last executing test programs:

4m41.7645864s ago: executing program 32 (id=661):
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
io_setup(0x8, &(0x7f0000000300)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x42}, 0x28)
getsockopt$inet6_int(r0, 0x29, 0x2, 0x0, &(0x7f0000000340))
timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040))
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

4m36.002786391s ago: executing program 33 (id=714):
r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[], 0x48)
socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/68, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680))
r3 = eventfd2(0x1, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m34.071013144s ago: executing program 34 (id=723):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='ext4_sync_fs\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='ext4_sync_fs\x00', r1}, 0x10)
sync()

4m24.39370395s ago: executing program 35 (id=785):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x100, 0x4, 0x162}, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x3, 0x8})
io_uring_enter(r3, 0x3517, 0x173d, 0x42, 0x0, 0x0)

4m3.835240666s ago: executing program 36 (id=965):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x6, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0)

4m2.322981091s ago: executing program 37 (id=978):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0xbedffffc}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8)
r3 = syz_open_pts(r0, 0x101)
r4 = dup3(r3, r0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd)

3m46.003563035s ago: executing program 38 (id=1137):
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010080000000000000000800000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)

3m44.860250104s ago: executing program 39 (id=1146):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078)

3m42.768635635s ago: executing program 40 (id=1155):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0})

3m37.751640353s ago: executing program 41 (id=1164):
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup2(r1, r2)
r3 = syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0x679a, 0x80, 0x0, 0x178}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000003c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x1000000}})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
fcntl$setown(r1, 0x8, r0)

3m34.23402692s ago: executing program 42 (id=1174):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc1, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
close_range(r2, r3, 0x0)

3m32.673092953s ago: executing program 43 (id=1185):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ca)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x2035099, 0x0)
mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0)

2m7.947218598s ago: executing program 3 (id=1892):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x28004800)

2m7.947048823s ago: executing program 3 (id=1893):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x80000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})

2m7.876472595s ago: executing program 3 (id=1896):
pipe(&(0x7f00000045c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x2, 0xe)

2m7.817422618s ago: executing program 3 (id=1898):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

2m7.799445918s ago: executing program 3 (id=1900):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000000)={0xfffffffd, 0xffffffff, 0x7f})

2m7.527213284s ago: executing program 3 (id=1906):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="20003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0xd0)

2m7.405530198s ago: executing program 44 (id=1906):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="20003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0xd0)

1m51.973396126s ago: executing program 7 (id=2049):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000000)={0xfffffffd, 0xffffffff, 0x7f})

1m51.356104667s ago: executing program 7 (id=2053):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x10, 0x80002, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(r2, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx  \x00'}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x45ed, 0xfffffffd, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @loopback}}}})
openat$full(0xffffff9c, &(0x7f0000000200), 0x2, 0x0)

1m50.347090728s ago: executing program 7 (id=2054):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, 0xffffffffffffffff, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b34, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r9, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)

1m49.758516851s ago: executing program 7 (id=2057):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

1m49.708019853s ago: executing program 7 (id=2058):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1m49.288302874s ago: executing program 7 (id=2066):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
listen(r0, 0x100)
sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000008400000007"], 0x38, 0x8000}, 0x20000000)

1m49.232529558s ago: executing program 45 (id=2066):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
listen(r0, 0x100)
sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000008400000007"], 0x38, 0x8000}, 0x20000000)

1m35.863454199s ago: executing program 4 (id=2173):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x3f, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

1m35.810241124s ago: executing program 4 (id=2175):
timer_create(0x8, 0x0, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
readv(r0, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x1)
shutdown(r0, 0x1)

1m35.70867594s ago: executing program 4 (id=2176):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'})
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)
setreuid(0x0, 0xee00)
pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x4}, &(0x7f0000000280), 0x0)

1m34.770220019s ago: executing program 4 (id=2188):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

1m34.710142006s ago: executing program 4 (id=2189):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x72, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @mcast1, @private2, [@hopopts={0x3a}]}}}}}}}, 0x0)

1m34.379811731s ago: executing program 4 (id=2192):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x2c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_ISOLATED={0x5}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_BACKUP_PORT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)

1m34.244927178s ago: executing program 46 (id=2192):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x2c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_ISOLATED={0x5}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_BACKUP_PORT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)

1m20.462102636s ago: executing program 0 (id=2339):
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
creat(&(0x7f0000000240)='./file0/bus\x00', 0x0)
acct(&(0x7f0000000100)='./file0/bus\x00')
chroot(&(0x7f0000000040)='./file0\x00')
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

1m20.401031745s ago: executing program 0 (id=2341):
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40)
write$FUSE_STATFS(r4, &(0x7f0000000040)={0x60, 0x0, r1, {{0x6, 0x7fffffffffffffff, 0x2, 0x0, 0x100000000, 0x100, 0x9, 0x9}}}, 0x60)
write$FUSE_NOTIFY_DELETE(r4, 0x0, 0x20000)

1m20.215698407s ago: executing program 0 (id=2344):
mknod$loop(0x0, 0x10, 0x0)
socket$kcm(0x21, 0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, 0x0, 0x4004101)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x1, 0x2, "fcd1ca9a0967216a"}}}, 0x10)

1m19.311928628s ago: executing program 0 (id=2358):
r0 = syz_pidfd_open(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = pidfd_getfd(r0, r0, 0x0)
setns(r1, 0x66020000)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

1m19.31147749s ago: executing program 0 (id=2359):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m18.731610199s ago: executing program 0 (id=2363):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))

1m18.591179558s ago: executing program 47 (id=2363):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))

24.257615977s ago: executing program 9 (id=2960):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1200, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0xc4c03d12, &(0x7f0000000040)={0x0, 0x13})

24.257377696s ago: executing program 9 (id=2961):
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r2 = socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
unshare(0x6a040000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000fff300000000000000000000000000000a00ed6892700ae500000000000000000000804000020000000000000800000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004030000000000000000"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x21, 0x1, 0x70bd2b, 0xffffffff, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x2, 0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240), 0x4)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xe, "fe4042c317ae82c6d1a51a1e45a7"}, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000))
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ad43000000000100000006"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)

13.493921009s ago: executing program 9 (id=2967):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="bd3d", 0x2}], 0x1, 0x0, 0x0, 0x804c044}, 0x4000881)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf)

13.480838303s ago: executing program 9 (id=2971):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ca)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2035099, 0x0)
mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0)

13.40320794s ago: executing program 9 (id=2976):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)

13.132739894s ago: executing program 9 (id=2990):
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
socket$netlink(0x10, 0x3, 0x8000000004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r1 = socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080)

13.019384626s ago: executing program 48 (id=2990):
shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil)
socket$netlink(0x10, 0x3, 0x8000000004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r1 = socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080)

7.253330535s ago: executing program 1 (id=3070):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

7.145334836s ago: executing program 1 (id=3071):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

7.144945293s ago: executing program 1 (id=3072):
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_open_procfs(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x0)

7.009561495s ago: executing program 1 (id=3075):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ca)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2035099, 0x0)
mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0)

6.852210876s ago: executing program 1 (id=3077):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e"])
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0xb)

6.635736907s ago: executing program 1 (id=3079):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x60220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

6.498519207s ago: executing program 49 (id=3079):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x60220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

2.327465633s ago: executing program 8 (id=3122):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

2.32625175s ago: executing program 8 (id=3124):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010102, 0x15, 0x3, 'ovf\x00', 0x1, 0x4, 0x72}, 0x2c)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44)
sendmsg$sock(r1, 0x0, 0x0)

2.237142315s ago: executing program 8 (id=3126):
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2.217131041s ago: executing program 8 (id=3128):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
umount2(0x0, 0xb)

2.204058759s ago: executing program 2 (id=3130):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10002, &(0x7f0000000640)={[{}, {@gid}, {@mode={'mode', 0x3d, 0x10001}}, {@mode={'mode', 0x3d, 0x10}}, {@gid={'gid', 0x3d, r1}}], [{@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@smackfsfloor}, {@smackfsdef={'smackfsdef', 0x3d, ']%,-\'!\xa3\''}}, {@uid_lt={'uid<', 0xee01}}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@subj_type={'subj_type', 0x3d, '#! '}}]})
r2 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r3, 0x0)
chroot(&(0x7f00000002c0)='./file0\x00')
write$binfmt_script(r0, &(0x7f0000000600)={'#! ', '', [{0x20, '\x02\x06'}, {0x20, '\x02\x06'}, {}]}, 0xb)

2.137949546s ago: executing program 2 (id=3132):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@empty, @empty, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x3, 0x0, 0x4, 0xfffffffe}, 0x3c)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB])

2.137862133s ago: executing program 8 (id=3133):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

1.986350634s ago: executing program 2 (id=3137):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.983198802s ago: executing program 8 (id=3138):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000019080)=0x30)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) (fail_nth: 1)

1.927840633s ago: executing program 2 (id=3139):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80)
epoll_create1(0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

1.859109486s ago: executing program 2 (id=3140):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0)

1.858775524s ago: executing program 2 (id=3141):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x402)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000019080)=0x30)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32)

1.069106585s ago: executing program 5 (id=3158):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80)
epoll_create1(0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

1.009652958s ago: executing program 5 (id=3159):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

1.009461429s ago: executing program 5 (id=3160):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @device_a, @broadcast, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x0, 0xa, 0x8}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x4}], @NL80211_ATTR_SSID={0xc, 0x34, @random="05081b1bacce0b42"}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x80}}, 0x0) (fail_nth: 1)

869.579393ms ago: executing program 5 (id=3161):
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_open_procfs(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x0)

590.020935ms ago: executing program 6 (id=3163):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_SCAN(r0, 0x0, 0x44000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)

589.514101ms ago: executing program 6 (id=3164):
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000100)='fusectl\x00', 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
setuid(0xee00)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"])
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)

529.778342ms ago: executing program 6 (id=3165):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

529.494154ms ago: executing program 6 (id=3166):
mlock(&(0x7f0000f47000/0x3000)=nil, 0x3000)
mkdir(0x0, 0x80)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff66000000ef655a160000001000"/40], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f0000006280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x800000}}, 0x50)
open$dir(&(0x7f0000000380)='./file0/file0\x00', 0x80040, 0x40)
statfs(0x0, 0x0)
syz_fuse_handle_req(r2, &(0x7f0000004280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x9, {0x1, 0x1, 0x0, 0x0, 0x237, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xd, 0x10000, 0x1000, 0x2, 0x0, 0x1000, 0x5, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = fsopen(0x0, 0x0)
fsmount(r4, 0x0, 0x80)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff)
sched_setaffinity(0x0, 0x0, 0x0)

459.89558ms ago: executing program 6 (id=3167):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80)
epoll_create1(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

459.512612ms ago: executing program 6 (id=3168):
bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc00", @ANYRES16=r3, @ANYBLOB="050500000000fbdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0082006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c)
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000001800)={0x0, @ethernet={0x6, @random="4c5310bc5824"}, @phonet={0x23, 0xe7, 0x0, 0x80}, @l2={0x1f, 0xfe00, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6, 0x1}, 0xee, 0x0, 0x0, 0x0, 0x200, &(0x7f00000017c0)='macvlan1\x00', 0x100000000, 0x0, 0x9})
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

249.487µs ago: executing program 5 (id=3169):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

0s ago: executing program 5 (id=3170):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'aio_iiro_16\x00', [0x8001, 0x2, 0x4, 0x0, 0xd, 0xcc7, 0x208, 0x800004, 0xa, 0xff, 0x2, 0x1, 0x8, 0x1100004, 0x6, 0xe, 0x8, 0x1a449, 0x9, 0x40000003, 0xc, 0x2, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x4, 0xc]})
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000200))
r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x12, r3, 0x4ef09000)
recvmmsg(r2, 0x0, 0x0, 0x20, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r6 = fsmount(r4, 0x0, 0x82)
openat$cgroup_procs(r6, 0x0, 0x2, 0x0)

kernel console output (not intermixed with test programs):

