote query interval to 100 msecs.
[  152.259193][    T9] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  152.263121][    T9] usb 5-1: USB disconnect, device number 7
[  152.283670][    T9] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  152.773789][ T5943] Bluetooth: hci2: ISO packet for unknown connection handle 1038
[  152.776346][   T40] kauditd_printk_skb: 5 callbacks suppressed
[  152.776355][   T40] audit: type=1400 audit(1769263072.349:579): avc:  denied  { create } for  pid=10162 comm="syz.0.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  152.906769][   T40] audit: type=1400 audit(1769263072.479:580): avc:  denied  { ioctl } for  pid=10171 comm="syz.0.1216" path="pid:[4026532874]" dev="nsfs" ino=4026532874 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  152.907142][T10176] netlink: 'syz.0.1216': attribute type 1 has an invalid length.
[  152.907175][T10175] netlink: 'syz.0.1216': attribute type 1 has an invalid length.
[  152.923028][T10175] bond2: entered promiscuous mode
[  152.925370][T10175] 8021q: adding VLAN 0 to HW filter on device bond2
[  153.383173][ T5943] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  153.386815][ T5943] Bluetooth: hci2: Injecting HCI hardware error event
[  153.390629][ T5943] Bluetooth: hci2: hardware error 0x00
[  153.401202][T10194] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.451383][   T40] audit: type=1400 audit(1769263073.019:581): avc:  denied  { create } for  pid=10202 comm="syz.5.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  153.460629][   T40] audit: type=1400 audit(1769263073.029:582): avc:  denied  { write } for  pid=10202 comm="syz.5.1225" path="socket:[42718]" dev="sockfs" ino=42718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  153.467606][T10194] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.479147][T10194] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.529768][T10210] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[  153.571782][ T1148] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.575583][ T1148] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.579040][ T1148] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.581855][ T1148] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.611900][   T40] audit: type=1400 audit(1769263073.179:583): avc:  denied  { bind } for  pid=10215 comm="syz.5.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  153.656734][   T40] audit: type=1400 audit(1769263073.229:584): avc:  denied  { setopt } for  pid=10220 comm="syz.1.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  153.667077][T10221] capability: warning: `syz.1.1230' uses deprecated v2 capabilities in a way that may be insecure
[  153.772856][T10231] netlink: 'syz.1.1233': attribute type 10 has an invalid length.
[  153.775584][T10231] __nla_validate_parse: 7 callbacks suppressed
[  153.775593][T10231] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1233'.
[  153.794864][T10233] [syz.0.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820]
[  153.810761][T10237] smc: net device bond0 applied user defined pnetid SYZ2
[  153.999640][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'.
[  154.035371][T10252] overlayfs: upper fs does not support file handles, falling back to index=off.
[  154.039388][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.042673][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.045565][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.048678][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.052569][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.055945][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.058716][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.061713][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.065189][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.068752][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.071755][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.076223][   T40] audit: type=1400 audit(1769263073.649:585): avc:  denied  { bpf } for  pid=10257 comm="syz.5.1243" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  154.083250][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.086225][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.089076][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.092047][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.095619][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.104704][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.108939][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.112006][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.116037][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.118848][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.121612][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.127405][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.130234][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.133200][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.136001][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.140557][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.144694][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.147464][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.150293][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.153065][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.156461][T10252] overlay: filesystem on ./file0 not supported as upperdir
[  154.199195][   T40] audit: type=1400 audit(1769263073.769:586): avc:  denied  { perfmon } for  pid=10266 comm="syz.0.1245" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  154.329394][T10277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1250'.
[  154.332190][T10275] xt_l2tp: wrong L2TP version: 0
[  154.402092][T10285] block nbd1: NBD_DISCONNECT
[  154.479187][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'.
[  154.513642][T10287] veth5: entered promiscuous mode
[  154.515406][T10287] veth5: entered allmulticast mode
[  154.517439][T10287] bridge7: port 1(veth5) entered blocking state
[  154.519785][T10287] bridge7: port 1(veth5) entered disabled state
[  154.525093][T10287] bridge7: port 1(veth5) entered blocking state
[  154.527258][T10287] bridge7: port 1(veth5) entered forwarding state
[  154.541725][T10223] binder: 10222:10223 ioctl c0306201 200000000280 returned -14
[  154.561089][T10287] veth7: entered promiscuous mode
[  154.562854][T10287] veth7: entered allmulticast mode
[  154.565142][T10287] bridge7: port 2(veth7) entered blocking state
[  154.567459][T10287] bridge7: port 2(veth7) entered disabled state
[  154.573772][T10287] bridge7: port 2(veth7) entered blocking state
[  154.576512][T10287] bridge7: port 2(veth7) entered forwarding state
[  154.584764][   T40] audit: type=1400 audit(1769263074.159:587): avc:  denied  { remount } for  pid=10288 comm="syz.0.1255" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  154.612357][ T6004] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  154.618766][T10294] cgroup: subsys name conflicts with all
[  154.620855][T10294] cgroup: subsys name conflicts with all
[  154.624247][T10294] cgroup: subsys name conflicts with all
[  154.626185][T10294] cgroup: subsys name conflicts with all
[  154.628121][T10294] cgroup: subsys name conflicts with all
[  154.630111][T10294] cgroup: subsys name conflicts with all
[  154.632010][T10294] cgroup: subsys name conflicts with all
[  154.634611][T10294] cgroup: subsys name conflicts with all
[  154.636620][T10294] cgroup: subsys name conflicts with all
[  154.638523][T10294] cgroup: subsys name conflicts with all
[  154.640466][T10294] cgroup: subsys name conflicts with all
[  154.644092][T10294] cgroup: subsys name conflicts with all
[  154.646201][T10294] cgroup: subsys name conflicts with all
[  154.648143][T10294] cgroup: subsys name conflicts with all
[  154.650167][T10294] cgroup: subsys name conflicts with all
[  154.652170][T10294] cgroup: subsys name conflicts with all
[  154.654198][T10294] cgroup: subsys name conflicts with all
[  154.656362][T10294] cgroup: subsys name conflicts with all
[  154.658284][T10294] cgroup: subsys name conflicts with all
[  154.660271][T10294] cgroup: subsys name conflicts with all
[  154.662182][T10294] cgroup: subsys name conflicts with all
[  154.664228][T10294] cgroup: subsys name conflicts with all
[  154.666345][T10294] cgroup: subsys name conflicts with all
[  154.668280][T10294] cgroup: subsys name conflicts with all
[  154.669072][T10289] fuse: Bad value for 'fd'
[  154.670334][T10294] cgroup: subsys name conflicts with all
[  154.672333][T10289] overlay: Unknown parameter 'volatile::'
[  154.674020][T10294] cgroup: subsys name conflicts with all
[  154.679139][T10294] cgroup: subsys name conflicts with all
[  154.681624][T10294] cgroup: subsys name conflicts with all
[  154.683770][T10294] cgroup: subsys name conflicts with all
[  154.685883][T10294] cgroup: subsys name conflicts with all
[  154.687958][T10294] cgroup: subsys name conflicts with all
[  154.689953][T10294] cgroup: subsys name conflicts with all
[  154.691934][T10294] cgroup: subsys name conflicts with all
[  154.722660][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'.
[  154.774449][ T6004] usb 10-1: config 0 has an invalid interface number: 185 but max is 3
[  154.777126][ T6004] usb 10-1: config 0 has an invalid interface number: 73 but max is 3
[  154.779711][ T6004] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.784152][ T6004] usb 10-1: config 0 has 3 interfaces, different from the descriptor's value: 4
[  154.787915][ T6004] usb 10-1: config 0 has no interface number 0
[  154.790497][ T6004] usb 10-1: config 0 has no interface number 1
[  154.794393][ T6004] usb 10-1: config 0 interface 185 altsetting 14 endpoint 0x4 has an invalid bInterval 204, changing to 11
[  154.800260][ T6004] usb 10-1: config 0 interface 185 altsetting 14 has a duplicate endpoint with address 0x4, skipping
[  154.805267][ T6004] usb 10-1: config 0 interface 73 altsetting 4 endpoint 0xC has an invalid bInterval 0, changing to 7
[  154.808739][ T6004] usb 10-1: config 0 interface 73 altsetting 4 has a duplicate endpoint with address 0xC, skipping
[  154.815558][ T6004] usb 10-1: config 0 interface 73 altsetting 4 has a duplicate endpoint with address 0xC, skipping
[  154.819091][ T6004] usb 10-1: config 0 interface 2 altsetting 93 has a duplicate endpoint with address 0x4, skipping
[  154.822755][ T6004] usb 10-1: config 0 interface 2 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  154.828929][ T6004] usb 10-1: config 0 interface 185 has no altsetting 0
[  154.831209][ T6004] usb 10-1: config 0 interface 73 has no altsetting 0
[  154.834292][ T6004] usb 10-1: config 0 interface 2 has no altsetting 0
[  154.838301][ T6004] usb 10-1: New USB device found, idVendor=1457, idProduct=5118, bcdDevice=6c.ba
[  154.841184][ T6004] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.843542][T10310] netlink: 'syz.1.1263': attribute type 10 has an invalid length.