6.642247][T12845] ubi31: attaching mtd0
[  266.647052][T12845] ubi31: scanning is finished
[  266.649223][T12845] ubi31 error: ubi_read_volume_table: the layout volume was not found
[  266.772308][T12845] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  266.931023][ T8994] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  267.100778][ T8994] usb 5-1: Using ep0 maxpacket: 16
[  267.105669][ T8994] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  267.110700][ T8994] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.115811][ T8994] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.119878][ T8994] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  267.129107][ T8994] usb 5-1: config 7 interface 0 has no altsetting 0
[  267.133519][ T8994] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  267.137335][ T8994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.189091][   T40] audit: type=1400 audit(1760229029.905:433): avc:  denied  { create } for  pid=12859 comm="syz.5.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  267.197547][   T40] audit: type=1400 audit(1760229029.915:434): avc:  denied  { bind } for  pid=12859 comm="syz.5.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  267.206461][   T40] audit: type=1400 audit(1760229029.915:435): avc:  denied  { connect } for  pid=12859 comm="syz.5.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  267.492429][T12871] overlayfs: failed to clone lowerpath
[  267.495683][T12871] overlayfs: failed to clone lowerpath
[  267.568736][ T8994] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:7.0/0003:0458:5010.000D/input/input27
[  267.600030][T12875] bond1: entered promiscuous mode
[  267.608177][T12875] bond_slave_0: entered promiscuous mode
[  267.610088][T12875] bond_slave_1: entered promiscuous mode
[  267.612692][T12875] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  267.615955][T12875] bond1: (slave macvlan2): making interface the new active one
[  267.618690][T12875] macvlan2: entered promiscuous mode
[  267.620508][T12875] bond0: entered promiscuous mode
[  267.623420][T12875] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  267.633396][T12875] bridge0: port 3(syz_tun) entered blocking state
[  267.635574][T12875] bridge0: port 3(syz_tun) entered disabled state
[  267.637657][T12875] syz_tun: entered allmulticast mode
[  267.646686][T12875] syz_tun: entered promiscuous mode
[  267.651741][T12875] bridge0: port 3(syz_tun) entered blocking state
[  267.653797][T12875] bridge0: port 3(syz_tun) entered forwarding state
[  267.654545][ T8994] kye 0003:0458:5010.000D: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0
[  267.713330][T12883] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  267.724105][T12883] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  267.798058][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2020'.
[  268.597506][   T40] audit: type=1400 audit(1760229031.315:436): avc:  denied  { mounton } for  pid=12912 comm="syz.6.2030" path="/33/file0" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  268.636507][T12916] fuse: Unknown parameter '0x0000000000000003'
[  268.691338][    C3] kye 0003:0458:5010.000D: usb_submit_urb(ctrl) failed: -1
[  268.988167][T12930] overlayfs: failed to resolve './file1': -2
[  269.081629][T12933] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  269.313804][   T40] audit: type=1400 audit(1760229032.035:437): avc:  denied  { create } for  pid=12939 comm="syz.0.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  269.490843][ T8978] usb 5-1: USB disconnect, device number 18
[  271.115602][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2048'.
[  271.552869][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2053'.
[  271.688123][   T40] audit: type=1400 audit(1760229034.375:438): avc:  denied  { listen } for  pid=12986 comm="syz.7.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  271.724929][   T40] audit: type=1400 audit(1760229034.385:439): avc:  denied  { accept } for  pid=12986 comm="syz.7.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  272.548034][   T40] audit: type=1400 audit(1760229035.265:440): avc:  denied  { ioctl } for  pid=12991 comm="syz.7.2054" path="socket:[47563]" dev="sockfs" ino=47563 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  273.273012][T13007] tipc: Started in network mode
[  273.275153][T13007] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  273.278228][T13007] tipc: Enabled bearer <eth:team0>, priority 0
[  273.355515][T13013] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  273.603844][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2064'.
[  273.634077][T11505] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.730108][T13023] Error: Driver 'c6xdigio' is already registered, aborting...
[  273.738712][   T40] audit: type=1400 audit(1760229036.455:441): avc:  denied  { write } for  pid=13022 comm="syz.0.2065" path="socket:[48256]" dev="sockfs" ino=48256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  273.747387][   T40] audit: type=1400 audit(1760229036.455:442): avc:  denied  { write } for  pid=13022 comm="syz.0.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  273.754113][   T40] audit: type=1400 audit(1760229036.465:443): avc:  denied  { read } for  pid=13022 comm="syz.0.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  273.765191][T11505] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.843742][T11505] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.867178][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  273.892352][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  273.895655][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  273.899127][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  273.902634][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  274.002393][T11505] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.214230][T13028] chnl_net:caif_netlink_parms(): no params data found
[  274.273149][    T9] tipc: Node number set to 11578026
[  274.341435][T13046] overlayfs: failed to clone upperpath
[  274.443231][T13052] overlayfs: overlapping lowerdir path
[  274.454329][T13052] overlayfs: overlapping lowerdir path
[  274.497726][T13055] binder: 13054:13055 ioctl c0306201 0 returned -14
[  274.501254][T13055] binder: 13054:13055 ioctl c0306201 200000000040 returned -22
[  274.503806][T13055] binder: 13054:13055 ioctl c0306201 200000000640 returned -22
[  274.670566][T13028] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.673465][T13028] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.675891][T13028] bridge_slave_0: entered allmulticast mode
[  274.679545][T13028] bridge_slave_0: entered promiscuous mode
[  274.684909][T13028] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.687784][T13028] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.690752][T13028] bridge_slave_1: entered allmulticast mode
[  274.693925][T13028] bridge_slave_1: entered promiscuous mode
[  274.836301][T13028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.845449][T13028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.897429][T13028] team0: Port device team_slave_0 added
[  274.917913][T13028] team0: Port device team_slave_1 added
[  274.967559][   T40] audit: type=1400 audit(1760229037.686:444): avc:  denied  { associate } for  pid=13073 comm="syz.6.2073" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  274.997430][T13028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.000325][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  275.015137][T13028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.020281][T13076] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  275.022871][T13076] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  275.026056][T13076] vhci_hcd vhci_hcd.0: Device attached
[  275.035040][   T40] audit: type=1400 audit(1760229037.746:445): avc:  denied  { name_bind } for  pid=13056 comm="syz.5.2076" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  275.056455][T13028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.063339][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  275.120761][T13028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.147737][   T40] audit: type=1400 audit(1760229037.816:446): avc:  denied  { read } for  pid=13056 comm="syz.5.2076" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  275.170210][   T40] audit: type=1400 audit(1760229037.816:447): avc:  denied  { open } for  pid=13056 comm="syz.5.2076" path="/227/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  275.186121][T13076] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  275.191144][T13076] block device autoloading is deprecated and will be removed.
[  275.330137][T10715] usb 48-1: SetAddress Request (2) to port 0
[  275.333440][T10715] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd
[  275.380646][T13077] vhci_hcd: connection reset by peer
[  275.384211][T11511] vhci_hcd: stop threads
[  275.386040][T11511] vhci_hcd: release socket
[  275.390966][T11511] vhci_hcd: disconnect device
[  275.407129][T13028] hsr_slave_0: entered promiscuous mode
[  275.431600][T13028] hsr_slave_1: entered promiscuous mode
[  275.434508][T13028] debugfs: 'hsr0' already exists in 'hsr'
[  275.436729][T13028] Cannot create hsr debugfs directory
[  275.458824][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2080'.
[  275.480334][T11505] hsr_slave_0: left promiscuous mode
[  275.504569][T11505] hsr_slave_1: left promiscuous mode
[  275.552656][T11505] veth1_macvtap: left promiscuous mode
[  275.555074][T11505] veth0_macvtap: left promiscuous mode
[  275.557608][T11505] veth1_vlan: left promiscuous mode
[  275.560413][T11505] veth0_vlan: left promiscuous mode
[  275.740296][T13102] overlayfs: overlapping lowerdir path
[  275.743606][T13102] overlayfs: overlapping lowerdir path
[  275.949768][ T5936] Bluetooth: hci1: command tx timeout
[  276.980735][ T7952] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  277.139675][ T7952] usb 5-1: Using ep0 maxpacket: 16
[  277.142843][ T7952] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  277.146168][ T7952] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.150125][ T7952] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.153584][ T7952] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  277.158635][ T7952] usb 5-1: config 7 interface 0 has no altsetting 0
[  277.161768][ T7952] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  277.165520][ T7952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.592678][ T7952] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:7.0/0003:0458:5010.000E/input/input28
[  277.687652][ T7952] kye 0003:0458:5010.000E: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0
[  277.779683][T11505] IPVS: stop unused estimator thread 0...
[  277.985047][   T61] usb 5-1: USB disconnect, device number 19
[  278.029487][ T5936] Bluetooth: hci1: command tx timeout
[  278.128673][T13028] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  278.142022][T13028] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  278.187137][T13028] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  278.205761][T13028] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  278.314351][T13028] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.352977][T13028] 8021q: adding VLAN 0 to HW filter on device team0
[  278.364134][T11499] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.367174][T11499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.385315][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.388279][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.574543][T13182] overlayfs: failed to clone lowerpath
[  278.621437][T13028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.797215][T13028] veth0_vlan: entered promiscuous mode
[  278.808716][T13028] veth1_vlan: entered promiscuous mode
[  278.843773][T13028] veth0_macvtap: entered promiscuous mode
[  278.850986][T13028] veth1_macvtap: entered promiscuous mode
[  278.868055][T13028] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.879780][T13028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.890447][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.894561][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.901847][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.905522][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.941446][T13211] tipc: Enabled bearer <eth:team0>, priority 0
[  278.947167][T11511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.952461][T11511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.968137][T11505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.971097][T11505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.984684][   T40] audit: type=1400 audit(1760229041.706:448): avc:  denied  { mounton } for  pid=13028 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  279.044662][   T40] audit: type=1326 audit(1760229041.766:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.5.2104" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18618eec9 code=0x7ffc0000
[  279.059993][   T40] audit: type=1326 audit(1760229041.766:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.5.2104" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc18612af79 code=0x7ffc0000
[  279.068796][   T40] audit: type=1326 audit(1760229041.766:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.5.2104" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18618eec9 code=0x7ffc0000
[  279.078562][   T40] audit: type=1326 audit(1760229041.766:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.5.2104" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18618eec9 code=0x7ffc0000
[  279.088257][   T40] audit: type=1326 audit(1760229041.766:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.5.2104" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc18612af79 code=0x7ffc0000
[  279.095742][   T40] audit: type=1326 audit(1760229041.766:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.5.2104" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18618eec9 code=0x7ffc0000
[  279.103741][   T40] audit: type=1326 audit(1760229041.766:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.5.2104" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc18612af79 code=0x7ffc0000
[  279.113704][   T40] audit: type=1326 audit(1760229041.766:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.5.2104" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18618eec9 code=0x7ffc0000
[  279.123157][   T40] audit: type=1326 audit(1760229041.766:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.5.2104" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc18618eec9 code=0x7ffc0000
[  279.339414][ T9036] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  279.499507][ T9036] usb 10-1: Using ep0 maxpacket: 16
[  279.504228][ T9036] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  279.508449][ T9036] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.517674][ T9036] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.530342][ T9036] usb 10-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  279.535507][ T9036] usb 10-1: config 7 interface 0 has no altsetting 0
[  279.538324][ T9036] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  279.542566][ T9036] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.745973][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2111'.
[  279.952091][   T61] tipc: Node number set to 1063777827
[  280.117190][ T9036] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:7.0/0003:0458:5010.000F/input/input29
[  280.119352][ T5936] Bluetooth: hci1: command tx timeout
[  280.223393][ T9036] kye 0003:0458:5010.000F: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0
[  280.429485][T10715] usb 48-1: device descriptor read/8, error -110
[  280.870320][T10715] usb usb48-port1: attempt power cycle
[  281.053873][T13306] tipc: Started in network mode
[  281.055452][T13306] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  281.057693][T13306] tipc: Enabled bearer <eth:team0>, priority 0
[  281.180619][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'.
[  281.229781][    C2] kye 0003:0458:5010.000F: usb_submit_urb(ctrl) failed: -1
[  281.450512][T10715] usb usb48-port1: unable to enumerate USB device
[  281.497098][T13311] overlayfs: failed to resolve './file0': -2
[  282.011758][   T61] usb 10-1: USB disconnect, device number 14
[  282.190802][ T5941] Bluetooth: hci1: command tx timeout
[  282.858995][    T9] tipc: Node number set to 11578026
[  283.161593][ T5936] Bluetooth: hci3: command 0x0406 tx timeout
[  283.569778][T13361] bond1: option mode: unable to set because the bond device has slaves
[  283.579889][T13361] bond1: (slave macvlan3): Error -98 calling set_mac_address
[  283.619012][    T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  283.629780][T13362] netlink: 'syz.5.2137': attribute type 10 has an invalid length.
[  283.633087][T13362] bridge0: port 3(syz_tun) entered disabled state
[  283.635773][T13362] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.638552][T13362] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.649185][T13361] syz1: rxe_newlink: already configured on syz_tun