[  154.844088][ T6004] usb 10-1: Product: syz
[  154.847586][ T6004] usb 10-1: Manufacturer: ä Š
[  154.849102][ T6004] usb 10-1: SerialNumber: syz
[  154.853743][ T6004] usb 10-1: config 0 descriptor??
[  154.859218][T10312] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  154.945401][T10325] binder: 10318:10325 ioctl c0306201 0 returned -14
[  155.092869][T10331] dlm: Unknown command passed to DLM device : 33
[  155.092869][T10331] 
[  155.094904][T10332] dlm: Unknown command passed to DLM device : 33
[  155.094904][T10332] 
[  155.112593][T10333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.116242][T10333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.139980][T10336] netlink: 3900 bytes leftover after parsing attributes in process `syz.1.1271'.
[  155.145031][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1270'.
[  155.232280][   T40] audit: type=1400 audit(1769263074.769:588): avc:  denied  { map } for  pid=10335 comm="syz.1.1271" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  155.263317][ T8403] bridge7: port 1(veth5) entered disabled state
[  155.267172][ T8403] bridge7: port 2(veth7) entered disabled state
[  155.452462][ T5943] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  155.672958][T10365] netlink: 'syz.6.1278': attribute type 30 has an invalid length.
[  155.700328][T10365] bond3: option arp_missed_max: invalid value (0)
[  155.703178][T10365] bond3: option arp_missed_max: allowed values 1 - 255
[  155.707545][T10365] bond3 (unregistering): Released all slaves
[  155.720592][T10321] binder: 10318:10321 ioctl c0306201 200000000280 returned -14
[  155.855617][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1282'.
[  156.226145][T10413] pimreg: entered allmulticast mode
[  156.266091][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1292'.
[  156.297502][T10419] syz.1.1293 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  156.337174][T10421] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  156.339497][T10421] overlayfs: failed to set xattr on upper
[  156.341324][T10421] overlayfs: ...falling back to redirect_dir=nofollow.
[  156.345213][T10421] overlayfs: ...falling back to index=off.
[  156.347141][T10421] overlayfs: ...falling back to uuid=null.
[  156.352431][T10421] overlayfs: cleanup of 'bus/work' failed (-13)
[  156.355079][T10421] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[  156.358983][T10421] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  156.364536][T10421] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null.
[  156.373873][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  156.522553][    T9] usb 5-1: Using ep0 maxpacket: 32
[  156.535746][    T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  156.538370][    T9] usb 5-1: config 0 has no interface number 0
[  156.547178][    T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  156.550076][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.562507][    T9] usb 5-1: Product: syz
[  156.563976][    T9] usb 5-1: Manufacturer: syz
[  156.565605][    T9] usb 5-1: SerialNumber: syz
[  156.569288][    T9] usb 5-1: config 0 descriptor??
[  156.573780][    T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  156.576729][    T9] usb 5-1: selecting invalid altsetting 1
[  156.578537][    T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  156.593263][    T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  156.597086][    T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  156.599726][    T9] usb 5-1: media controller created
[  156.616291][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  156.779360][T10403] netlink: 'syz.0.1288': attribute type 11 has an invalid length.
[  157.095300][T10443] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.098450][T10443] 8021q: adding VLAN 0 to HW filter on device team0
[  157.104159][T10443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.178469][T10442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.378908][ T6004] usb 10-1: bad CDC descriptors
[  157.385314][ T6004] usb 10-1: USB disconnect, device number 9
[  157.452454][  T942] usb 11-1: new high-speed USB device number 5 using dummy_hcd
[  157.512360][ T6020] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  157.565777][T10456] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  157.568196][T10456] UDF-fs: Scanning with blocksize 2048 failed
[  157.571152][T10456] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found
[  157.573738][T10456] UDF-fs: Scanning with blocksize 4096 failed
[  157.604046][  T942] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.611297][  T942] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.614736][  T942] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  157.618943][  T942] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  157.621960][  T942] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.628340][  T942] usb 11-1: config 0 descriptor??
[  157.654469][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1306'.
[  157.663842][ T6020] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  157.666961][ T6020] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  157.671151][ T6020] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  157.674531][ T6020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.692499][    T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  157.696212][    T9] zl10353_read_register: readreg error (reg=127, ret==-110)
[  157.696295][T10403] usb 5-1: dvb_usb_ce6230: I2C read not implemented
[  157.726250][    T9] usb 5-1: USB disconnect, device number 8
[  157.850617][  T942] usbhid 11-1:0.0: can't add hid device: -71
[  157.855300][  T942] usbhid 11-1:0.0: probe with driver usbhid failed with error -71
[  157.860985][  T942] usb 11-1: USB disconnect, device number 5
[  157.880750][ T6020] usb 6-1: usb_control_msg returned -32
[  157.882803][ T6020] usbtmc 6-1:16.0: can't read capabilities
[  158.146152][   T40] kauditd_printk_skb: 8 callbacks suppressed
[  158.146165][   T40] audit: type=1400 audit(1769263077.719:597): avc:  denied  { read } for  pid=10488 comm="syz.5.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  158.237217][T10501] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  158.248963][T10505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.586883][T10535] syz.6.1329 uses old SIOCAX25GETINFO
[  158.603075][   T40] audit: type=1400 audit(1769263078.179:598): avc:  denied  { write } for  pid=10537 comm="syz.0.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  158.603394][T10538] tipc: Started in network mode
[  158.610878][T10538] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  158.617721][T10538] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  158.620795][T10538] tipc: Enabled bearer <udp:syz0>, priority 10
[  158.627554][T10535] chnl_net:caif_netlink_parms(): no params data found
[  158.810401][T10556] syzkaller0: entered promiscuous mode
[  158.813461][T10556] syzkaller0: entered allmulticast mode
[  158.865036][T10560] could not allocate digest TFM handle cryptd(blake2b-160)
[  158.996021][   T40] audit: type=1326 audit(1769263078.569:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10568 comm="syz.6.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3d39acb9 code=0x7ffc0000
[  159.012261][   T40] audit: type=1326 audit(1769263078.569:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10568 comm="syz.6.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3d39acb9 code=0x7ffc0000
[  159.020010][   T40] audit: type=1326 audit(1769263078.569:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10568 comm="syz.6.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd3d39c547 code=0x7ffc0000
[  159.027453][   T40] audit: type=1326 audit(1769263078.569:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10568 comm="syz.6.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdd3d35b58e code=0x7ffc0000
[  159.034706][   T40] audit: type=1326 audit(1769263078.569:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10568 comm="syz.6.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdd3d35b58e code=0x7ffc0000
[  159.042159][   T40] audit: type=1326 audit(1769263078.569:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10568 comm="syz.6.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdd3d35b58e code=0x7ffc0000
[  159.051709][   T40] audit: type=1326 audit(1769263078.569:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10568 comm="syz.6.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdd3d35b58e code=0x7ffc0000
[  159.059589][   T40] audit: type=1326 audit(1769263078.569:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10568 comm="syz.6.1336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3d39acb9 code=0x7ffc0000
[  159.138010][T10577] __nla_validate_parse: 7 callbacks suppressed
[  159.138021][T10577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1339'.
[  159.151462][T10577] 8021q: adding VLAN 0 to HW filter on device bond3
[  159.158189][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1340'.
[  159.160294][T10577] bond3: (slave batadv1): Opening slave failed
[  159.188258][T10582] sg_write: data in/out 8156/251 bytes for SCSI command 0x15-- guessing data in;
[  159.188258][T10582]    program syz.6.1341 not setting count and/or reply_len properly
[  159.194789][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1341'.
[  159.201837][ T8404] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.201880][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1341'.
[  159.204940][ T8404] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.214758][T10585] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.216801][T10585] bridge0: port 2(bridge_slave_1) entered listening state
[  159.219247][T10585] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.221347][T10585] bridge0: port 1(bridge_slave_0) entered listening state
[  159.228844][T10585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.233979][ T8404] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.236803][ T8404] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.249248][T10587] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1342'.
[  159.262658][T10585] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.265652][T10585] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.443099][T10585] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.446093][T10585] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.458066][T10600] syzkaller0: entered promiscuous mode
[  159.459669][T10600] syzkaller0: entered allmulticast mode
[  159.507346][T10585] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.511085][T10585] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.605814][T10585] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.609264][T10585] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.622456][ T6020] tipc: Node number set to 1
[  159.690320][ T8401] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.693383][ T8401] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.700853][ T8401] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.703954][ T8401] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.712042][ T8401] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.715096][ T8401] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.722925][ T8404] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.725658][ T8404] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.766574][T10610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1350'.
[  159.852330][ T5944] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  159.872169][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'.
[  159.875375][T10620] netlink: 'syz.0.1355': attribute type 30 has an invalid length.
[  160.006461][ T5944] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  160.010559][ T5944] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.014160][ T5944] usb 10-1: Product: syz
[  160.016074][ T5944] usb 10-1: Manufacturer: syz
[  160.018120][ T5944] usb 10-1: SerialNumber: syz
[  160.121663][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1360'.
[  160.253856][ T5944] rtl8150 10-1:1.0: couldn't reset the device
[  160.255989][ T5944] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5
[  160.261207][ T5944] usb 10-1: USB disconnect, device number 10
[  160.280337][ T6041] usb 6-1: USB disconnect, device number 11
[  160.524650][T10653] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  160.772724][T10662] tipc: MTU too low for tipc bearer
[  160.794351][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1371'.
[  160.842980][T10666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1372'.
[  160.878794][T10669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10669 comm=syz.6.1373
[  160.884401][T10669] netlink: 'syz.6.1373': attribute type 1 has an invalid length.
[  160.903929][T10666] XFS (nbd0): SB validate failed with error -5.
[  160.929202][T10669] bond3: (slave bridge1): making interface the new active one
[  160.942094][T10669] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  161.049803][T10679] syzkaller0: entered promiscuous mode
[  161.051798][T10679] syzkaller0: entered allmulticast mode
[  161.288057][T10696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5121 sclass=netlink_route_socket pid=10696 comm=syz.6.1378
[  161.575308][T10716] syzkaller0: entered promiscuous mode
[  161.577499][T10716] syzkaller0: entered allmulticast mode
[  162.330029][T10753] binder: 10752:10753 ioctl c0286415 200000000140 returned -22
[  162.704819][T10776] 9p: Could not find request transport: v
[  162.995641][T10791] tmpfs: Bad value for 'nr_inodes'
[  163.046462][ T5943] Bluetooth: hci4: unexpected event for opcode 0x040e
[  164.055911][T10820] netlink: 'syz.0.1426': attribute type 21 has an invalid length.
[  164.058447][T10820] netlink: 'syz.0.1426': attribute type 4 has an invalid length.
[  164.061141][T10820] netlink: 'syz.0.1426': attribute type 5 has an invalid length.
[  164.106072][T10826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.171653][T10830] __nla_validate_parse: 10 callbacks suppressed
[  164.171666][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1430'.
[  164.204064][T10833] IPv4: Oversized IP packet from 127.202.26.0
[  164.277598][T10839] gfs2: not a GFS2 filesystem
[  164.380083][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'.
[  164.524863][   T40] kauditd_printk_skb: 14 callbacks suppressed
[  164.524875][   T40] audit: type=1400 audit(1769263084.099:621): avc:  denied  { execute } for  pid=10867 comm="syz.6.1440" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  164.587521][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1441'.
[  164.618695][T10875] overlayfs: failed to set uuid (193/file0, err=-1); falling back to uuid=null.
[  164.621731][T10875] overlayfs: failed to verify upper root origin
[  164.639246][T10877] random: crng reseeded on system resumption
[  164.675018][T10877] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4170616171 (533838869888 ns) > initial count (363496784128 ns). Using initial count to start timer.
[  164.682834][T10877] Restarting kernel threads ...
[  164.685599][T10877] Done restarting kernel threads.
[  164.889019][T10893] syzkaller0: entered promiscuous mode
[  164.891602][T10893] syzkaller0: entered allmulticast mode
[  165.012935][T10902] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.1451'.
[  165.044049][T10905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.052721][T10905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.160926][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1453'.
[  165.182312][   T34] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  165.282303][  T942] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  165.293960][   T40] audit: type=1400 audit(1769263084.869:622): avc:  denied  { getattr } for  pid=10912 comm="syz.0.1455" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  165.302484][T10913] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  165.354975][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1456'.
[  165.357884][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1456'.
[  165.364273][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1456'.
[  165.383454][   T34] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  165.386522][   T34] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  165.389795][   T34] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  165.392990][   T34] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  165.396555][   T34] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  165.401773][   T34] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  165.405313][   T34] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  165.408092][   T34] usb 10-1: Product: syz
[  165.409526][   T34] usb 10-1: Manufacturer: syz
[  165.409594][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1458'.
[  165.411326][T10928] syzkaller0: entered promiscuous mode
[  165.416056][T10928] syzkaller0: entered allmulticast mode
[  165.416746][   T34] cdc_wdm 10-1:1.0: skipping garbage
[  165.421216][   T34] cdc_wdm 10-1:1.0: skipping garbage
[  165.424595][   T34] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  165.426571][   T34] cdc_wdm 10-1:1.0: Unknown control protocol
[  165.427739][T10873] binder: 10872:10873 ioctl c0306201 200000000280 returned -14
[  165.487980][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1461'.
[  165.561488][T10942] netlink: 'syz.1.1464': attribute type 21 has an invalid length.
[  165.568696][   T40] audit: type=1400 audit(1769263085.139:623): avc:  denied  { audit_control } for  pid=10941 comm="syz.1.1464" capability=30  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  165.694082][ T6021] usb 10-1: USB disconnect, device number 11
[  165.894314][T10959] vlan2: entered allmulticast mode
[  165.896621][T10959] bond0: entered allmulticast mode
[  165.898782][T10959] bond_slave_0: entered allmulticast mode
[  165.901294][T10959] bond_slave_1: entered allmulticast mode
[  165.903885][T10959] bridge0: entered allmulticast mode
[  166.202304][   T34] usb 11-1: new high-speed USB device number 6 using dummy_hcd
[  166.234753][T10969] syzkaller0: entered promiscuous mode
[  166.236586][T10969] syzkaller0: entered allmulticast mode
[  166.340374][   T40] audit: type=1400 audit(1769263085.909:624): avc:  denied  { accept } for  pid=10970 comm="syz.5.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  166.387105][   T34] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  166.390043][   T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  166.392797][   T34] usb 11-1: Product: syz
[  166.394155][   T34] usb 11-1: Manufacturer: syz
[  166.395725][   T34] usb 11-1: SerialNumber: syz
[  166.398997][   T34] usb 11-1: config 0 descriptor??
[  166.404944][   T34] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  166.407682][   T34] dvb-usb: bulk message failed: -22 (2/0)
[  166.412010][   T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  166.415460][   T34] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  166.418179][   T34] usb 11-1: media controller created
[  166.426679][   T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  166.547240][   T40] audit: type=1400 audit(1769263086.119:625): avc:  denied  { map } for  pid=10976 comm="syz.5.1477" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  166.602969][T10965] cxusb: i2c wr: len=112 is too big!
[  166.602969][T10965] 
[  166.611344][T10965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10965 comm=syz.6.1471
[  166.616797][   T34] cxusb: set interface failed
[  166.618419][   T34] dvb-usb: bulk message failed: -22 (1/0)
[  166.645953][   T34] DVB: Unable to find symbol mt352_attach()
[  166.647970][   T34] dvb-usb: bulk message failed: -22 (5/0)
[  166.649878][   T34] zl10353_read_register: readreg error (reg=127, ret==-121)
[  166.654465][   T34] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  166.712318][   T34] rc_core: IR keymap rc-dvico-mce not found
[  166.714457][   T34] Registered IR keymap rc-empty
[  166.717063][   T34] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0
[  166.721590][   T34] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input13
[  166.728072][   T34] dvb-usb: schedule remote query interval to 100 msecs.
[  166.730785][   T34] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  166.739324][   T34] usb 11-1: USB disconnect, device number 6
[  166.774847][   T34] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  166.786300][ T6041] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  166.850542][T10988] netlink: 'syz.0.1480': attribute type 1 has an invalid length.