[  283.778814][    T9] usb 9-1: Using ep0 maxpacket: 16
[  283.783290][    T9] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  283.787399][    T9] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.792455][    T9] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.796530][    T9] usb 9-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  283.801706][    T9] usb 9-1: config 7 interface 0 has no altsetting 0
[  283.804481][    T9] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  283.812144][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.122621][T13375] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  284.667003][    T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:7.0/0003:0458:5010.0010/input/input31
[  285.058685][    T9] kye 0003:0458:5010.0010: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0
[  285.071044][    T9] usb 9-1: USB disconnect, device number 8
[  285.153435][T13400] fido_id[13400]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb9/report_descriptor': No such file or directory
[  285.250705][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'.
[  286.202086][T13443] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  286.205358][    C1] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  286.208538][    C1] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  286.224016][T13443] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  286.226460][T13443] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  286.228823][T13443] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  286.231779][T13443] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  286.234174][T13443] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  286.236795][T13443] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  286.239791][T13443] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  287.320760][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2174'.
[  287.352310][ T7952] usb 10-1: new full-speed USB device number 15 using dummy_hcd
[  287.610863][ T7952] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.617718][ T7952] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2
[  287.622646][ T7952] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  287.626990][ T7952] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.664448][ T7952] usb 10-1: config 0 descriptor??
[  287.686914][ T7952] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  287.690222][ T7952] dvb-usb: bulk message failed: -22 (3/0)
[  287.703373][ T7952] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  287.709669][ T7952] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  287.713253][ T7952] usb 10-1: media controller created
[  287.719533][ T7952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  287.740366][ T7952] dvb-usb: bulk message failed: -22 (6/0)
[  287.747329][ T7952] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  287.754712][ T7952] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input32
[  287.776323][ T7952] dvb-usb: schedule remote query interval to 150 msecs.
[  287.782979][ T7952] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  287.887344][    T9] usb 10-1: USB disconnect, device number 15
[  287.898655][    T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  287.920162][T13491] comedi comedi0: Cannot bond this driver to itself!
[  287.993430][T13495] overlay: Unknown parameter '/'
[  288.573822][T11502] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.709233][T11502] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.787000][T11502] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.898171][ T5994] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  288.915569][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  288.925881][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  288.935851][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  288.937090][T11502] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.939346][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  288.947102][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  289.059378][ T5994] usb 10-1: Using ep0 maxpacket: 16
[  289.070128][ T5994] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  289.073997][ T5994] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.077883][ T5994] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.091027][ T5994] usb 10-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  289.095419][ T5994] usb 10-1: config 7 interface 0 has no altsetting 0
[  289.097721][ T5994] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  289.101724][ T5994] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.108867][T11502] bridge_slave_1: left allmulticast mode
[  289.111365][T11502] bridge_slave_1: left promiscuous mode
[  289.113963][T11502] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.123534][T11502] bridge_slave_0: left allmulticast mode
[  289.126064][T11502] bridge_slave_0: left promiscuous mode
[  289.128735][T11502] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.414268][T11502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.419343][T11502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  289.423057][T11502] bond0 (unregistering): Released all slaves
[  289.439303][T13527] bond1: option mode: unable to set because the bond device has slaves
[  289.450330][T13524] bond1: (slave macvlan3): Error -98 calling set_mac_address
[  289.501226][T13527] netlink: 'syz.6.2197': attribute type 10 has an invalid length.
[  289.508872][T13527] bridge0: port 3(syz_tun) entered disabled state
[  289.511666][T13527] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.514829][T13527] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.525724][T13527] bridge0: port 3(syz_tun) entered blocking state
[  289.528100][T13527] bridge0: port 3(syz_tun) entered forwarding state
[  289.530287][T13527] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.532507][T13527] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.535500][T13527] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.538554][T13527] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.542317][ T5994] usbhid 10-1:7.0: can't add hid device: -71
[  289.543539][T13527] bridge0: entered promiscuous mode
[  289.544310][ T5994] usbhid 10-1:7.0: probe with driver usbhid failed with error -71
[  289.546439][T13527] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  289.550554][ T5994] usb 10-1: USB disconnect, device number 16
[  289.560864][T13536] comedi comedi3: comedi_config --init_data is deprecated
[  289.637274][T13512] chnl_net:caif_netlink_parms(): no params data found
[  289.779979][T13512] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.782435][T13512] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.785264][T13512] bridge_slave_0: entered allmulticast mode
[  289.790102][T13512] bridge_slave_0: entered promiscuous mode
[  289.796716][T13512] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.801709][T13512] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.804761][T13512] bridge_slave_1: entered allmulticast mode
[  289.809470][T13512] bridge_slave_1: entered promiscuous mode
[  289.966549][T11502] hsr_slave_0: left promiscuous mode
[  289.979152][T11502] hsr_slave_1: left promiscuous mode
[  289.981423][T11502] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.984364][T11502] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.989159][T11502] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.992051][T11502] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.022190][T11502] veth1_macvtap: left promiscuous mode
[  290.024588][T11502] veth0_macvtap: left promiscuous mode
[  290.026717][T11502] veth1_vlan: left promiscuous mode
[  290.029891][T11502] veth0_vlan: left promiscuous mode
[  290.535267][T13577] netlink: 'syz.6.2208': attribute type 10 has an invalid length.
[  290.907189][T11502] team0 (unregistering): Port device team_slave_1 removed
[  291.001430][ T5941] Bluetooth: hci1: command tx timeout
[  291.006501][T11502] team0 (unregistering): Port device team_slave_0 removed
[  291.776206][T13512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.782152][T13573] bond1: option mode: unable to set because the bond device has slaves
[  291.791518][T13575] bond1: (slave macvlan3): Error -98 calling set_mac_address
[  291.801564][T13577] bridge0: port 3(syz_tun) entered disabled state
[  291.804418][T13577] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.807410][T13577] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.817102][T13512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.896244][T13512] team0: Port device team_slave_0 added
[  291.915875][T13512] team0: Port device team_slave_1 added
[  291.999224][T13512] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.002088][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.014469][T13512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.021721][T13512] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.027838][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.067771][T13512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.228631][T13512] hsr_slave_0: entered promiscuous mode
[  292.238462][T13512] hsr_slave_1: entered promiscuous mode
[  292.241784][T13512] debugfs: 'hsr0' already exists in 'hsr'
[  292.244282][T13512] Cannot create hsr debugfs directory
[  292.703134][T13646] fuse: Bad value for 'user_id'
[  292.704744][T13646] fuse: Bad value for 'user_id'
[  292.740916][T13649] net_ratelimit: 5270 callbacks suppressed
[  292.740935][T13649] openvswitch: netlink: Flow key attr not present in new flow.
[  292.774471][T13652] overlayfs: failed to clone lowerpath
[  292.993069][T13512] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  293.077625][ T5941] Bluetooth: hci1: command tx timeout
[  293.271920][T13512] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  293.283949][T13512] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  293.299587][T13512] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  293.415140][T13512] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.443909][T13512] 8021q: adding VLAN 0 to HW filter on device team0
[  293.455965][T11471] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.458502][T11471] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.475157][T11505] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.477875][T11505] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.830172][T13512] 8021q: adding VLAN 0 to HW filter on device batadv0
[  293.877064][T13694] fuse: Bad value for 'user_id'
[  293.881193][T13694] fuse: Bad value for 'user_id'
[  293.968276][T13704] openvswitch: netlink: Flow key attr not present in new flow.
[  294.110893][T13720] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  294.126449][T13512] veth0_vlan: entered promiscuous mode
[  294.140279][T13512] veth1_vlan: entered promiscuous mode
[  294.159115][   T40] kauditd_printk_skb: 43 callbacks suppressed
[  294.159132][   T40] audit: type=1400 audit(1760229056.878:501): avc:  denied  { rename } for  pid=13718 comm="syz.0.2245" name="file1" dev="overlay" ino=71827795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  294.171176][T13512] veth0_macvtap: entered promiscuous mode
[  294.175362][T13512] veth1_macvtap: entered promiscuous mode
[  294.180231][   T40] audit: type=1400 audit(1760229056.888:502): avc:  denied  { unlink } for  pid=13718 comm="syz.0.2245" name="file0" dev="overlay" ino=71827789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  294.189231][   T40] audit: type=1400 audit(1760229056.898:503): avc:  denied  { write open } for  pid=13718 comm="syz.0.2245" path=2F202864656C6574656429 dev="tmpfs" ino=1398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  294.197008][   T40] audit: type=1400 audit(1760229056.898:504): avc:  denied  { setattr } for  pid=13718 comm="syz.0.2245" name="#1398" dev="tmpfs" ino=1398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  294.204313][   T40] audit: type=1400 audit(1760229056.898:505): avc:  denied  { link } for  pid=13718 comm="syz.0.2245" name="#1398" dev="tmpfs" ino=1398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  294.207092][T13512] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.213848][   T40] audit: type=1400 audit(1760229056.928:506): avc:  denied  { read write } for  pid=13718 comm="syz.0.2245" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  294.221913][T13512] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.226764][   T40] audit: type=1400 audit(1760229056.928:507): avc:  denied  { open } for  pid=13718 comm="syz.0.2245" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  294.255000][T11502] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.263149][   T40] audit: type=1400 audit(1760229056.988:508): avc:  denied  { read } for  pid=13718 comm="syz.0.2245" name="file0" dev="tmpfs" ino=1399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  294.277505][   T40] audit: type=1400 audit(1760229056.988:509): avc:  denied  { read } for  pid=13718 comm="syz.0.2245" name="file1" dev="9p" ino=71827795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  294.281001][T11502] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.289651][   T40] audit: type=1400 audit(1760229056.988:510): avc:  denied  { open } for  pid=13718 comm="syz.0.2245" path="/file1" dev="9p" ino=71827795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  294.292878][T11502] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.308892][T11502] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.325306][T11502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.328268][T11502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.345525][T11502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.349438][T11502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.471571][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2193'.
[  294.474399][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2193'.
[  294.552045][T13748] fuse: Bad value for 'user_id'
[  294.553783][T13748] fuse: Bad value for 'user_id'
[  294.737362][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2254'.
[  295.148543][ T5941] Bluetooth: hci1: command tx timeout
[  295.500665][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2259'.
[  295.931297][T13824] fuse: Bad value for 'fd'
[  295.995947][ T5941] Bluetooth: hci2: unexpected event for opcode 0x1004
[  296.466935][T13844] bond1: entered promiscuous mode
[  296.482080][T13844] bridge0: port 3(syz_tun) entered blocking state
[  296.485194][T13844] bridge0: port 3(syz_tun) entered disabled state
[  296.488308][T13844] syz_tun: entered allmulticast mode
[  296.493497][T13844] syz_tun: entered promiscuous mode
[  296.499504][T13844] bridge0: port 3(syz_tun) entered blocking state
[  296.502404][T13844] bridge0: port 3(syz_tun) entered forwarding state
[  296.509977][T13844] netlink: 'syz.0.2270': attribute type 10 has an invalid length.
[  296.513071][T13844] bridge0: port 3(syz_tun) entered disabled state
[  296.515523][T13844] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.518045][T13844] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.526492][T13844] bridge0: port 3(syz_tun) entered blocking state
[  296.529411][T13844] bridge0: port 3(syz_tun) entered forwarding state
[  296.532502][T13844] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.535522][T13844] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.537969][T13844] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.540239][T13844] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.545656][T13844] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  296.550664][T13844] rdma_rxe: rxe_newlink: failed to add syz_tun
[  297.237170][ T5941] Bluetooth: hci1: command tx timeout
[  297.891984][T13899] bond1: option mode: unable to set because the bond device has slaves
[  297.903529][T13899] netlink: 'syz.6.2282': attribute type 10 has an invalid length.
[  297.907637][T13899] rdma_rxe: rxe_newlink: failed to add syz_tun
[  297.933409][T13901] fuse: Invalid rootmode
[  298.048542][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2285'.
[  298.215791][T13917] netlink: 'syz.6.2290': attribute type 4 has an invalid length.
[  298.230642][T13917] netlink: 'syz.6.2290': attribute type 4 has an invalid length.
[  298.380317][T13924] fuse: Invalid rootmode
[  298.470070][T13926] bond1: entered promiscuous mode
[  298.483777][T13926] bridge0: port 3(syz_tun) entered blocking state
[  298.486196][T13926] bridge0: port 3(syz_tun) entered disabled state
[  298.496802][T13926] syz_tun: entered allmulticast mode
[  298.500598][T13926] syz_tun: entered promiscuous mode
[  298.503120][T13926] bridge0: port 3(syz_tun) entered blocking state
[  298.505492][T13926] bridge0: port 3(syz_tun) entered forwarding state
[  298.510781][T13926] netlink: 'syz.9.2294': attribute type 10 has an invalid length.
[  298.514164][T13926] bridge0: port 3(syz_tun) entered disabled state
[  298.516804][T13926] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.519417][T13926] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.525652][T13926] bridge0: port 3(syz_tun) entered blocking state