[  166.855423][   T40] audit: type=1400 audit(1769263086.429:626): avc:  denied  { setopt } for  pid=10987 comm="syz.0.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  166.942691][ T6041] usb 10-1: Using ep0 maxpacket: 32
[  166.948546][ T6041] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  166.954729][ T6041] usb 10-1: config 0 has no interfaces?
[  166.958240][ T6041] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  166.961534][ T6041] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.964826][ T6041] usb 10-1: Product: syz
[  166.966230][ T6041] usb 10-1: Manufacturer: syz
[  166.967763][ T6041] usb 10-1: SerialNumber: syz
[  166.980558][ T6041] usb 10-1: config 0 descriptor??
[  167.045242][T10994] syzkaller0: entered promiscuous mode
[  167.046967][T10994] syzkaller0: entered allmulticast mode
[  167.142041][T11001] program syz.6.1485 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  167.154579][T10998] cdrom: dropping to single frame dma
[  167.169055][T11006] FAULT_INJECTION: forcing a failure.
[  167.169055][T11006] name failslab, interval 1, probability 0, space 0, times 1
[  167.175172][T11006] CPU: 0 UID: 0 PID: 11006 Comm: syz.6.1486 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  167.175192][T11006] Tainted: [L]=SOFTLOCKUP
[  167.175196][T11006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  167.175203][T11006] Call Trace:
[  167.175207][T11006]  <TASK>
[  167.175212][T11006]  dump_stack_lvl+0x100/0x190
[  167.175248][T11006]  should_fail_ex.cold+0x5/0xa
[  167.175268][T11006]  should_failslab+0xc2/0x120
[  167.175285][T11006]  ? tomoyo_realpath_from_path+0xb6/0x690
[  167.175303][T11006]  __kmalloc_noprof+0xf6/0x9c0
[  167.175319][T11006]  ? tomoyo_realpath_from_path+0xb6/0x690
[  167.175332][T11006]  tomoyo_realpath_from_path+0xb6/0x690
[  167.175348][T11006]  tomoyo_path_number_perm+0x23c/0x580
[  167.175367][T11006]  ? tomoyo_path_number_perm+0x22e/0x580
[  167.175386][T11006]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  167.175419][T11006]  ? find_held_lock+0x2b/0x80
[  167.175434][T11006]  ? hook_file_ioctl_common+0x146/0x410
[  167.175449][T11006]  ? __fget_files+0x215/0x3d0
[  167.175466][T11006]  ? __fget_files+0x21f/0x3d0
[  167.175482][T11006]  security_file_ioctl+0xd3/0x230
[  167.175494][T11006]  __x64_sys_ioctl+0xb7/0x210
[  167.175507][T11006]  do_syscall_64+0xc9/0xf80
[  167.175527][T11006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.175539][T11006] RIP: 0033:0x7fdd3d39acb9
[  167.175550][T11006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.175561][T11006] RSP: 002b:00007fdd3e1d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  167.175572][T11006] RAX: ffffffffffffffda RBX: 00007fdd3d615fa0 RCX: 00007fdd3d39acb9
[  167.175579][T11006] RDX: 0000200000000280 RSI: 00000000c0306201 RDI: 0000000000000003
[  167.175586][T11006] RBP: 00007fdd3e1d6090 R08: 0000000000000000 R09: 0000000000000000
[  167.175593][T11006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.175599][T11006] R13: 00007fdd3d616038 R14: 00007fdd3d615fa0 R15: 00007ffd7dba0d38
[  167.175614][T11006]  </TASK>
[  167.175619][T11006] ERROR: Out of memory at tomoyo_realpath_from_path.
[  167.186178][ T5943] Bluetooth: hci3: unexpected event for opcode 0x0000
[  167.193088][T10977] netlink: 'syz.5.1477': attribute type 1 has an invalid length.
[  167.221278][T11006] binder: 11005:11006 ioctl c0306201 200000000280 returned -14
[  167.227059][   T34] usb 10-1: USB disconnect, device number 12
[  167.367290][T11012] binder: 11008:11012 ioctl c0306201 200000000280 returned -14
[  167.644110][T11035] FAULT_INJECTION: forcing a failure.
[  167.644110][T11035] name failslab, interval 1, probability 0, space 0, times 0
[  167.648054][T11035] CPU: 1 UID: 0 PID: 11035 Comm: syz.1.1495 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  167.648073][T11035] Tainted: [L]=SOFTLOCKUP
[  167.648077][T11035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  167.648083][T11035] Call Trace:
[  167.648088][T11035]  <TASK>
[  167.648092][T11035]  dump_stack_lvl+0x100/0x190
[  167.648110][T11035]  should_fail_ex.cold+0x5/0xa
[  167.648130][T11035]  should_failslab+0xc2/0x120
[  167.648146][T11035]  ? tomoyo_encode2+0xfb/0x3c0
[  167.648157][T11035]  __kmalloc_noprof+0xf6/0x9c0
[  167.648176][T11035]  ? tomoyo_encode2+0xfb/0x3c0
[  167.648187][T11035]  tomoyo_encode2+0xfb/0x3c0
[  167.648200][T11035]  tomoyo_encode+0x29/0x50
[  167.648212][T11035]  tomoyo_realpath_from_path+0x18c/0x690
[  167.648228][T11035]  tomoyo_path_number_perm+0x23c/0x580
[  167.648245][T11035]  ? tomoyo_path_number_perm+0x22e/0x580
[  167.648263][T11035]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  167.648294][T11035]  ? find_held_lock+0x2b/0x80
[  167.648309][T11035]  ? hook_file_ioctl_common+0x146/0x410
[  167.648324][T11035]  ? __fget_files+0x215/0x3d0
[  167.648339][T11035]  ? __fget_files+0x21f/0x3d0
[  167.648354][T11035]  security_file_ioctl+0xd3/0x230
[  167.648367][T11035]  __x64_sys_ioctl+0xb7/0x210
[  167.648379][T11035]  do_syscall_64+0xc9/0xf80
[  167.648393][T11035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.648405][T11035] RIP: 0033:0x7ff61379acb9
[  167.648414][T11035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.648425][T11035] RSP: 002b:00007ff6145fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  167.648436][T11035] RAX: ffffffffffffffda RBX: 00007ff613a15fa0 RCX: 00007ff61379acb9
[  167.648443][T11035] RDX: 0000200000000280 RSI: 00000000c0306201 RDI: 0000000000000003
[  167.648449][T11035] RBP: 00007ff6145fe090 R08: 0000000000000000 R09: 0000000000000000
[  167.648455][T11035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.648462][T11035] R13: 00007ff613a16038 R14: 00007ff613a15fa0 R15: 00007ffff3e84358
[  167.648475][T11035]  </TASK>
[  167.648488][T11035] ERROR: Out of memory at tomoyo_realpath_from_path.
[  167.694144][   T40] audit: type=1400 audit(1769263087.269:627): avc:  denied  { write } for  pid=11032 comm="\%@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  167.716934][T11035] binder: 11034:11035 ioctl c0306201 200000000280 returned -14
[  167.768052][   T40] audit: type=1400 audit(1769263087.339:628): avc:  denied  { read } for  pid=11038 comm="syz.1.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  168.007617][T11048] binder: 11047:11048 ioctl c0306201 200000000280 returned -14
[  168.037323][T11051] SELinux:  Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped).
[  168.041839][   T40] audit: type=1400 audit(1769263087.609:629): avc:  denied  { relabelto } for  pid=11050 comm="syz.6.1500" name="220" dev="tmpfs" ino=1139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0"
[  168.063030][   T40] audit: type=1400 audit(1769263087.629:630): avc:  denied  { associate } for  pid=11050 comm="syz.6.1500" name="220" dev="tmpfs" ino=1139 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0"
[  168.131573][T11063] FAULT_INJECTION: forcing a failure.