[  298.528317][T13926] bridge0: port 3(syz_tun) entered forwarding state
[  298.531025][T13926] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.533225][T13926] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.535560][T13926] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.537857][T13926] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.542908][T13926] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  298.547643][T13926] rdma_rxe: rxe_newlink: failed to add syz_tun
[  299.581708][T13951] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  299.640765][T13954] fuse: Invalid rootmode
[  299.825485][T13970] netlink: 'syz.9.2310': attribute type 10 has an invalid length.
[  299.828236][T13970] bridge0: port 3(syz_tun) entered disabled state
[  299.831012][T13970] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.834126][T13970] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.845163][T13970] rdma_rxe: rxe_newlink: failed to add syz_tun
[  299.980946][T13981] fuse: Bad value for 'rootmode'
[  300.028044][ T5941] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  300.031706][ T5941] Bluetooth: hci2: Injecting HCI hardware error event
[  300.035732][ T5941] Bluetooth: hci2: hardware error 0x00
[  300.035811][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2306'.
[  300.414970][T13997] netlink: 'syz.0.2320': attribute type 10 has an invalid length.
[  300.418696][T13997] bridge0: port 3(syz_tun) entered disabled state
[  300.421401][T13997] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.424257][T13997] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.430165][T13997] rdma_rxe: rxe_newlink: failed to add syz_tun
[  302.111554][ T5941] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  302.451432][   T40] kauditd_printk_skb: 47 callbacks suppressed
[  302.451448][   T40] audit: type=1400 audit(1760229065.179:558): avc:  denied  { unmount } for  pid=14045 comm="syz.0.2339" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  302.453420][ T8419] Process accounting resumed
[  302.512699][T14052] fuse: Unknown parameter 'group_id00000000000000000000'
[  302.618970][T14059] fuse: Unknown parameter 'use00000000000000000000'
[  302.807599][T14068] overlayfs: failed to clone lowerpath
[  302.811266][T14068] overlayfs: missing 'lowerdir'
[  302.863598][T14070] openvswitch: netlink: IP tunnel dst address not specified
[  302.960599][T14077] fuse: Unknown parameter 'group_id00000000000000000000'
[  302.977651][T14079] fuse: Unknown parameter 'use00000000000000000000'
[  303.096584][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2356'.
[  303.606702][   T34] usb 14-1: new high-speed USB device number 4 using dummy_hcd
[  303.664604][ T9426] syz_tun (unregistering): left allmulticast mode
[  303.667619][ T9426] syz_tun (unregistering): left promiscuous mode
[  303.670332][ T9426] bridge0: port 3(syz_tun) entered disabled state
[  303.769353][   T34] usb 14-1: config index 0 descriptor too short (expected 39, got 27)
[  303.772935][   T34] usb 14-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  303.777131][   T34] usb 14-1: config 0 interface 0 has no altsetting 0
[  303.781651][   T34] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  303.785024][   T34] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  303.788092][   T34] usb 14-1: Product: syz
[  303.790027][   T34] usb 14-1: Manufacturer: syz
[  303.792027][   T34] usb 14-1: SerialNumber: syz
[  303.796031][   T34] usb 14-1: config 0 descriptor??
[  303.801094][   T34] hub 14-1:0.0: bad descriptor, ignoring hub
[  303.803650][   T34] hub 14-1:0.0: probe with driver hub failed with error -5
[  303.809641][   T34] usb 14-1: selecting invalid altsetting 0
[  303.909836][T11486] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.100245][T11486] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.279221][T11486] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.318077][   T40] audit: type=1400 audit(1760229067.049:559): avc:  denied  { setopt } for  pid=14087 comm="syz.9.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  304.363055][T11486] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.395376][T14109] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0
[  304.516472][T11486] bridge_slave_1: left allmulticast mode
[  304.518308][T11486] bridge_slave_1: left promiscuous mode
[  304.520153][T11486] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.528094][T11486] bridge_slave_0: left allmulticast mode
[  304.529888][T11486] bridge_slave_0: left promiscuous mode
[  304.531989][T11486] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.615944][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  304.629883][ T5936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  304.633692][ T5936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  304.643605][ T5936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  304.651105][ T5936] Bluetooth: Unknown BR/EDR signaling command 0x0e
[  304.653271][ T5936] Bluetooth: Wrong link type (-22)
[  304.654948][ T5936] Bluetooth: hci0: link tx timeout
[  304.661360][ T5936] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  304.670461][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  304.785350][T11486] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  304.819210][T14128] fuse: Bad value for 'user_id'
[  304.820889][T14128] fuse: Bad value for 'user_id'
[  304.933090][T11486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  304.939062][T11486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  304.943802][T11486] bond0 (unregistering): Released all slaves
[  304.950235][T14134] Bluetooth: MGMT ver 1.23
[  304.952357][T11486] bond1 (unregistering): Released all slaves
[  305.021136][T11486] tipc: Disabling bearer <eth:team0>
[  305.023324][T11486] tipc: Left network mode
[  305.366923][T14117] chnl_net:caif_netlink_parms(): no params data found
[  305.631345][T14154] overlayfs: failed to clone upperpath
[  305.656133][T11486] hsr_slave_0: left promiscuous mode
[  305.663181][T11486] hsr_slave_1: left promiscuous mode
[  305.671937][T11486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.678025][T11486] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.681473][T11486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.686545][T11486] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.713116][T11486] veth1_macvtap: left promiscuous mode
[  305.715241][T11486] veth0_macvtap: left promiscuous mode
[  305.717844][T11486] veth1_vlan: left promiscuous mode
[  305.719788][T11486] veth0_vlan: left promiscuous mode
[  306.470523][   T53] usb 14-1: USB disconnect, device number 4
[  306.650766][T14172] fuse: Unknown parameter 'user_i00000000000000000000'
[  306.751884][ T5941] Bluetooth: hci3: command tx timeout
[  306.751898][ T5936] Bluetooth: hci0: command 0x0406 tx timeout
[  306.850260][T11486] team0 (unregistering): Port device team_slave_1 removed
[  306.940026][T11486] team0 (unregistering): Port device team_slave_0 removed
[  307.720069][T14182] bond2: entered promiscuous mode
[  307.724682][T14117] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.731305][T14117] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.735333][T14117] bridge_slave_0: entered allmulticast mode
[  307.746112][T14117] bridge_slave_0: entered promiscuous mode
[  307.760912][T14182] bond1: (slave macvlan4): Error -98 calling set_mac_address
[  307.770204][T14117] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.773189][T14117] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.776421][T14117] bridge_slave_1: entered allmulticast mode
[  307.779320][T14117] bridge_slave_1: entered promiscuous mode
[  307.805724][T14190] netlink: 'syz.6.2385': attribute type 10 has an invalid length.
[  307.831070][T14117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.839444][T14117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.856649][T14182] rdma_rxe: rxe_newlink: failed to add syz_tun
[  307.900397][T14117] team0: Port device team_slave_0 added
[  307.905709][T14117] team0: Port device team_slave_1 added
[  308.044429][T11486] IPVS: stop unused estimator thread 0...
[  308.067696][T14117] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.091094][T14117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.122207][T14200] fuse: Unknown parameter 'user_i00000000000000000000'
[  308.124756][T14117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.134562][T14117] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.140424][T14117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.152784][T14117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.204016][   T40] audit: type=1400 audit(1760229070.930:560): avc:  denied  { read } for  pid=14202 comm="syz.6.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  308.231069][T14205] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes.
[  308.453393][T14117] hsr_slave_0: entered promiscuous mode
[  308.455659][T14117] hsr_slave_1: entered promiscuous mode
[  308.466268][T14117] debugfs: 'hsr0' already exists in 'hsr'
[  308.468190][T14117] Cannot create hsr debugfs directory
[  308.535099][T14218] bond3: entered promiscuous mode
[  308.552233][T14218] bond1: (slave macvlan4): Error -98 calling set_mac_address
[  308.602091][T14221] netlink: 'syz.6.2396': attribute type 10 has an invalid length.
[  308.624664][T14221] rdma_rxe: rxe_newlink: failed to add syz_tun
[  308.825840][ T5934] Bluetooth: hci0: command 0x0406 tx timeout
[  308.827921][ T5941] Bluetooth: hci3: command tx timeout
[  308.921886][T14240] overlayfs: overlapping lowerdir path
[  308.925129][T14240] overlayfs: overlapping lowerdir path
[  309.141324][T14117] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  309.151142][T14117] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  309.165379][T14117] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  309.180900][T14117] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  309.287013][T14117] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.311568][T14117] 8021q: adding VLAN 0 to HW filter on device team0
[  309.319221][T11471] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.321453][T11471] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.324886][T11471] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.327233][T11471] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.520975][T14117] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.555182][T14117] veth0_vlan: entered promiscuous mode
[  309.582772][T14117] veth1_vlan: entered promiscuous mode
[  309.627939][T14117] veth0_macvtap: entered promiscuous mode
[  309.634524][T14117] veth1_macvtap: entered promiscuous mode
[  309.648653][T14117] batman_adv: batadv0: Interface activated: batadv_slave_0
[  309.708775][   T40] audit: type=1400 audit(1760229072.420:561): avc:  denied  { bind } for  pid=14273 comm="syz.6.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  309.935740][   T40] audit: type=1400 audit(1760229072.620:562): avc:  denied  { write } for  pid=14273 comm="syz.6.2405" path="socket:[50944]" dev="sockfs" ino=50944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  310.012797][T14117] batman_adv: batadv0: Interface activated: batadv_slave_1
[  310.036244][T11505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.040200][T11505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.054230][T11505] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.065836][T11505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.733173][T14301] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  310.753682][T11505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.757424][T11505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.781587][T11486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.784086][T11486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.906340][ T5934] Bluetooth: hci3: command tx timeout
[  310.949695][T14324] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  311.075085][   T40] audit: type=1400 audit(1760229073.800:563): avc:  denied  { getopt } for  pid=14336 comm="syz.9.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  311.148726][T14338] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  311.151044][T14338] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  311.153862][T14338] vhci_hcd vhci_hcd.0: Device attached
[  311.413042][T14353] tipc: Started in network mode
[  311.414703][T14353] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  311.418676][T14353] tipc: Enabled bearer <eth:team0>, priority 0
[  311.568074][ T6013] usb 48-1: SetAddress Request (6) to port 0
[  311.571678][ T6013] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd
[  311.608178][T14339] vhci_hcd: connection reset by peer
[  311.610604][T11486] vhci_hcd: stop threads
[  311.612765][T11486] vhci_hcd: release socket
[  311.621530][T11486] vhci_hcd: disconnect device
[  312.304389][T14389] bond1: entered promiscuous mode
[  312.325229][T14389] bridge0: port 3(syz_tun) entered blocking state
[  312.327578][T14389] bridge0: port 3(syz_tun) entered disabled state
[  312.329681][T14389] syz_tun: entered allmulticast mode
[  312.332134][T14389] syz_tun: entered promiscuous mode
[  312.342598][T14389] bridge0: port 3(syz_tun) entered blocking state
[  312.345689][T14389] bridge0: port 3(syz_tun) entered forwarding state
[  312.365420][T14389] netlink: 'syz.2.2422': attribute type 10 has an invalid length.
[  312.368543][T14389] bridge0: port 3(syz_tun) entered disabled state
[  312.370660][T14389] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.373050][T14389] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.378652][T14389] bridge0: port 3(syz_tun) entered blocking state
[  312.381214][T14389] bridge0: port 3(syz_tun) entered forwarding state
[  312.383918][T14389] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.386715][T14389] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.389532][T14389] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.392261][T14389] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.398121][T14389] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  312.398152][   T40] audit: type=1400 audit(1760229331.112:564): avc:  denied  { map } for  pid=14397 comm="syz.9.2424" path="socket:[55842]" dev="sockfs" ino=55842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  312.409973][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2424'.
[  312.412407][T14389] rdma_rxe: rxe_newlink: failed to add syz_tun
[  312.415043][ T8803] tipc: Node number set to 11578026
[  312.487929][T14402] input: syz1 as /devices/virtual/input/input33
[  312.545101][ T5943] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  312.563517][T14403] netlink: 'syz.9.2424': attribute type 6 has an invalid length.
[  312.642793][T14412] overlayfs: missing 'lowerdir'
[  312.706648][ T5943] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.713924][ T5943] usb 10-1: config 0 has no interfaces?
[  312.724653][ T5943] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.732583][ T5943] usb 10-1: config 0 has no interfaces?
[  312.743437][ T5943] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.751776][ T5943] usb 10-1: config 0 has no interfaces?
[  312.760558][ T5943] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  312.766230][ T5943] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  312.774334][ T5943] usb 10-1: Product: syz
[  312.779243][ T5943] usb 10-1: Manufacturer: syz
[  312.783503][ T5943] usb 10-1: SerialNumber: syz
[  312.793526][ T5943] usb 10-1: config 0 descriptor??
[  312.947549][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2430'.
[  312.994542][ T5934] Bluetooth: hci3: command tx timeout
[  313.033056][ T5943] usb 10-1: USB disconnect, device number 17
[  313.177050][T14428] bond1: option mode: unable to set because the bond device has slaves
[  313.185073][T14428] bond1: (slave macvlan4): Error -98 calling set_mac_address
[  313.277116][T14428] netlink: 'syz.6.2433': attribute type 10 has an invalid length.
[  313.282324][T14428] rdma_rxe: rxe_newlink: failed to add syz_tun
[  313.555414][T14432] fuse: Bad value for 'fd'
[  313.593711][T14435] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  313.630281][T14440] overlayfs: missing 'lowerdir'
[  313.631933][   T40] audit: type=1400 audit(1760229332.353:565): avc:  denied  { map } for  pid=14437 comm="syz.5.2440" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  313.750066][T14446] bond1: option mode: unable to set because the bond device has slaves
[  313.757318][T14446] bond1: (slave macvlan4): Error -98 calling set_mac_address
[  313.786806][T14450] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  313.805116][T14451] netlink: 'syz.6.2442': attribute type 10 has an invalid length.
[  313.807984][T14451] rdma_rxe: rxe_newlink: failed to add syz_tun
[  315.053577][ T6012] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  315.084550][T14466] fuse: Unknown parameter '0x0000000000000003'
[  315.136166][T14468] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  315.212674][ T6012] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.217723][ T6012] usb 7-1: config 0 has no interfaces?
[  315.224809][ T6012] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.228866][ T6012] usb 7-1: config 0 has no interfaces?
[  315.232870][ T6012] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.237045][ T6012] usb 7-1: config 0 has no interfaces?
[  315.245316][ T6012] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  315.249237][ T6012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  315.252416][ T6012] usb 7-1: Product: syz
[  315.254396][ T6012] usb 7-1: Manufacturer: syz
[  315.256725][ T6012] usb 7-1: SerialNumber: syz
[  315.318260][ T6012] usb 7-1: config 0 descriptor??
[  315.433044][T14480] bond_slave_0: entered promiscuous mode
[  315.435122][T14480] bond_slave_1: entered promiscuous mode
[  315.438325][T14480] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  315.443773][T14480] bond1: (slave macvlan4): making interface the new active one
[  315.446699][T14480] macvlan4: entered promiscuous mode
[  315.448713][T14480] bond0: entered promiscuous mode
[  315.450998][T14480] bridge0: entered promiscuous mode
[  315.454970][T14480] bond1: (slave macvlan4): Enslaving as an active interface with an up link
[  315.462227][T14480] netlink: 'syz.9.2455': attribute type 10 has an invalid length.
[  315.504294][T14480] rdma_rxe: rxe_newlink: failed to add syz_tun
[  315.531871][ T6012] usb 7-1: USB disconnect, device number 8
[  316.282417][T14494] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  316.368260][   T40] audit: type=1400 audit(1760229335.094:566): avc:  denied  { mount } for  pid=14497 comm="syz.6.2459" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  316.472764][T14505] overlayfs: failed to clone upperpath
[  316.662954][ T6013] usb 48-1: device descriptor read/8, error -110
[  316.741212][T14515] bond4: entered promiscuous mode
[  316.751381][T14515] netlink: 'syz.6.2464': attribute type 10 has an invalid length.
[  316.755277][T14515] rdma_rxe: rxe_newlink: failed to add syz_tun
[  317.071875][ T6013] usb usb48-port1: attempt power cycle
[  317.137904][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  317.140732][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  317.407358][T14527] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  317.653047][ T6013] usb usb48-port1: unable to enumerate USB device
[  317.868137][T14548] fuse: Bad value for 'fd'
[  317.922892][ T6013] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  318.070602][T14563] nvme_fabrics: missing parameter 'transport=%s'
[  318.073060][T14563] nvme_fabrics: missing parameter 'nqn=%s'
[  318.230551][ T6013] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.604810][ T6013] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.609816][ T6013] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  318.615586][ T6013] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  318.620009][ T6013] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.646137][ T6013] usb 10-1: config 0 descriptor??
[  319.220302][ T6013] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd
[  319.221667][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2489'.
[  319.236784][ T6013] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  319.250962][ T6013] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  319.254890][ T6013] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  319.257307][ T6013] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  319.259713][ T6013] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  319.287419][ T6013] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  319.486752][ T6013] usb 10-1: USB disconnect, device number 18
[  319.955953][T14617] netlink: 'syz.9.2492': attribute type 12 has an invalid length.
[  320.285466][T14628] overlayfs: missing 'lowerdir'
[  320.542497][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2500'.
[  320.643528][T14644] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2502'.
[  320.965939][T14652] geneve2: entered allmulticast mode
[  321.339801][   T40] audit: type=1400 audit(1760229340.067:567): avc:  denied  { write } for  pid=14647 comm="syz.9.2503" path="socket:[53835]" dev="sockfs" ino=53835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  321.398790][T14657] netlink: zone id is out of range
[  321.409764][T14657] netlink: zone id is out of range
[  321.412348][T14657] netlink: zone id is out of range
[  321.414529][T14657] netlink: zone id is out of range
[  321.416664][T14657] netlink: zone id is out of range
[  321.421159][T14657] netlink: zone id is out of range
[  321.423413][T14657] netlink: zone id is out of range
[  321.425558][T14657] netlink: zone id is out of range
[  321.427688][T14657] netlink: zone id is out of range
[  321.430628][T14657] netlink: zone id is out of range
[  321.504654][T14660] overlayfs: missing 'lowerdir'
[  321.508760][T14660] overlayfs: failed to clone lowerpath
[  321.559818][T14662] fuse: Unknown parameter '0x0000000000000003'
[  321.916507][   T40] audit: type=1326 audit(1760229340.647:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14676 comm="syz.2.2511" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce4bf8eec9 code=0x0
[  322.192444][T14693] fuse: Bad value for 'fd'
[  322.817901][T14698] fuse: Unknown parameter 'fd0x0000000000000003'
[  322.963656][T14709] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  322.987389][   T40] audit: type=1400 audit(1760229341.718:569): avc:  denied  { unmount } for  pid=9731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  323.089219][ T6682] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  323.331794][ T6682] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.335330][ T6682] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.338449][ T6682] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  323.342658][ T6682] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  323.346195][ T6682] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.355094][ T6682] usb 7-1: config 0 descriptor??
[  323.775603][ T6682] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd
[  323.778917][ T6682] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  323.781886][ T6682] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  323.791189][ T6682] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  324.041551][ T5995] usb 7-1: USB disconnect, device number 9
[  324.454839][   T40] audit: type=1400 audit(1760229343.188:570): avc:  denied  { write } for  pid=14736 comm="syz.5.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  324.639464][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2531'.
[  324.750025][T14755] fuse: Unknown parameter 'fd0x0000000000000003'
[  325.143190][   T40] audit: type=1400 audit(1760229343.879:571): avc:  denied  { map } for  pid=14764 comm="syz.5.2540" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  325.144102][T14766] binder: 14764:14766 ioctl c0306201 200000000180 returned -14
[  325.160382][   T40] audit: type=1400 audit(1760229343.879:572): avc:  denied  { call } for  pid=14764 comm="syz.5.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  325.170513][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2541'.
[  325.193874][T14762] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  325.247698][T14770] netlink: 'syz.6.2542': attribute type 2 has an invalid length.
[  325.250878][T14770] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2542'.
[  325.407675][T14792] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  325.409765][T14792] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  325.432581][T14792] vhci_hcd vhci_hcd.0: Device attached
[  325.667798][ T5995] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  325.772452][   T40] audit: type=1400 audit(1760229344.309:573): avc:  denied  { read } for  pid=14785 comm="syz.5.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  325.787550][   T40] audit: type=1400 audit(1760229344.459:574): avc:  denied  { read write } for  pid=14785 comm="syz.5.2549" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  325.798658][   T40] audit: type=1400 audit(1760229344.459:575): avc:  denied  { open } for  pid=14785 comm="syz.5.2549" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  325.815279][T14804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18641 sclass=netlink_route_socket pid=14804 comm=syz.5.2549
[  326.528149][T14793] vhci_hcd: connection reset by peer
[  326.530489][T11499] vhci_hcd: stop threads
[  326.532055][T11499] vhci_hcd: release socket
[  326.533663][T11499] vhci_hcd: disconnect device
[  326.831906][   T40] audit: type=1400 audit(1760229345.570:576): avc:  denied  { write } for  pid=14824 comm="syz.5.2559" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  327.747868][T14838] netdevsim netdevsim5: Direct firmware load for @ failed with error -2
[  327.751378][T14838] netdevsim netdevsim5: Falling back to sysfs fallback for: @
[  327.818874][T14850] fuse: Unknown parameter '0x0000000000000005'
[  327.869614][T14853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.436665][T14857] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2569'.
[  328.525754][T14857] gfs2: path_lookup on € returned error -2
[  329.361641][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'.
[  329.537841][T14884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.805092][ T5995] vhci_hcd: vhci_device speed not set
[  331.026608][   T40] audit: type=1400 audit(1760229349.772:577): avc:  denied  { write } for  pid=14905 comm="syz.2.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  331.033305][   T40] audit: type=1400 audit(1760229349.772:578): avc:  denied  { nlmsg_write } for  pid=14905 comm="syz.2.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  331.219262][T14918] loop2: detected capacity change from 0 to 7
[  331.226867][T14918] Dev loop2: unable to read RDB block 7
[  331.229710][T14918]  loop2: unable to read partition table
[  331.232329][T14918] loop2: partition table beyond EOD, truncated
[  331.235835][T14918] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  331.354814][ T6012] usb 14-1: new high-speed USB device number 5 using dummy_hcd
[  331.504647][ T6012] usb 14-1: Using ep0 maxpacket: 16
[  331.512525][ T6012] usb 14-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  331.517343][ T6012] usb 14-1: config 7 has 0 interfaces, different from the descriptor's value: 1
[  331.521092][ T6012] usb 14-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  331.525842][ T6012] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.911884][T14945] fuse: Unknown parameter 'use00000000000000000000'
[  332.323657][T14956] overlayfs: missing 'lowerdir'
[  332.763333][T14968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.871908][T14978] bond2: entered promiscuous mode
[  332.882400][T14978] bond_slave_0: entered promiscuous mode
[  332.884744][T14978] bond_slave_1: entered promiscuous mode
[  332.887105][T14978] bridge0: entered promiscuous mode
[  332.890573][T14978] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  332.901067][T14978] bond2: (slave macvlan3): making interface the new active one
[  332.904708][T14978] macvlan3: entered promiscuous mode
[  332.907051][T14978] bond0: entered promiscuous mode
[  332.910808][T14978] bond2: (slave macvlan3): Enslaving as an active interface with an up link
[  332.917010][T14978] netlink: 'syz.2.2613': attribute type 10 has an invalid length.
[  332.920040][T14978] bridge0: port 3(syz_tun) entered disabled state
[  332.922332][T14978] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.924663][T14978] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.931831][T14978] rdma_rxe: rxe_newlink: failed to add syz_tun
[  332.967923][T14982] tipc: Started in network mode
[  332.969654][T14982] tipc: Node identity 82e4e262030f, cluster identity 4711
[  332.972080][T14982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.976897][T14982] syzkaller0: MTU too low for tipc bearer
[  332.978791][T14982] tipc: Disabling bearer <eth:syzkaller0>
[  333.316318][T14991] overlay: Unknown parameter '/'
[  333.814629][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2623'.
[  334.068269][T15011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  334.131497][ T5994] usb 14-1: USB disconnect, device number 5
[  334.161801][T15014] fuse: Unknown parameter 'user_i00000000000000000000'
[  334.193465][ T6012] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  334.319702][   T40] audit: type=1400 audit(1760229353.054:579): avc:  denied  { setattr } for  pid=15021 comm="syz.2.2631" name="/" dev="9p" ino=71827767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  334.355607][ T6012] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.360331][ T6012] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.364578][ T6012] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  334.369885][ T6012] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  334.373491][ T6012] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.377383][ T6012] usb 10-1: config 0 descriptor??
[  334.604921][T15028] overlayfs: failed to clone lowerpath
[  334.608720][T15028] overlayfs: failed to clone lowerpath
[  334.798859][ T6012] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd
[  334.814535][ T6012] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  334.917888][T15038] ubi31: attaching mtd0
[  334.937398][T15038] ubi31: scanning is finished
[  334.939203][T15038] ubi31 error: ubi_read_volume_table: the layout volume was not found
[  335.055474][ T5994] usb 10-1: USB disconnect, device number 19
[  335.066818][T15043] fuse: Unknown parameter 'user_id00000000000000000000'
[  335.080019][T15038] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  335.116403][T15045] bond1: option mode: unable to set because the bond device has slaves
[  335.128007][T15045] bond1: (slave macvlan5): Error -98 calling set_mac_address
[  335.173794][T15048] netlink: 'syz.9.2639': attribute type 10 has an invalid length.
[  335.177692][T15048] rdma_rxe: rxe_newlink: failed to add syz_tun
[  335.184964][T15050] overlayfs: failed to clone upperpath
[  335.239473][T15052] overlayfs: failed to clone lowerpath
[  335.243961][T15052] overlayfs: failed to clone lowerpath
[  335.825996][T15072] bond1: option mode: unable to set because the bond device has slaves
[  335.833953][T15072] bond1: (slave macvlan4): Error -98 calling set_mac_address
[  335.881643][T15073] netlink: 'syz.6.2651': attribute type 10 has an invalid length.
[  335.886186][T15072] rdma_rxe: rxe_newlink: failed to add syz_tun
[  336.002411][ T6012] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  336.175438][ T6012] usb 7-1: config 0 has no interfaces?
[  336.182270][ T6012] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  336.185637][ T6012] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  336.188651][ T6012] usb 7-1: Product: syz
[  336.190088][ T6012] usb 7-1: Manufacturer: syz
[  336.194926][ T6012] usb 7-1: config 0 descriptor??
[  336.244241][   T40] audit: type=1400 audit(1760229354.985:580): avc:  denied  { execute } for  pid=15076 comm="syz.9.2653" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=56746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  336.402563][T15070] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2650'.
[  336.406688][ T5994] usb 7-1: USB disconnect, device number 10
[  336.465801][T15082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.225528][ T5934] Bluetooth: to_multiplier 0 < 10
[  337.626777][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2664'.
[  337.787588][T15112] =======================================================
[  337.787588][T15112] WARNING: The mand mount option has been deprecated and
[  337.787588][T15112]          and is ignored by this kernel. Remove the mand
[  337.787588][T15112]          option from the mount to silence this warning.
[  337.787588][T15112] =======================================================
[  337.805422][   T40] audit: type=1400 audit(1760229356.545:581): avc:  denied  { mount } for  pid=15110 comm="syz.9.2664" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  337.806303][T15112] overlayfs: overlapping lowerdir path
[  337.819156][   T40] audit: type=1400 audit(1760229356.555:582): avc:  denied  { mounton } for  pid=15110 comm="syz.9.2664" path="/80/bus" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  337.819325][T15112] overlayfs: missing 'workdir'
[  337.834908][   T40] audit: type=1400 audit(1760229356.576:583): avc:  denied  { open } for  pid=15110 comm="syz.9.2664" path="/dev/ttyr7" dev="devtmpfs" ino=406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  337.989905][T15116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  338.291079][ T6012] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  338.440985][ T6012] usb 10-1: Using ep0 maxpacket: 16
[  338.444188][ T6012] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  338.447607][ T6012] usb 10-1: config 7 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  338.451862][ T6012] usb 10-1: config 7 interface 0 has no altsetting 0