[  168.131573][T11063] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  168.136334][T11063] CPU: 3 UID: 0 PID: 11063 Comm: syz.5.1506 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  168.136353][T11063] Tainted: [L]=SOFTLOCKUP
[  168.136357][T11063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  168.136363][T11063] Call Trace:
[  168.136367][T11063]  <TASK>
[  168.136371][T11063]  dump_stack_lvl+0x100/0x190
[  168.136389][T11063]  should_fail_ex.cold+0x5/0xa
[  168.136409][T11063]  _copy_from_user+0x2e/0xd0
[  168.136424][T11063]  binder_ioctl+0x491/0x7450
[  168.136439][T11063]  ? tomoyo_path_number_perm+0x188/0x580
[  168.136460][T11063]  ? __pfx_binder_ioctl+0x10/0x10
[  168.136472][T11063]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  168.136489][T11063]  ? do_vfs_ioctl+0x226/0x13e0
[  168.136500][T11063]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  168.136509][T11063]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  168.136522][T11063]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  168.136542][T11063]  ? selinux_file_ioctl+0x139/0x290
[  168.136553][T11063]  ? selinux_file_ioctl+0xb4/0x290
[  168.136564][T11063]  ? __pfx_binder_ioctl+0x10/0x10
[  168.136575][T11063]  __x64_sys_ioctl+0x18e/0x210
[  168.136586][T11063]  do_syscall_64+0xc9/0xf80
[  168.136599][T11063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.136611][T11063] RIP: 0033:0x7efcb4d9acb9
[  168.136619][T11063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.136630][T11063] RSP: 002b:00007efcb5c2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  168.136641][T11063] RAX: ffffffffffffffda RBX: 00007efcb5015fa0 RCX: 00007efcb4d9acb9
[  168.136647][T11063] RDX: 0000200000000280 RSI: 00000000c0306201 RDI: 0000000000000003
[  168.136654][T11063] RBP: 00007efcb5c2f090 R08: 0000000000000000 R09: 0000000000000000
[  168.136660][T11063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.136666][T11063] R13: 00007efcb5016038 R14: 00007efcb5015fa0 R15: 00007ffede22a478
[  168.136680][T11063]  </TASK>
[  168.136684][T11063] binder: 11062:11063 ioctl c0306201 200000000280 returned -14
[  168.169502][T11073] syzkaller0: entered promiscuous mode
[  168.209165][T11073] syzkaller0: entered allmulticast mode
[  168.301709][T11080] overlayfs: unescaped trailing colons in lowerdir mount option.
[  168.325772][T11083] binder: 11082:11083 ioctl c018937d 200000000240 returned -22
[  168.331213][T11083] binder: 11082:11083 ioctl c0306201 200000000280 returned -14
[  168.542081][T11100] FAULT_INJECTION: forcing a failure.
[  168.542081][T11100] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.546811][T11100] CPU: 2 UID: 0 PID: 11100 Comm: syz.0.1518 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  168.546830][T11100] Tainted: [L]=SOFTLOCKUP
[  168.546834][T11100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  168.546840][T11100] Call Trace:
[  168.546844][T11100]  <TASK>
[  168.546848][T11100]  dump_stack_lvl+0x100/0x190
[  168.546894][T11100]  should_fail_ex.cold+0x5/0xa
[  168.546914][T11100]  _copy_to_user+0x32/0xd0
[  168.546936][T11100]  binder_ioctl+0x4870/0x7450
[  168.546963][T11100]  ? __pfx_binder_ioctl+0x10/0x10
[  168.546974][T11100]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  168.546993][T11100]  ? do_vfs_ioctl+0x226/0x13e0
[  168.547004][T11100]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  168.547013][T11100]  ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540
[  168.547027][T11100]  ? __pfx_autoremove_wake_function+0x10/0x10
[  168.547053][T11100]  ? selinux_file_ioctl+0x139/0x290
[  168.547063][T11100]  ? selinux_file_ioctl+0xb4/0x290
[  168.547075][T11100]  ? __pfx_binder_ioctl+0x10/0x10
[  168.547085][T11100]  __x64_sys_ioctl+0x18e/0x210
[  168.547097][T11100]  do_syscall_64+0xc9/0xf80
[  168.547110][T11100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.547122][T11100] RIP: 0033:0x7f8f1099acb9
[  168.547131][T11100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.547141][T11100] RSP: 002b:00007f8f11771028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  168.547152][T11100] RAX: ffffffffffffffda RBX: 00007f8f10c15fa0 RCX: 00007f8f1099acb9
[  168.547159][T11100] RDX: 0000200000000280 RSI: 00000000c0306201 RDI: 0000000000000003
[  168.547165][T11100] RBP: 00007f8f11771090 R08: 0000000000000000 R09: 0000000000000000
[  168.547171][T11100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.547178][T11100] R13: 00007f8f10c16038 R14: 00007f8f10c15fa0 R15: 00007ffd0daa4058
[  168.547192][T11100]  </TASK>
[  168.547207][T11100] binder: 11099:11100 ioctl c0306201 200000000280 returned -14
[  169.019271][T11121] syzkaller0: entered promiscuous mode
[  169.021133][T11121] syzkaller0: entered allmulticast mode
[  169.052483][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  169.205871][   T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  169.208743][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.211539][   T10] usb 5-1: Product: syz
[  169.213649][   T10] usb 5-1: Manufacturer: syz
[  169.215350][   T10] usb 5-1: SerialNumber: syz
[  169.225715][   T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  169.239912][   T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  169.252747][T11130] binder: 11129:11130 ioctl c0306201 200000000280 returned -14
[  169.255360][T11130] FAULT_INJECTION: forcing a failure.
[  169.255360][T11130] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  169.259910][T11130] CPU: 0 UID: 0 PID: 11130 Comm: syz.6.1528 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  169.259928][T11130] Tainted: [L]=SOFTLOCKUP
[  169.259931][T11130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  169.259938][T11130] Call Trace:
[  169.259942][T11130]  <TASK>
[  169.259946][T11130]  dump_stack_lvl+0x100/0x190
[  169.259965][T11130]  should_fail_ex.cold+0x5/0xa
[  169.259998][T11130]  _copy_to_user+0x32/0xd0
[  169.260015][T11130]  simple_read_from_buffer+0xcb/0x170
[  169.260030][T11130]  proc_fail_nth_read+0x1af/0x230
[  169.260047][T11130]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  169.260063][T11130]  ? rw_verify_area+0xce/0x6d0
[  169.260073][T11130]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  169.260087][T11130]  vfs_read+0x1e4/0xb30
[  169.260100][T11130]  ? __pfx_vfs_read+0x10/0x10
[  169.260111][T11130]  ? find_held_lock+0x2b/0x80
[  169.260126][T11130]  ? __fget_files+0x215/0x3d0
[  169.260141][T11130]  ? __fget_files+0x21f/0x3d0
[  169.260158][T11130]  ksys_read+0x12a/0x250
[  169.260169][T11130]  ? __pfx_ksys_read+0x10/0x10
[  169.260185][T11130]  do_syscall_64+0xc9/0xf80
[  169.260198][T11130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.260209][T11130] RIP: 0033:0x7fdd3d35b58e
[  169.260218][T11130] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  169.260229][T11130] RSP: 002b:00007fdd3e1d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  169.260240][T11130] RAX: ffffffffffffffda RBX: 00007fdd3e1d66c0 RCX: 00007fdd3d35b58e
[  169.260246][T11130] RDX: 000000000000000f RSI: 00007fdd3e1d60a0 RDI: 0000000000000006
[  169.260253][T11130] RBP: 00007fdd3e1d6090 R08: 0000000000000000 R09: 0000000000000000
[  169.260259][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.260265][T11130] R13: 00007fdd3d616038 R14: 00007fdd3d615fa0 R15: 00007ffd7dba0d38
[  169.260279][T11130]  </TASK>
[  169.418293][T11142] 0xfffffffffffffffd-0x000000020000 : ""
[  169.420303][T11142] mtd: partition "" is out of reach -- disabled
[  169.435994][T11142] ftl_cs: FTL header not found.
[  169.450235][    T9] usb 5-1: USB disconnect, device number 10
[  169.502062][T11151] syzkaller0: entered promiscuous mode
[  169.504189][T11151] syzkaller0: entered allmulticast mode
[  169.619428][T11161] __nla_validate_parse: 18 callbacks suppressed
[  169.619440][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1538'.
[  169.628583][   T40] kauditd_printk_skb: 3 callbacks suppressed
[  169.628594][   T40] audit: type=1400 audit(1769263089.199:634): avc:  denied  { execute_no_trans } for  pid=11152 comm="syz.6.1535" path="/file2" dev="ramfs" ino=50764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  169.654667][T11163] tipc: Started in network mode
[  169.656279][T11163] tipc: Node identity 84e, cluster identity 4711
[  169.658252][T11163] tipc: Node number set to 2126
[  169.686738][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1539'.