[  338.454052][ T6012] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  338.456924][ T6012] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.501155][ T6012] usbhid 10-1:7.0: couldn't find an input interrupt endpoint
[  338.548140][   T40] audit: type=1400 audit(1760229357.286:584): avc:  denied  { unmount } for  pid=13512 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  338.677656][T15135] netlink: 384 bytes leftover after parsing attributes in process `syz.2.2674'.
[  338.681761][   T40] audit: type=1400 audit(1760229357.426:585): avc:  denied  { ioctl } for  pid=15134 comm="syz.2.2674" path="socket:[56803]" dev="sockfs" ino=56803 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  338.755138][T15138] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2675'.
[  339.290611][ T5934] Bluetooth: hci3: command tx timeout
[  339.777678][T15175] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2689'.
[  339.793491][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2689'.
[  339.796574][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2689'.
[  339.799308][T15175] netlink: 'syz.9.2689': attribute type 11 has an invalid length.
[  340.206504][T15208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.616148][T15224] fuse: Unknown parameter '0x0000000000000003'
[  340.902733][T15233] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  340.905566][T15233] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  340.910771][T15233] vhci_hcd vhci_hcd.0: Device attached
[  341.087981][ T5995] usb 10-1: USB disconnect, device number 20
[  341.169638][T10715] usb 41-1: new low-speed USB device number 3 using vhci_hcd
[  341.552513][T15234] vhci_hcd: connection reset by peer
[  341.556507][T11499] vhci_hcd: stop threads
[  341.558854][T11499] vhci_hcd: release socket
[  341.562931][T11499] vhci_hcd: disconnect device
[  342.428926][ T5994] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  342.588788][ T5994] usb 7-1: Using ep0 maxpacket: 8
[  342.599801][ T5994] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  342.602786][ T5994] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  342.606077][ T5994] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  342.609186][ T5994] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  342.612985][ T5994] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  342.615691][ T5994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.624707][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2704'.
[  342.682225][T15268] fuse: Unknown parameter '0x0000000000000003'
[  342.727463][   T40] audit: type=1400 audit(1760229361.468:586): avc:  denied  { mounton } for  pid=15270 comm="syz.9.2707" path="/95/file0" dev="tmpfs" ino=513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  342.727500][T15271] fuse: Bad value for 'fd'
[  342.828659][ T5994] usb 7-1: GET_CAPABILITIES returned 0
[  342.830927][ T5994] usbtmc 7-1:16.0: can't read capabilities
[  343.036864][ T5994] usb 7-1: USB disconnect, device number 11
[  343.632997][T15279] XFS (nullb0): Invalid superblock magic number
[  343.742650][   T40] audit: type=1400 audit(1760229362.489:587): avc:  denied  { read write } for  pid=15288 comm="syz.9.2712" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  343.751925][   T40] audit: type=1400 audit(1760229362.489:588): avc:  denied  { open } for  pid=15288 comm="syz.9.2712" path="/97/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  343.835861][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2715'.
[  343.869288][T15300] fuse: Unknown parameter '0x0000000000000003'
[  343.878856][T15302] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2718'.
[  344.099604][   T40] audit: type=1400 audit(1760229362.849:589): avc:  denied  { ioctl } for  pid=15320 comm="syz.2.2726" path="socket:[58635]" dev="sockfs" ino=58635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  344.137363][T15325] fuse: Unknown parameter '0x0000000000000003'
[  344.236075][T15330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2730'.
[  344.338617][T15330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2730'.
[  344.399952][T15330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2730'.
[  344.420137][   T40] audit: type=1400 audit(1760229363.169:590): avc:  denied  { connect } for  pid=15321 comm="syz.6.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  344.434016][   T40] audit: type=1400 audit(1760229363.179:591): avc:  denied  { write } for  pid=15321 comm="syz.6.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  344.522943][T15339] vivid-007: =================  START STATUS  =================
[  344.525372][T15339] vivid-007: Generate PTS: true
[  344.528276][T15339] vivid-007: Generate SCR: true
[  344.529860][T15339] tpg source WxH: 320x240 (Y'CbCr)
[  344.531552][T15339] tpg field: 1
[  344.532677][T15339] tpg crop: (0,0)/320x240
[  344.534047][T15339] tpg compose: (0,0)/320x240
[  344.535499][T15339] tpg colorspace: 8
[  344.536735][T15339] tpg transfer function: 0/0
[  344.538407][T15339] tpg Y'CbCr encoding: 0/0
[  344.539858][T15339] tpg quantization: 0/0
[  344.541162][T15339] tpg RGB range: 0/2
[  344.542429][T15339] vivid-007: ==================  END STATUS  ==================
[  345.231186][T15358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  345.470638][   T40] audit: type=1400 audit(1760229364.220:592): avc:  denied  { getopt } for  pid=15359 comm="syz.2.2740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  345.514949][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2741'.
[  345.544359][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2741'.
[  345.585072][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2741'.
[  345.683862][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'.
[  346.183256][T15393] kvm: pic: non byte write
[  346.185196][T15393] kvm: pic: non byte write
[  346.187799][T15393] kvm: pic: non byte write
[  346.316808][T10715] vhci_hcd: vhci_device speed not set
[  346.376745][ T6012] usb 14-1: new high-speed USB device number 6 using dummy_hcd
[  346.510132][T15369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.536678][ T6012] usb 14-1: Using ep0 maxpacket: 8
[  346.540524][ T6012] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  346.544483][ T6012] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  346.548946][ T6012] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  346.553030][ T6012] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  346.558533][ T6012] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  346.562271][ T6012] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.773219][ T6012] usb 14-1: GET_CAPABILITIES returned 0
[  346.775247][ T6012] usbtmc 14-1:16.0: can't read capabilities
[  346.978777][    C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  346.982156][    C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  346.995994][    C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  346.999746][    C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  347.003503][    C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  347.012459][ T5994] usb 14-1: USB disconnect, device number 6
[  347.019842][   T40] audit: type=1400 audit(1760229365.770:593): avc:  denied  { setopt } for  pid=15419 comm="syz.6.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  347.156380][   T55] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  347.316409][   T55] usb 10-1: Using ep0 maxpacket: 8
[  347.319906][   T55] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  347.323079][   T55] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  347.326076][   T55] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  347.329637][   T55] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  347.333757][   T55] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  347.336777][   T55] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.544004][   T55] usb 10-1: GET_CAPABILITIES returned 0
[  347.545873][   T55] usbtmc 10-1:16.0: can't read capabilities
[  347.692752][T15442] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  347.694862][T15442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  347.699887][T15442] vhci_hcd vhci_hcd.0: Device attached
[  347.748289][ T5994] usb 10-1: USB disconnect, device number 21
[  347.826018][ T6682] usb 14-1: new high-speed USB device number 7 using dummy_hcd
[  347.975118][T10715] usb 41-1: new low-speed USB device number 4 using vhci_hcd
[  347.992930][ T6682] usb 14-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  347.996679][ T6682] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  347.999738][ T6682] usb 14-1: Product: syz
[  348.001136][ T6682] usb 14-1: Manufacturer: syz
[  348.002700][ T6682] usb 14-1: SerialNumber: syz
[  348.006382][ T6682] usb 14-1: config 0 descriptor??
[  348.010731][ T6682] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  348.013217][ T6682] dvb-usb: bulk message failed: -22 (2/0)
[  348.019054][ T6682] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  348.022377][ T6682] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  348.024929][ T6682] usb 14-1: media controller created
[  348.035384][ T6682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  348.058156][T15461] netlink: 'syz.6.2780': attribute type 4 has an invalid length.
[  348.214984][ T6682] cxusb: set interface failed
[  348.217653][ T6682] dvb-usb: bulk message failed: -22 (1/0)
[  348.238688][ T6682] DVB: Unable to find symbol mt352_attach()
[  348.240707][ T6682] dvb-usb: bulk message failed: -22 (5/0)
[  348.243641][ T6682] zl10353_read_register: readreg error (reg=127, ret==-121)
[  348.246076][ T6682] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  348.291404][T15443] vhci_hcd: connection reset by peer
[  348.293421][T11486] vhci_hcd: stop threads
[  348.295356][T11486] vhci_hcd: release socket
[  348.298018][ T6682] rc_core: IR keymap rc-dvico-mce not found
[  348.298087][T11486] vhci_hcd: disconnect device
[  348.299871][ T6682] Registered IR keymap rc-empty
[  348.300383][ T6682] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0
[  348.313146][ T6682] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0/input35
[  348.318623][ T6682] dvb-usb: schedule remote query interval to 100 msecs.
[  348.320791][ T6682] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  348.329343][ T6682] usb 14-1: USB disconnect, device number 7
[  348.362963][ T6682] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  348.652676][T15472] bond1: option mode: unable to set because the bond device has slaves
[  348.663656][T15472] bond1: (slave macvlan3): Error -98 calling set_mac_address
[  348.710187][T15472] netlink: 'syz.5.2783': attribute type 10 has an invalid length.
[  348.713704][T15472] syz1: rxe_newlink: already configured on syz_tun
[  348.750505][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2784'.
[  349.003083][T15494] netlink: 'syz.2.2791': attribute type 12 has an invalid length.
[  349.303392][   T40] audit: type=1400 audit(1760229368.032:594): avc:  denied  { unmount } for  pid=14117 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  349.315339][T15505] bond2: option mode: unable to set because the bond device has slaves
[  349.322240][T15505] netlink: 'syz.2.2795': attribute type 10 has an invalid length.
[  349.326106][T15505] rdma_rxe: rxe_newlink: failed to add syz_tun
[  349.679266][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2798'.
[  350.403331][T15563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.696926][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2825'.
[  350.918769][T15593] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  351.153845][T15609] fuse: Unknown parameter 'grou00000000000000000000'
[  351.769733][T15624] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2846'.
[  352.353430][   T40] audit: type=1400 audit(1760229371.093:595): avc:  denied  { watch } for  pid=15680 comm="syz.6.2871" path="/319" dev="tmpfs" ino=1711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  352.391942][T15684] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2872'.
[  352.504763][   T40] audit: type=1400 audit(1760229371.253:596): avc:  denied  { read } for  pid=15696 comm="syz.6.2878" name="file2" dev="tmpfs" ino=1738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  352.650316][T15712] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2885'.
[  352.701657][   T40] audit: type=1400 audit(1760229371.443:597): avc:  denied  { ioctl } for  pid=15715 comm="syz.5.2887" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  352.859617][T15724] sit0: entered allmulticast mode
[  352.865077][T15724] sit0: entered promiscuous mode
[  352.993268][    T9] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  353.001836][T15730] fuse: Unknown parameter 'group_i00000000000000000000'
[  353.043092][   T40] audit: type=1400 audit(1760229371.784:598): avc:  denied  { connect } for  pid=15732 comm="syz.9.2895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  353.124536][T10715] vhci_hcd: vhci_device speed not set
[  353.153873][    T9] usb 10-1: Using ep0 maxpacket: 16
[  353.164504][    T9] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  353.168626][    T9] usb 10-1: config 7 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  353.176661][    T9] usb 10-1: config 7 interface 0 has no altsetting 0
[  353.179419][    T9] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  353.183501][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.195936][    T9] usbhid 10-1:7.0: couldn't find an input interrupt endpoint
[  353.843141][T15754] overlayfs: failed to clone upperpath
[  353.990172][   T46] bond0: (slave bond_slave_0): interface is now down
[  353.991388][T15760] netlink: 'syz.6.2906': attribute type 10 has an invalid length.
[  353.994631][   T46] bond0: (slave bond_slave_1): interface is now down
[  353.998183][   T46] bond0: (slave bridge0): interface is now down
[  354.007479][T15760] syz_tun: left allmulticast mode
[  354.010187][T15760] bridge0: port 3(syz_tun) entered disabled state
[  354.013216][T11478] bond0: (slave bond_slave_0): interface is now down
[  354.016130][T11478] bond0: (slave bond_slave_1): interface is now down
[  354.019073][T11478] bond0: (slave bridge0): interface is now down
[  354.024469][T15760] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  354.034282][T11486] bond0: (slave bond_slave_0): interface is now down
[  354.037140][T11486] bond0: (slave bond_slave_1): interface is now down
[  354.040071][T11486] bond0: (slave bridge0): interface is now down
[  354.043235][T11486] bond0: (slave syz_tun): interface is now down
[  354.051025][T11486] bond0: now running without any active interface!
[  354.123403][T15769] rdma_rxe: rxe_newlink: failed to add syz_tun
[  354.222599][T15749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.535357][T15789] netlink: 'syz.2.2918': attribute type 1 has an invalid length.
[  354.591245][T15791] bond2: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5)
[  354.641049][T15793] netlink: 'syz.2.2919': attribute type 12 has an invalid length.
[  354.716394][T15795] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.810141][T15795] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.887406][T15795] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.978634][T15795] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.077412][T11478] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.091538][   T46] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.103052][   T46] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.116718][   T46] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.416712][T15814] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  355.749477][ T8419] usb 10-1: USB disconnect, device number 22
[  355.796169][T15819] fuse: Unknown parameter 'group_id00000000000000000000'
[  356.101995][T15826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.372600][T15836] bond1: option mode: unable to set because the bond device has slaves
[  356.382482][T15836] bond1: (slave macvlan5): Error -98 calling set_mac_address
[  356.429241][T15837] netlink: 'syz.9.2936': attribute type 10 has an invalid length.
[  356.435093][T15837] rdma_rxe: rxe_newlink: failed to add syz_tun
[  356.677618][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2941'.
[  356.771233][ T8419] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  356.784007][T15857] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  356.941145][ T8419] usb 7-1: Using ep0 maxpacket: 16
[  356.945063][ T8419] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  356.949149][ T8419] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.952591][ T8419] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  356.957061][ T8419] usb 7-1: config 7 interface 0 has no altsetting 0
[  356.959958][ T8419] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  356.964865][ T8419] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.981466][ T8419] usbhid 7-1:7.0: couldn't find an input interrupt endpoint
[  357.392597][T15861] bond1: option mode: unable to set because the bond device has slaves
[  357.402261][T15861] bond1: (slave macvlan5): Error -98 calling set_mac_address
[  357.435052][T15861] netlink: 'syz.9.2945': attribute type 10 has an invalid length.
[  357.438872][T15861] rdma_rxe: rxe_newlink: failed to add syz_tun
[  357.477427][T15863] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2946'.
[  357.861862][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2952'.
[  358.379727][T15885] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2954'.
[  358.510502][T15888] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2954'.
[  358.648654][   T40] audit: type=1400 audit(1760229377.397:599): avc:  denied  { write } for  pid=15906 comm="syz.9.2960" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  358.799187][T15910] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2961'.
[  358.931524][T10715] e1000 0000:00:06.0 eth0: Reset adapter
[  359.053197][ T1225] bond0: (slave bond_slave_0): interface is now down
[  359.055942][ T1225] bond0: (slave bond_slave_1): interface is now down
[  359.058237][ T1225] bond0: (slave wlan1): interface is now down
[  359.062666][ T1225] bond0: (slave bridge0): interface is now down
[  359.072651][ T1225] bond0: now running without any active interface!
[  359.539596][    T9] usb 7-1: USB disconnect, device number 12
[  361.120035][T10715] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  369.504279][T15974] netlink: 'syz.6.2975': attribute type 1 has an invalid length.
[  369.552730][T15974] bond6: entered allmulticast mode
[  369.555142][   T40] audit: type=1400 audit(1760229388.302:600): avc:  denied  { mounton } for  pid=15964 comm="syz.2.2973" path="/137/file0/file0" dev="9p" ino=71827789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  369.582930][T13512] syz_tun (unregistering): left allmulticast mode
[  369.585549][T13512] syz_tun (unregistering): left promiscuous mode
[  369.588055][T13512] bridge0: port 3(syz_tun) entered disabled state
[  369.633786][T15989] 9pnet: Unknown protocol version 9
[  370.034664][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  370.039161][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  370.042928][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  370.048156][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  370.051918][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  370.335525][T16018] chnl_net:caif_netlink_parms(): no params data found
[  370.464783][T16018] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.467381][T16018] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.470367][T16018] bridge_slave_0: entered allmulticast mode
[  370.486249][T16018] bridge_slave_0: entered promiscuous mode
[  370.491858][T16018] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.499088][T16018] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.502246][T16018] bridge_slave_1: entered allmulticast mode
[  370.517080][T16018] bridge_slave_1: entered promiscuous mode
[  370.599216][T16018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.616095][T16018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.676847][T16018] team0: Port device team_slave_0 added
[  370.681977][T16018] team0: Port device team_slave_1 added
[  370.733601][T16018] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.736559][T16018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.763767][T16018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  370.770243][T16018] batman_adv: batadv0: Adding interface: batadv_slave_1
[  370.772887][T16018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.782174][T16018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.890380][T16018] hsr_slave_0: entered promiscuous mode
[  370.894056][T16018] hsr_slave_1: entered promiscuous mode
[  370.896341][T16018] debugfs: 'hsr0' already exists in 'hsr'
[  370.898333][T16018] Cannot create hsr debugfs directory
[  371.573485][ T6508] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  371.607544][T16073] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  371.733986][ T6508] usb 10-1: Using ep0 maxpacket: 8
[  371.744599][ T6508] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.750047][ T6508] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.755047][ T6508] usb 10-1: config 0 interface 0 has no altsetting 0
[  371.758060][ T6508] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  371.762162][ T6508] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.777647][ T6508] usb 10-1: config 0 descriptor??
[  371.790323][T16018] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  371.799010][T16018] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  371.807019][T16018] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  371.816170][T16018] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  371.817330][ T5994] IPVS: starting estimator thread 0...
[  371.870136][T16018] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.887720][T16018] 8021q: adding VLAN 0 to HW filter on device team0
[  371.900634][T11471] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.903650][T11471] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.913366][T16087] IPVS: using max 25 ests per chain, 60000 per kthread
[  371.915416][T11478] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.918049][T11478] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.966458][T16103] overlayfs: failed to clone upperpath
[  372.075089][ T5941] Bluetooth: hci1: command tx timeout
[  372.117120][T16018] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.153157][T16018] veth0_vlan: entered promiscuous mode
[  372.164915][T16018] veth1_vlan: entered promiscuous mode
[  372.192080][T16018] veth0_macvtap: entered promiscuous mode
[  372.198769][ T6508] usbhid 10-1:0.0: can't add hid device: -71
[  372.200402][T16018] veth1_macvtap: entered promiscuous mode
[  372.204009][ T6508] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  372.210301][ T6508] usb 10-1: USB disconnect, device number 23
[  372.218395][T16018] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.231970][T16018] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.243270][T11478] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.248936][T11478] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.252608][T11478] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.258179][T11478] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.316833][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.320417][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.349882][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.352433][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.407317][T16136] 9pnet: Unknown protocol version 9p200
[  372.590292][T16151] fuse: Unknown parameter 'use00000000000000000000'
[  372.761067][T16162] bond2: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5)
[  372.827840][ T9031] IPVS: starting estimator thread 0...
[  372.869699][T16170] 9pnet: Unknown protocol version 9p200
[  372.882975][ T6012] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  372.912707][T16168] IPVS: using max 28 ests per chain, 67200 per kthread
[  372.969863][T16178] netlink: 'syz.5.3027': attribute type 10 has an invalid length.
[  372.985063][T16178] syz_tun: left allmulticast mode
[  372.986978][T16178] bridge0: port 3(syz_tun) entered disabled state
[  372.994504][T16178] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  373.003869][ T1225] bond0: (slave syz_tun): interface is now down
[  373.008526][ T1225] bond0: now running without any active interface!
[  373.022928][ T6012] usb 6-1: device descriptor read/64, error -71
[  373.220189][T16191] fuse: Unknown parameter 'use00000000000000000000'
[  373.262840][ T6012] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  373.363543][T16199] net_ratelimit: 249 callbacks suppressed
[  373.363564][T16199] openvswitch: netlink: Flow actions attr not present in new flow.
[  373.392464][ T6012] usb 6-1: device descriptor read/64, error -71
[  373.462709][T16205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  373.502612][ T6012] usb usb6-port1: attempt power cycle
[  373.835878][T16212] 9pnet: Unknown protocol version 9p200
[  373.852268][ T6012] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  373.875033][ T6012] usb 6-1: device descriptor read/8, error -71
[  374.065077][T16220] fuse: Unknown parameter 'user_i00000000000000000000'
[  374.112473][ T6012] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  374.142047][ T6012] usb 6-1: device descriptor read/8, error -71
[  374.152020][ T5941] Bluetooth: hci1: command tx timeout
[  374.158916][T16227] netlink: 'syz.6.3042': attribute type 10 has an invalid length.
[  374.207038][T16231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3044'.
[  374.252302][ T6012] usb usb6-port1: unable to enumerate USB device
[  374.478276][T16245] netlink: 'syz.5.3048': attribute type 1 has an invalid length.
[  374.482748][T16245] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5)
[  374.745037][T16252] openvswitch: netlink: Flow key attr not present in new flow.
[  374.799505][T16256] netlink: 'syz.2.3053': attribute type 10 has an invalid length.
[  374.815650][T16256] syz_tun: left allmulticast mode
[  374.818186][T16256] bridge0: port 3(syz_tun) entered disabled state
[  374.829724][T16256] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  375.167688][T16279] openvswitch: netlink: Flow key attr not present in new flow.
[  375.301415][ T8100] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  375.492004][ T8100] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  375.495789][ T8100] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  375.499409][ T8100] usb 7-1: Product: syz
[  375.501696][ T8100] usb 7-1: Manufacturer: syz
[  375.503658][ T8100] usb 7-1: SerialNumber: syz
[  375.507973][ T8100] usb 7-1: config 0 descriptor??
[  375.515453][ T8100] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  375.518606][ T8100] dvb-usb: bulk message failed: -22 (2/0)
[  375.528425][ T8100] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  375.543406][ T8100] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  375.546920][ T8100] usb 7-1: media controller created
[  375.569161][ T8100] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  375.669646][T16296] bond1: option mode: unable to set because the bond device has slaves
[  375.685374][T16296] bond1: (slave macvlan3): Error -98 calling set_mac_address
[  375.697843][T16299] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3070'.
[  375.718981][ T8100] cxusb: set interface failed
[  375.721166][ T8100] dvb-usb: bulk message failed: -22 (1/0)
[  375.734050][T16301] netlink: 'syz.5.3069': attribute type 10 has an invalid length.
[  375.752554][T16301] syz1: rxe_newlink: already configured on syz_tun
[  375.775390][ T8100] DVB: Unable to find symbol mt352_attach()
[  375.783170][ T8100] dvb-usb: bulk message failed: -22 (5/0)
[  375.790684][ T8100] zl10353_read_register: readreg error (reg=127, ret==-121)
[  375.796857][ T8100] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  375.855147][T16307] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  375.881061][ T8100] rc_core: IR keymap rc-dvico-mce not found
[  375.883556][ T8100] Registered IR keymap rc-empty
[  375.899260][ T8100] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0
[  375.905003][ T8100] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input36
[  375.922875][ T8100] dvb-usb: schedule remote query interval to 100 msecs.
[  375.931426][ T8100] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  375.946954][ T8100] usb 7-1: USB disconnect, device number 13
[  375.994281][ T8100] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  376.684696][ T5934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.689620][ T5934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.693456][ T5934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.697711][ T5934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.702569][ T5934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  376.790127][T16335] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  376.878754][T16341] overlayfs: failed to clone upperpath
[  376.936431][T16331] chnl_net:caif_netlink_parms(): no params data found
[  377.050755][T16331] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.053785][T16331] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.056822][T16331] bridge_slave_0: entered allmulticast mode
[  377.062428][T16331] bridge_slave_0: entered promiscuous mode
[  377.068654][T16331] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.074525][T16331] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.077628][T16331] bridge_slave_1: entered allmulticast mode
[  377.081780][T16331] bridge_slave_1: entered promiscuous mode
[  377.140661][ T6508] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  377.145747][T16331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.153627][T16331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.239205][T16331] team0: Port device team_slave_0 added
[  377.242588][T16331] team0: Port device team_slave_1 added
[  377.273475][T16331] batman_adv: batadv0: Adding interface: batadv_slave_0
[  377.275745][T16331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.284624][T16331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  377.292943][T16331] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.296252][T16331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.306947][T16331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  377.316671][ T6508] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  377.319762][ T6508] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  377.322950][ T6508] usb 10-1: Product: syz
[  377.324618][ T6508] usb 10-1: Manufacturer: syz
[  377.326226][ T6508] usb 10-1: SerialNumber: syz
[  377.335134][ T6508] usb 10-1: config 0 descriptor??
[  377.341668][ T6508] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  377.345412][ T6508] dvb-usb: bulk message failed: -22 (2/0)
[  377.353559][ T6508] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  377.357245][ T6508] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  377.360172][ T6508] usb 10-1: media controller created
[  377.369599][ T6508] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  377.408675][T16331] hsr_slave_0: entered promiscuous mode
[  377.411316][T16331] hsr_slave_1: entered promiscuous mode
[  377.413815][T16331] debugfs: 'hsr0' already exists in 'hsr'
[  377.415699][T16331] Cannot create hsr debugfs directory
[  377.550510][ T6508] cxusb: set interface failed
[  377.552020][ T6508] dvb-usb: bulk message failed: -22 (1/0)
[  377.572670][ T6508] DVB: Unable to find symbol mt352_attach()
[  377.575808][ T6508] dvb-usb: bulk message failed: -22 (5/0)
[  377.578631][ T6508] zl10353_read_register: readreg error (reg=127, ret==-121)
[  377.581980][ T6508] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  377.630685][ T6508] rc_core: IR keymap rc-dvico-mce not found
[  377.632564][ T6508] Registered IR keymap rc-empty
[  377.638375][ T6508] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0
[  377.651012][ T6508] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input37
[  377.658216][ T6508] dvb-usb: schedule remote query interval to 100 msecs.
[  377.661587][ T6508] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  377.672241][ T6508] usb 10-1: USB disconnect, device number 24
[  377.715002][ T6508] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  377.795556][T16373] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3095'.
[  378.094178][T16331] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  378.101327][T16331] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  378.107194][T16331] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  378.114888][T16331] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  378.211873][T16331] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.222192][T16331] 8021q: adding VLAN 0 to HW filter on device team0
[  378.233000][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.236010][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state
[  378.245050][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.247374][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state
[  378.315537][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  378.318092][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  378.435198][T16331] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.648394][T16331] veth0_vlan: entered promiscuous mode
[  378.655795][T16331] veth1_vlan: entered promiscuous mode
[  378.689296][T16331] veth0_macvtap: entered promiscuous mode
[  378.694426][T16331] veth1_macvtap: entered promiscuous mode
[  378.708179][T16331] batman_adv: batadv0: Interface activated: batadv_slave_0
[  378.710917][ T5934] Bluetooth: hci1: command tx timeout
[  378.716294][T16331] batman_adv: batadv0: Interface activated: batadv_slave_1