[  169.764004][T11165] binder_alloc: 11164: binder_alloc_buf, no vma
[  169.766783][T11165] binder: 11164:11165 ioctl c0306201 200000000280 returned -14
[  169.889021][T11171] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1542'.
[  170.252395][   T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  170.254686][   T10] ath9k_htc: Failed to initialize the device
[  170.258019][    T9] usb 5-1: ath9k_htc: USB layer deinitialized
[  170.483147][T11189] syzkaller0: entered promiscuous mode
[  170.484943][T11189] syzkaller0: entered allmulticast mode
[  170.494609][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'.
[  170.531542][   T40] audit: type=1400 audit(1769263090.099:635): avc:  denied  { getopt } for  pid=11192 comm="syz.1.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  170.539511][T11193] 9p: Unknown uid 00000000004294967295
[  170.543730][   T40] audit: type=1400 audit(1769263090.119:636): avc:  denied  { remount } for  pid=11192 comm="syz.1.1549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  170.550322][T11193] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1549'.
[  170.556035][   T40] audit: type=1400 audit(1769263090.129:637): avc:  denied  { read } for  pid=11192 comm="syz.1.1549" dev="nsfs" ino=4026532898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  170.568512][   T40] audit: type=1400 audit(1769263090.129:638): avc:  denied  { open } for  pid=11192 comm="syz.1.1549" path="net:[4026532898]" dev="nsfs" ino=4026532898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  170.576417][   T40] audit: type=1400 audit(1769263090.129:639): avc:  denied  { associate } for  pid=11195 comm="syz.1.1549" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  170.646365][T11200] overlayfs: failed to resolve './file1': -2
[  170.809415][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1557'.
[  170.819339][T11218] syzkaller0: entered promiscuous mode
[  170.821122][T11218] syzkaller0: entered allmulticast mode
[  170.905127][T11231] random: crng reseeded on system resumption
[  170.914737][T11231] block nbd0: not configured, cannot reconfigure
[  170.971424][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1565'.
[  170.985018][T11236] Falling back ldisc for ttynull.
[  171.012963][ T5943] Bluetooth: hci3: unexpected subevent 0x19 length: 24 < 28
[  171.016895][   T40] audit: type=1400 audit(1769263090.589:640): avc:  denied  { write } for  pid=11241 comm="syz.5.1567" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  171.022969][T11233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1563'.
[  171.029362][T11244] Bluetooth: MGMT ver 1.23
[  171.031346][T11242] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  171.052438][T11242] CIFS mount error: No usable UNC path provided in device string!
[  171.052438][T11242] 
[  171.056377][T11242] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  171.062368][T11242] binder: 11241:11242 ioctl c0306201 200000000280 returned -14
[  171.096542][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'.
[  171.104197][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1568'.
[  171.107128][T11249] bridge_slave_1: left allmulticast mode
[  171.109422][T11249] bridge_slave_1: left promiscuous mode
[  171.111340][T11249] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.119544][T11257] binder: 11241:11257 ioctl 127f 200000000100 returned -22
[  171.125786][T11257] binder: 11241:11257 ioctl c0306201 200000000180 returned -14
[  171.126472][T11249] bridge_slave_0: left allmulticast mode
[  171.128717][T11257] binder: 11241:11257 ioctl c0189375 200000000480 returned -22
[  171.130025][T11249] bridge_slave_0: left promiscuous mode
[  171.135423][T11257] binder: 11241:11257 ioctl c0306201 200000004a40 returned -14
[  171.140647][T11249] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.196455][T11279] overlayfs: failed to set uuid (227/file0, err=-1); falling back to uuid=null.
[  171.200055][T11279] overlayfs: failed to verify upper root origin
[  171.223200][ T5943] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  171.226331][ T5943] Bluetooth: hci3: Injecting HCI hardware error event
[  171.229632][ T5943] Bluetooth: hci3: hardware error 0x00
[  171.332950][T11278] syzkaller0: entered promiscuous mode
[  171.335075][T11278] syzkaller0: entered allmulticast mode
[  171.649477][T11308] block nbd0: not configured, cannot reconfigure
[  172.633835][T11330] fuse: Unknown parameter 'fdæt>îiàVßg«¥'
[  172.648499][   T40] audit: type=1400 audit(1769263092.219:641): avc:  denied  { execute } for  pid=11329 comm="syz.0.1585" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=53505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  172.665900][T11330] binder: BINDER_SET_CONTEXT_MGR already set
[  172.668517][T11330] binder: 11329:11330 ioctl 4018620d 200000004a80 returned -16
[  172.690874][T11338] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  172.874992][T11351] syzkaller0: entered promiscuous mode
[  172.876823][T11351] syzkaller0: entered allmulticast mode
[  173.071264][   T40] audit: type=1400 audit(1769263092.639:642): avc:  denied  { append } for  pid=11355 comm="syz.0.1594" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  173.133708][T11343] Bluetooth: hci0: Opcode 0x0401 failed: -112
[  173.136817][T11358] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  173.138808][T11358] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  173.141039][T11358] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  173.193856][   T40] audit: type=1400 audit(1769263092.769:643): avc:  denied  { accept } for  pid=11367 comm="syz.5.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  173.226911][T11363] binder: 11361:11363 ioctl c0306201 200000000280 returned -14
[  173.292314][ T5943] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  173.423092][T11385] syzkaller0: entered promiscuous mode
[  173.425075][T11385] syzkaller0: entered allmulticast mode
[  173.542489][T11393] netlink: 'syz.0.1606': attribute type 11 has an invalid length.
[  173.545037][T11393] netlink: 'syz.0.1606': attribute type 7 has an invalid length.
[  173.651283][T11399] binder: 11398:11399 ioctl c0306201 200000000280 returned -14
[  173.697191][T11406] team_slave_0: entered promiscuous mode
[  173.699335][T11406] team_slave_1: entered promiscuous mode
[  173.703907][T11406] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  173.855733][T11417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=11417 comm=syz.6.1614
[  173.859853][T11417] netlink: 'syz.6.1614': attribute type 4 has an invalid length.
[  173.885300][T11420] syzkaller0: entered promiscuous mode
[  173.887073][T11420] syzkaller0: entered allmulticast mode
[  174.567430][T11453] syzkaller0: entered promiscuous mode
[  174.569356][T11453] syzkaller0: entered allmulticast mode
[  174.664396][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  174.664408][   T40] audit: type=1400 audit(1769263094.239:648): avc:  denied  { ioctl } for  pid=11456 comm="syz.5.1628" path="socket:[55303]" dev="sockfs" ino=55303 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  174.731679][   T40] audit: type=1400 audit(1769263094.299:649): avc:  denied  { wake_alarm } for  pid=11460 comm="syz.1.1630" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  174.822853][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  174.826813][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  174.853878][T11471] __nla_validate_parse: 13 callbacks suppressed
[  174.853890][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1633'.
[  174.917581][T11482] syzkaller0: entered promiscuous mode
[  174.919442][T11482] syzkaller0: entered allmulticast mode
[  175.041917][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1637'.
[  175.067379][T11485] xt_connbytes: Forcing CT accounting to be enabled
[  175.094451][T11488] netlink: 'syz.6.1639': attribute type 1 has an invalid length.
[  175.098509][T11488] dlm: no locking on control device
[  175.191441][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1644'.
[  175.195598][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1642'.
[  175.212413][ T5949] Bluetooth: hci4: command 0x0419 tx timeout
[  175.214750][   T65] Bluetooth: hci0: command 0x0406 tx timeout
[  175.217329][ T5939] Bluetooth: hci1: command 0x0406 tx timeout
[  175.298231][   T40] audit: type=1400 audit(1769263094.869:650): avc:  denied  { setattr } for  pid=11503 comm="syz.0.1645" name="tty21" dev="devtmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  175.346168][T11508] syzkaller0: entered promiscuous mode
[  175.347961][T11508] syzkaller0: entered allmulticast mode
[  175.521556][T11515] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1649'.
[  175.529027][   T40] audit: type=1400 audit(1769263095.099:651): avc:  denied  { accept } for  pid=11514 comm="syz.6.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  175.588769][   T40] audit: type=1400 audit(1769263095.159:652): avc:  denied  { setopt } for  pid=11521 comm="syz.6.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  176.026153][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'.
[  176.051665][T11560] syzkaller0: entered promiscuous mode
[  176.054242][T11560] syzkaller0: entered allmulticast mode
[  176.074079][   T40] audit: type=1400 audit(1769263095.649:653): avc:  denied  { unmount } for  pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  176.095110][T11564] overlayfs: missing 'lowerdir'
[  176.100327][T11564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1661'.
[  176.207123][T11580] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1665'.
[  176.231463][T11582] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1665'.
[  176.270310][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1666'.
[  176.347561][T11592] 8021q: adding VLAN 0 to HW filter on device bond4
[  176.376695][T11597] netlink: 'syz.0.1670': attribute type 1 has an invalid length.
[  176.433464][T11597] binder: 11596:11597 ioctl c0306201 200000000280 returned -14
[  176.498638][T11607] syzkaller0: entered promiscuous mode
[  176.500444][T11607] syzkaller0: entered allmulticast mode
[  176.627752][T11612] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22
[  177.002081][   T40] audit: type=1400 audit(1769263096.569:654): avc:  denied  { read } for  pid=11624 comm="syz.6.1679" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  177.010245][   T40] audit: type=1400 audit(1769263096.579:655): avc:  denied  { open } for  pid=11624 comm="syz.6.1679" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  177.158541][T11647] syzkaller0: entered promiscuous mode
[  177.160409][T11647] syzkaller0: entered allmulticast mode
[  177.242497][T11654] efs: cannot read volume header
[  177.299724][ T5939] Bluetooth: hci4: command 0x0419 tx timeout
[  177.301819][ T5949] ==================================================================
[  177.304404][ T5949] BUG: KASAN: slab-use-after-free in le_read_features_complete+0x56/0x380
[  177.307026][ T5949] Write of size 4 at addr ffff888029120010 by task kworker/u33:6/5949
[  177.310519][ T5949] 
[  177.311848][ T5949] CPU: 0 UID: 0 PID: 5949 Comm: kworker/u33:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  177.311866][ T5949] Tainted: [L]=SOFTLOCKUP
[  177.311870][ T5949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  177.311878][ T5949] Workqueue: hci4 hci_cmd_sync_work
[  177.311900][ T5949] Call Trace:
[  177.311905][ T5949]  <TASK>
[  177.311910][ T5949]  dump_stack_lvl+0x100/0x190
[  177.311925][ T5949]  print_report+0x156/0x4c9
[  177.311940][ T5949]  ? __virt_addr_valid+0x81/0x620
[  177.311951][ T5949]  ? __phys_addr+0xe8/0x180
[  177.311961][ T5949]  ? le_read_features_complete+0x56/0x380
[  177.311976][ T5949]  kasan_report+0xdf/0x1a0
[  177.311992][ T5949]  ? le_read_features_complete+0x56/0x380
[  177.312009][ T5949]  kasan_check_range+0x10f/0x1e0
[  177.312027][ T5949]  le_read_features_complete+0x56/0x380
[  177.312043][ T5949]  hci_cmd_sync_work+0x214/0x470
[  177.312058][ T5949]  ? __pfx_le_read_features_complete+0x10/0x10
[  177.312075][ T5949]  process_one_work+0x9c2/0x1840
[  177.312091][ T5949]  ? __pfx_process_one_work+0x10/0x10
[  177.312106][ T5949]  ? assign_work+0x19c/0x250
[  177.312117][ T5949]  worker_thread+0x5da/0xe40
[  177.312131][ T5949]  ? __pfx_worker_thread+0x10/0x10
[  177.312144][ T5949]  ? kthread+0x17d/0x730
[  177.312154][ T5949]  ? __pfx_worker_thread+0x10/0x10
[  177.312166][ T5949]  kthread+0x3b3/0x730
[  177.312177][ T5949]  ? __pfx_kthread+0x10/0x10
[  177.312188][ T5949]  ? ret_from_fork+0x79/0xaf0
[  177.312200][ T5949]  ? ret_from_fork+0x79/0xaf0
[  177.312212][ T5949]  ? rcu_is_watching+0x12/0xc0
[  177.312227][ T5949]  ? __pfx_kthread+0x10/0x10
[  177.312238][ T5949]  ret_from_fork+0x754/0xaf0
[  177.312250][ T5949]  ? __pfx_ret_from_fork+0x10/0x10
[  177.312263][ T5949]  ? __switch_to+0x7b9/0x10c0
[  177.312278][ T5949]  ? __pfx_kthread+0x10/0x10
[  177.312290][ T5949]  ret_from_fork_asm+0x1a/0x30
[  177.312303][ T5949]  </TASK>
[  177.312306][ T5949] 
[  177.378125][ T5949] Allocated by task 5939:
[  177.379874][ T5949]  kasan_save_stack+0x30/0x50
[  177.381662][ T5949]  kasan_save_track+0x14/0x30
[  177.383197][ T5949]  __kasan_kmalloc+0xaa/0xb0
[  177.385140][ T5949]  __hci_conn_add+0x1f4/0x1ca0
[  177.387036][ T5949]  hci_conn_add_unset+0x76/0x120
[  177.388751][ T5949]  le_conn_complete_evt+0x633/0x1f40
[  177.390384][ T5949]  hci_le_conn_complete_evt+0x23c/0x3a0
[  177.392115][ T5949]  hci_le_meta_evt+0x34a/0x5f0
[  177.393590][ T5949]  hci_event_packet+0x682/0x11c0
[  177.395157][ T5949]  hci_rx_work+0x451/0xfc0
[  177.396599][ T5949]  process_one_work+0x9c2/0x1840
[  177.398145][ T5949]  worker_thread+0x5da/0xe40
[  177.399588][ T5949]  kthread+0x3b3/0x730
[  177.400914][ T5949]  ret_from_fork+0x754/0xaf0
[  177.402326][ T5949]  ret_from_fork_asm+0x1a/0x30
[  177.403801][ T5949] 
[  177.404615][ T5949] Freed by task 5939:
[  177.405900][ T5949]  kasan_save_stack+0x30/0x50
[  177.407406][ T5949]  kasan_save_track+0x14/0x30
[  177.408939][ T5949]  kasan_save_free_info+0x3b/0x70
[  177.410514][ T5949]  __kasan_slab_free+0x5f/0x80
[  177.412024][ T5949]  kfree+0x1c7/0x690
[  177.413256][ T5949]  device_release+0xa4/0x240
[  177.414726][ T5949]  kobject_put+0x1f7/0x640
[  177.416127][ T5949]  device_unregister+0x2f/0xe0
[  177.417648][ T5949]  hci_conn_del_sysfs+0xb9/0x1a0
[  177.419249][ T5949]  hci_conn_del+0x506/0x1180
[  177.420705][ T5949]  hci_disconn_complete_evt+0x410/0xa20
[  177.422417][ T5949]  hci_event_packet+0xa86/0x11c0
[  177.423956][ T5949]  hci_rx_work+0x451/0xfc0
[  177.425354][ T5949]  process_one_work+0x9c2/0x1840
[  177.426965][ T5949]  worker_thread+0x5da/0xe40
[  177.428403][ T5949]  kthread+0x3b3/0x730
[  177.429650][ T5949]  ret_from_fork+0x754/0xaf0
[  177.431101][ T5949]  ret_from_fork_asm+0x1a/0x30
[  177.432569][ T5949] 
[  177.433334][ T5949] The buggy address belongs to the object at ffff888029120000
[  177.433334][ T5949]  which belongs to the cache kmalloc-8k of size 8192
[  177.437540][ T5949] The buggy address is located 16 bytes inside of
[  177.437540][ T5949]  freed 8192-byte region [ffff888029120000, ffff888029122000)
[  177.441697][ T5949] 
[  177.442482][ T5949] The buggy address belongs to the physical page:
[  177.444473][ T5949] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29120
[  177.447123][ T5949] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  177.449733][ T5949] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  177.452053][ T5949] page_type: f5(slab)
[  177.453282][ T5949] raw: 00fff00000000040 ffff88801b843180 ffffea0000e13800 dead000000000002
[  177.455942][ T5949] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  177.458547][ T5949] head: 00fff00000000040 ffff88801b843180 ffffea0000e13800 dead000000000002
[  177.461182][ T5949] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  177.463795][ T5949] head: 00fff00000000003 ffffea0000a44801 00000000ffffffff 00000000ffffffff
[  177.466407][ T5949] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  177.469061][ T5949] page dumped because: kasan: bad access detected
[  177.471008][ T5949] page_owner tracks the page as allocated
[  177.472811][ T5949] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5934, tgid 5934 (syz-executor), ts 53978098549, free_ts 0
[  177.478879][ T5949]  post_alloc_hook+0x1e1/0x250
[  177.480401][ T5949]  get_page_from_freelist+0xe3d/0x2e10
[  177.482080][ T5949]  __alloc_frozen_pages_noprof+0x26c/0x2410
[  177.483915][ T5949]  alloc_pages_mpol+0x1fb/0x550
[  177.485451][ T5949]  new_slab+0x2c4/0x440
[  177.486762][ T5949]  ___slab_alloc+0xda3/0x1ca0
[  177.488244][ T5949]  __slab_alloc.isra.0+0x63/0x110
[  177.489804][ T5949]  __kmalloc_node_track_caller_noprof+0x629/0x9d0
[  177.491805][ T5949]  kmalloc_reserve+0xef/0x2c0
[  177.493286][ T5949]  __alloc_skb+0x186/0x410
[  177.494723][ T5949]  netlink_dump+0x68d/0xd30
[  177.496161][ T5949]  __netlink_dump_start+0x6d6/0x990
[  177.497770][ T5949]  genl_family_rcv_msg_dumpit+0x1e2/0x2e0
[  177.499534][ T5949]  genl_rcv_msg+0x471/0x800
[  177.500988][ T5949]  netlink_rcv_skb+0x159/0x420
[  177.502462][ T5949]  genl_rcv+0x28/0x40
[  177.503708][ T5949] page_owner free stack trace missing
[  177.505407][ T5949] 
[  177.506160][ T5949] Memory state around the buggy address:
[  177.507897][ T5949]  ffff88802911ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  177.510356][ T5949]  ffff88802911ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  177.512801][ T5949] >ffff888029120000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.515262][ T5949]                          ^
[  177.516698][ T5949]  ffff888029120080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.519162][ T5949]  ffff888029120100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.521672][ T5949] ==================================================================
[  177.529410][ T5949] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  177.531643][ T5949] CPU: 0 UID: 0 PID: 5949 Comm: kworker/u33:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  177.534978][ T5949] Tainted: [L]=SOFTLOCKUP
[  177.536299][ T5949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  177.539382][ T5949] Workqueue: hci4 hci_cmd_sync_work
[  177.540977][ T5949] Call Trace:
[  177.542005][ T5949]  <TASK>
[  177.542929][ T5949]  dump_stack_lvl+0x100/0x190
[  177.544356][ T5949]  vpanic+0x20d/0x630
[  177.545575][ T5949]  panic+0xd1/0xd1
[  177.546746][ T5949]  ? __pfx_panic+0x10/0x10
[  177.548861][ T5949]  ? le_read_features_complete+0x56/0x380
[  177.550594][ T5949]  ? preempt_schedule_common+0x42/0xc0
[  177.552240][ T5949]  ? check_panic_on_warn+0x1f/0x90
[  177.553795][ T5949]  check_panic_on_warn.cold+0x19/0x34
[  177.555470][ T5949]  end_report.part.0+0x3a/0x90
[  177.556963][ T5949]  kasan_report.cold+0xe/0x18
[  177.558442][ T5949]  ? le_read_features_complete+0x56/0x380
[  177.560229][ T5949]  kasan_check_range+0x10f/0x1e0
[  177.561743][ T5949]  le_read_features_complete+0x56/0x380
[  177.563448][ T5949]  hci_cmd_sync_work+0x214/0x470
[  177.565008][ T5949]  ? __pfx_le_read_features_complete+0x10/0x10
[  177.566884][ T5949]  process_one_work+0x9c2/0x1840
[  177.568436][ T5949]  ? __pfx_process_one_work+0x10/0x10
[  177.570066][ T5949]  ? assign_work+0x19c/0x250
[  177.571484][ T5949]  worker_thread+0x5da/0xe40
[  177.572926][ T5949]  ? __pfx_worker_thread+0x10/0x10
[  177.574488][ T5949]  ? kthread+0x17d/0x730
[  177.575821][ T5949]  ? __pfx_worker_thread+0x10/0x10
[  177.577388][ T5949]  kthread+0x3b3/0x730
[  177.578658][ T5949]  ? __pfx_kthread+0x10/0x10
[  177.580099][ T5949]  ? ret_from_fork+0x79/0xaf0
[  177.581563][ T5949]  ? ret_from_fork+0x79/0xaf0
[  177.583029][ T5949]  ? rcu_is_watching+0x12/0xc0
[  177.584521][ T5949]  ? __pfx_kthread+0x10/0x10
[  177.585965][ T5949]  ret_from_fork+0x754/0xaf0
[  177.587364][ T5949]  ? __pfx_ret_from_fork+0x10/0x10
[  177.588913][ T5949]  ? __switch_to+0x7b9/0x10c0
[  177.590354][ T5949]  ? __pfx_kthread+0x10/0x10
[  177.591809][ T5949]  ret_from_fork_asm+0x1a/0x30
[  177.593365][ T5949]  </TASK>
[  177.595283][ T5949] Kernel Offset: disabled
[  177.596660][ T5949] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:58:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85699fa5 RDI=ffffffff9b206c00 RBP=ffffffff9b206bc0 RSP=ffffc90003757540
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3139323038387257
R12=0000000000000000 R13=0000000000000020 R14=0000000000000010 R15=ffffffff85699f40
RIP=ffffffff85699fcf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d65dc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000034000 CR3=000000002fbc7000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffede22a966
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffede22a966 00007ffede22a96c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efcb4e086dc
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efcb4e08728
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efcb4e0869c
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efcb4e0871a
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 22b7ea640bda312e 50df481596f9de6b 4632ae4e21201eb6 1a138c2e12efc7f2
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81faa9ba RDX=ffff888059f70000
RSI=ffffffff81faa994 RDI=ffff888059f70000 RBP=ffff88806a443080 RSP=ffffc9000601f630
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000003 R13=ffffed100d488611 R14=0000000000000001 R15=ffff88806a53bf00
RIP=ffffffff81faa996 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d66dc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c285243 CR3=00000000294bb000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffffff00 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f75706372 65705f6567617375
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff3e84846
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff3e84846 00007ffff3e8484c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff6138086dc
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff613808728
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff61380869c
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff61380871a
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=000000000018b687 RBX=ffff88801e29c980 RCX=ffffffff8b76b4b5 RDX=0000000000000000
RSI=ffffffff8dc45440 RDI=ffffffff8bfa35a0 RBP=0000000000000002 RSP=ffffc90000187df0
R8 =0000000000000001 R9 =ffffed100d4c673d R10=ffff88806a6339eb R11=0000000000000000
R12=ffffed1003c53930 R13=0000000000000002 R14=ffffffff90b737d0 R15=0000000000000000
RIP=ffffffff8b769e1f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d67dc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f6e395f4e9c CR3=0000000036ceb000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bed0574600 000055bed0574600
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd023aaf60 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7562656d6172663a 725f7463656a626f 3a755f6d65747379 733d747865746e6f
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 637420745f6d6461 7379733a725f6d64 617379733a746f6f 723d747865746e6f
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373203034363d6f 6e6920227366706d 74766564223d7665 6420223162662f76
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65642f223d687461 702022393736312e 362e7a7973223d6d 6d6f632034323631
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000017d8a9 RBX=ffff88801e2c0000 RCX=ffffffff8b76b4b5 RDX=0000000000000000
RSI=ffffffff8dc45440 RDI=ffffffff8bfa35a0 RBP=0000000000000003 RSP=ffffc90000197df0
R8 =0000000000000001 R9 =ffffed100d4e673d R10=ffff88806a7339eb R11=0000000000000000
R12=ffffed1003c58000 R13=0000000000000003 R14=ffffffff90b737d0 R15=0000000000000000
RIP=ffffffff8b769e1f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d68dc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000055555825e4e8 CR3=000000002ca2d000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000001 Opmask01=0000000000000000 Opmask02=0000000000000100 Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc819d098b 00007ffc819d098b
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc819d0e90 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc819d0e90 0000003000000018
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 637420745f6d6461 7379733a725f6d64 617379733a746f6f 723d747865746e00
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6374207455676461 7373733072556764 6173737330746565 7237747265746400
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d74766564223d76 656420223162662f 7665642f223d6874 6170202239373631
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020656c69 665f7268633d7373 616c637420745f65
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63697665645f6675 62656d6172663a72 5f7463656a626f3a 755f6d6574737973
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d747865746e6f63 7420745f6d646173 79733a725f6d6461 7379733a746f6f72
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d747865746e6f63 73203034363d6f6e 6920227366706d74 766564223d766564
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000