[  378.723831][T11471] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  378.726644][T11471] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  378.733117][T11471] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  378.736864][T11471] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.763379][T16447] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  378.785810][T11499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.790350][T11499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.824553][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.828253][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.954579][T16461] bond1: entered allmulticast mode
[  378.956830][T16465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3110'.
[  379.102713][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3112'.
[  380.400124][ T5934] Bluetooth: hci0: command 0x0406 tx timeout
[  380.458214][T16494] netlink: 'syz.8.3117': attribute type 10 has an invalid length.
[  380.495127][T16494] syz_tun: entered promiscuous mode
[  380.501164][T16494] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  380.546443][T16504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3121'.
[  380.563085][T16504] bond1: option mode: unable to set because the bond device has slaves
[  380.572657][T16504] bond1: (slave macvlan3): Error -98 calling set_mac_address
[  380.618386][T16515] netlink: 'syz.5.3121': attribute type 10 has an invalid length.
[  380.621135][T16515] syz1: rxe_newlink: already configured on syz_tun
[  380.624957][ T5943] IPVS: starting estimator thread 0...
[  380.680820][T16523] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3126'.
[  380.730032][T16517] IPVS: using max 24 ests per chain, 57600 per kthread
[  380.759787][T16533] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  380.798544][ T5941] Bluetooth: hci1: command tx timeout
[  380.926372][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3136'.
[  380.929859][T16550] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3137'.
[  380.934872][T16549] bond1: option mode: unable to set because the bond device has slaves
[  380.943839][T16549] bond1: (slave macvlan4): Error -98 calling set_mac_address
[  380.976947][T16552] FAULT_INJECTION: forcing a failure.
[  380.976947][T16552] name failslab, interval 1, probability 0, space 0, times 1
[  380.977233][T11505] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1
[  380.985928][T16552] CPU: 3 UID: 0 PID: 16552 Comm: syz.8.3138 Not tainted syzkaller #0 PREEMPT(full) 
[  380.985949][T16552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  380.985984][T16552] Call Trace:
[  380.985989][T16552]  <TASK>
[  380.985994][T16552]  dump_stack_lvl+0x16c/0x1f0
[  380.986027][T16552]  should_fail_ex+0x512/0x640
[  380.986049][T16552]  ? fs_reclaim_acquire+0xae/0x150
[  380.986071][T16552]  should_failslab+0xc2/0x120
[  380.986092][T16552]  __kmalloc_noprof+0xdd/0x880
[  380.986107][T16552]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  380.986132][T16552]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  380.986150][T16552]  tomoyo_realpath_from_path+0xc2/0x6e0
[  380.986172][T16552]  ? tomoyo_profile+0x47/0x60
[  380.986195][T16552]  tomoyo_path_number_perm+0x245/0x580
[  380.986210][T16552]  ? tomoyo_path_number_perm+0x237/0x580
[  380.986229][T16552]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  380.986247][T16552]  ? find_held_lock+0x2b/0x80
[  380.986278][T16552]  ? find_held_lock+0x2b/0x80
[  380.986290][T16552]  ? hook_file_ioctl_common+0x145/0x410
[  380.986308][T16552]  ? __fget_files+0x20e/0x3c0
[  380.986329][T16552]  security_file_ioctl+0x9b/0x240
[  380.986350][T16552]  __x64_sys_ioctl+0xb7/0x210
[  380.986367][T16552]  do_syscall_64+0xcd/0xfa0
[  380.986384][T16552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.986399][T16552] RIP: 0033:0x7fd67fd8eec9
[  380.986410][T16552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  380.986424][T16552] RSP: 002b:00007fd680c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  380.986438][T16552] RAX: ffffffffffffffda RBX: 00007fd67ffe5fa0 RCX: 00007fd67fd8eec9
[  380.986447][T16552] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000003
[  380.986455][T16552] RBP: 00007fd680c87090 R08: 0000000000000000 R09: 0000000000000000
[  380.986463][T16552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  380.986471][T16552] R13: 00007fd67ffe6038 R14: 00007fd67ffe5fa0 R15: 00007ffd75b335c8
[  380.986492][T16552]  </TASK>
[  380.986529][T16552] ERROR: Out of memory at tomoyo_realpath_from_path.
[  380.991997][T11505] Bluetooth: hci4: Frame reassembly failed (-84)
[  380.997156][T16555] netlink: 'syz.6.3136': attribute type 10 has an invalid length.
[  380.998054][T16552] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  381.002640][T16555] rdma_rxe: rxe_newlink: failed to add syz_tun
[  381.072013][   T40] audit: type=1400 audit(1760229399.838:601): avc:  denied  { append } for  pid=16558 comm="syz.2.3141" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  381.096925][   T40] audit: type=1400 audit(1760229399.838:602): avc:  denied  { map } for  pid=16558 comm="syz.2.3141" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  381.106475][   T40] audit: type=1400 audit(1760229399.838:603): avc:  denied  { execute } for  pid=16558 comm="syz.2.3141" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  381.511355][T16579] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3150'.
[  381.929486][T16601] FAULT_INJECTION: forcing a failure.
[  381.929486][T16601] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  381.935132][T16601] CPU: 3 UID: 0 PID: 16601 Comm: syz.5.3160 Not tainted syzkaller #0 PREEMPT(full) 
[  381.935157][T16601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  381.935167][T16601] Call Trace:
[  381.935173][T16601]  <TASK>
[  381.935180][T16601]  dump_stack_lvl+0x16c/0x1f0
[  381.935208][T16601]  should_fail_ex+0x512/0x640
[  381.935239][T16601]  _copy_from_user+0x2e/0xd0
[  381.935264][T16601]  copy_msghdr_from_user+0x98/0x160
[  381.935301][T16601]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  381.935339][T16601]  ___sys_sendmsg+0xfe/0x1d0
[  381.935366][T16601]  ? __pfx____sys_sendmsg+0x10/0x10
[  381.935383][T16601]  ? __lock_acquire+0x622/0x1c90
[  381.935437][T16601]  __sys_sendmsg+0x16d/0x220
[  381.935459][T16601]  ? __pfx___sys_sendmsg+0x10/0x10
[  381.935495][T16601]  do_syscall_64+0xcd/0xfa0
[  381.935520][T16601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.935538][T16601] RIP: 0033:0x7fc18618eec9
[  381.935558][T16601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  381.935575][T16601] RSP: 002b:00007fc186fee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  381.935592][T16601] RAX: ffffffffffffffda RBX: 00007fc1863e5fa0 RCX: 00007fc18618eec9
[  381.935604][T16601] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  381.935616][T16601] RBP: 00007fc186fee090 R08: 0000000000000000 R09: 0000000000000000
[  381.935626][T16601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  381.935636][T16601] R13: 00007fc1863e6038 R14: 00007fc1863e5fa0 R15: 00007ffc41566608
[  381.935660][T16601]  </TASK>
[  382.083345][T16604] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  382.369660][T16613] overlayfs: failed to clone upperpath
[  382.867486][ T5936] Bluetooth: hci1: command tx timeout
[  383.027750][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  383.029165][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3170'.
[  383.062253][T16626] ==================================================================
[  383.064854][T16626] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70
SYZFAIL: failed to recv rpc
[  383.067728][T16626] Read of size 8 at addr ffff888047ff5c30 by task syz.5.3170/16626
[  383.072208][T16626] 
[  383.072964][T16626] CPU: 2 UID: 0 PID: 16626 Comm: syz.5.3170 Not tainted syzkaller #0 PREEMPT(full) 
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  383.072979][T16626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  383.072987][T16626] Call Trace:
[  383.072991][T16626]  <TASK>
[  383.072996][T16626]  dump_stack_lvl+0x116/0x1f0
[  383.073012][T16626]  print_report+0xcd/0x630
[  383.073030][T16626]  ? __virt_addr_valid+0x81/0x610
[  383.073043][T16626]  ? __phys_addr+0xe8/0x180
[  383.073055][T16626]  ? sysfs_remove_file_ns+0x63/0x70
[  383.073071][T16626]  kasan_report+0xe0/0x110
[  383.073087][T16626]  ? sysfs_remove_file_ns+0x63/0x70
[  383.073104][T16626]  sysfs_remove_file_ns+0x63/0x70
[  383.073120][T16626]  driver_remove_file+0x4a/0x60
[  383.073135][T16626]  bus_remove_driver+0x224/0x2c0
[  383.073152][T16626]  driver_unregister+0x76/0xb0
[  383.073164][T16626]  comedi_device_detach_locked+0x12f/0xa50
[  383.073179][T16626]  do_devconfig_ioctl+0x555/0x710
[  383.073195][T16626]  ? __mutex_lock+0x1c5/0x1060
[  383.073209][T16626]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[  383.073227][T16626]  ? find_held_lock+0x2b/0x80
[  383.073238][T16626]  comedi_unlocked_ioctl+0x165d/0x2f00
[  383.073257][T16626]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  383.073274][T16626]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  383.073292][T16626]  ? do_vfs_ioctl+0x128/0x14f0
[  383.073304][T16626]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  383.073315][T16626]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  383.073333][T16626]  ? hook_file_ioctl_common+0x145/0x410
[  383.073346][T16626]  ? selinux_file_ioctl+0x180/0x270
[  383.073360][T16626]  ? selinux_file_ioctl+0xb4/0x270
[  383.073374][T16626]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  383.073390][T16626]  __x64_sys_ioctl+0x18e/0x210
[  383.073401][T16626]  do_syscall_64+0xcd/0xfa0
[  383.073415][T16626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.073426][T16626] RIP: 0033:0x7fc18618eec9
[  383.073435][T16626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  383.073446][T16626] RSP: 002b:00007fc186fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  383.073457][T16626] RAX: ffffffffffffffda RBX: 00007fc1863e6090 RCX: 00007fc18618eec9
[  383.073464][T16626] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000008
[  383.073470][T16626] RBP: 00007fc186211f91 R08: 0000000000000000 R09: 0000000000000000
[  383.073477][T16626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  383.073483][T16626] R13: 00007fc1863e6128 R14: 00007fc1863e6090 R15: 00007ffc41566608
[  383.073494][T16626]  </TASK>
[  383.073497][T16626] 
[  383.108552][ T5941] Bluetooth: hci5: command 0x1003 tx timeout
[  383.110452][T16626] Allocated by task 16549:
[  383.110466][T16626]  kasan_save_stack+0x33/0x60
[  383.110495][T16626]  kasan_save_track+0x14/0x30
[  383.110518][T16626]  __kasan_kmalloc+0xaa/0xb0
[  383.110539][T16626]  __kmalloc_noprof+0x32f/0x880
[  383.110558][T16626]  __register_sysctl_table+0xea2/0x1900
[  383.110580][T16626]  neigh_sysctl_register+0x31f/0x670
[  383.110600][T16626]  addrconf_sysctl_register+0xb9/0x1f0
[  383.110622][T16626]  ipv6_add_dev+0xb31/0x15f0
[  383.110641][T16626]  addrconf_notify+0x53e/0x19e0
[  383.132919][ T5934] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  383.133745][T16626]  notifier_call_chain+0xbc/0x410
[  383.203915][T16626]  call_netdevice_notifiers_info+0xbe/0x140
[  383.206415][T16626]  register_netdevice+0x182e/0x2270
[  383.208594][T16626]  macvlan_common_newlink+0x10e7/0x1a20
[  383.210857][T16626]  rtnl_newlink+0xc45/0x2000
[  383.212662][T16626]  rtnetlink_rcv_msg+0x95e/0xe90
[  383.214383][T16626]  netlink_rcv_skb+0x158/0x420
[  383.215887][T16626]  netlink_unicast+0x5aa/0x870
[  383.217434][T16626]  netlink_sendmsg+0x8c8/0xdd0
[  383.218969][T16626]  ____sys_sendmsg+0xa98/0xc70
[  383.220466][T16626]  ___sys_sendmsg+0x134/0x1d0
[  383.221958][T16626]  __sys_sendmsg+0x16d/0x220
[  383.223405][T16626]  do_syscall_64+0xcd/0xfa0
[  383.224986][T16626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.227561][T16626] 
[  383.228611][T16626] Freed by task 46:
[  383.230214][T16626]  kasan_save_stack+0x33/0x60
[  383.232219][T16626]  kasan_save_track+0x14/0x30
[  383.234334][T16626]  __kasan_save_free_info+0x3b/0x60
[  383.236578][T16626]  __kasan_slab_free+0x5f/0x80
[  383.238685][T16626]  kmem_cache_free_bulk+0x419/0x8e0
[  383.240927][T16626]  kvfree_rcu_bulk+0x1b7/0x1e0
[  383.242945][T16626]  kfree_rcu_work+0x124/0x1a0
[  383.244960][T16626]  process_one_work+0x9cf/0x1b70
[  383.246808][T16626]  worker_thread+0x6c8/0xf10
[  383.248255][T16626]  kthread+0x3c5/0x780
[  383.249564][T16626]  ret_from_fork+0x675/0x7d0
[  383.250984][T16626]  ret_from_fork_asm+0x1a/0x30
[  383.252441][T16626] 
[  383.253191][T16626] Last potentially related work creation:
[  383.255136][T16626]  kasan_save_stack+0x33/0x60
[  383.257054][T16626]  kasan_record_aux_stack+0xa7/0xc0
[  383.259162][T16626]  kvfree_call_rcu+0x86/0x520
[  383.261114][T16626]  drop_sysctl_table+0x355/0x5f0
[  383.263160][T16626]  unregister_sysctl_table+0x41/0x60
[  383.265483][T16626]  neigh_sysctl_unregister+0x5f/0x80
[  383.267784][T16626]  addrconf_ifdown.isra.0+0x1498/0x1aa0
[  383.270103][T16626]  addrconf_notify+0x220/0x19e0
[  383.272220][T16626]  notifier_call_chain+0xbc/0x410
[  383.274377][T16626]  call_netdevice_notifiers_info+0xbe/0x140
[  383.276890][T16626]  unregister_netdevice_many_notify+0xf76/0x24c0
[  383.279423][T16626]  rtnl_newlink+0x171e/0x2000
[  383.281369][T16626]  rtnetlink_rcv_msg+0x95e/0xe90
[  383.283456][T16626]  netlink_rcv_skb+0x158/0x420
[  383.285418][T16626]  netlink_unicast+0x5aa/0x870
[  383.287417][T16626]  netlink_sendmsg+0x8c8/0xdd0
[  383.289430][T16626]  ____sys_sendmsg+0xa98/0xc70
[  383.291416][T16626]  ___sys_sendmsg+0x134/0x1d0
[  383.293280][T16626]  __sys_sendmsg+0x16d/0x220
[  383.295124][T16626]  do_syscall_64+0xcd/0xfa0
[  383.297101][T16626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.299595][T16626] 
[  383.300619][T16626] The buggy address belongs to the object at ffff888047ff5c00
[  383.300619][T16626]  which belongs to the cache kmalloc-256 of size 256
[  383.305904][T16626] The buggy address is located 48 bytes inside of
[  383.305904][T16626]  freed 256-byte region [ffff888047ff5c00, ffff888047ff5d00)
[  383.310067][T16626] 
[  383.310835][T16626] The buggy address belongs to the physical page:
[  383.312857][T16626] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47ff4
[  383.315934][T16626] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  383.319325][T16626] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  383.322555][T16626] page_type: f5(slab)
[  383.324231][T16626] raw: 00fff00000000040 ffff88801b442b40 ffffea0000ebfc00 dead000000000003
[  383.327751][T16626] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  383.331205][T16626] head: 00fff00000000040 ffff88801b442b40 ffffea0000ebfc00 dead000000000003
[  383.334748][T16626] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  383.338421][T16626] head: 00fff00000000001 ffffea00011ffd01 00000000ffffffff 00000000ffffffff
[  383.342085][T16626] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  383.345712][T16626] page dumped because: kasan: bad access detected
[  383.348378][T16626] page_owner tracks the page as allocated
[  383.350815][T16626] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5939, tgid 5939 (syz-executor), ts 54646178374, free_ts 54423381345
[  383.358286][T16626]  post_alloc_hook+0x1c0/0x230
[  383.359790][T16626]  get_page_from_freelist+0x10a3/0x3a30
[  383.361507][T16626]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  383.363366][T16626]  alloc_pages_mpol+0x1fb/0x550
[  383.365072][T16626]  new_slab+0x24a/0x360
[  383.367049][T16626]  ___slab_alloc+0xdc4/0x1ae0
[  383.369129][T16626]  __slab_alloc.constprop.0+0x63/0x110
[  383.371443][T16626]  __kmalloc_cache_noprof+0x477/0x780
[  383.373724][T16626]  ____ip_mc_inc_group+0x403/0x10f0
[  383.376006][T16626]  ip_mc_up+0x154/0x3b0
[  383.377841][T16626]  inetdev_event+0xafb/0x18a0
[  383.379786][T16626]  notifier_call_chain+0xbc/0x410
[  383.381506][T16626]  call_netdevice_notifiers_info+0xbe/0x140
[  383.383369][T16626]  __dev_notify_flags+0x12c/0x2e0
[  383.385235][T16626]  netif_change_flags+0x108/0x160
[  383.387441][T16626]  do_setlink.constprop.0+0xb53/0x4380
[  383.389742][T16626] page last free pid 6008 tgid 6008 stack trace:
[  383.392165][T16626]  __free_frozen_pages+0x7df/0x1160
[  383.393794][T16626]  __put_partials+0x130/0x170
[  383.395620][T16626]  qlist_free_all+0x4d/0x120
[  383.397531][T16626]  kasan_quarantine_reduce+0x195/0x1e0
[  383.399616][T16626]  __kasan_slab_alloc+0x69/0x90
[  383.401154][T16626]  kmem_cache_alloc_noprof+0x250/0x6e0
[  383.402859][T16626]  vm_area_dup+0x27/0x8d0
[  383.404212][T16626]  __split_vma+0x18e/0x1070
[  383.406142][T16626]  vms_gather_munmap_vmas+0x3aa/0x1340
[  383.408516][T16626]  __mmap_region+0x434/0x27a0
[  383.410531][T16626]  mmap_region+0x1ab/0x3f0
[  383.412426][T16626]  do_mmap+0xa3e/0x1210
[  383.414150][T16626]  vm_mmap_pgoff+0x29e/0x470
[  383.416118][T16626]  ksys_mmap_pgoff+0x32c/0x5c0
[  383.418148][T16626]  __x64_sys_mmap+0x125/0x190
[  383.420152][T16626]  do_syscall_64+0xcd/0xfa0
[  383.422191][T16626] 
[  383.423238][T16626] Memory state around the buggy address:
[  383.425621][T16626]  ffff888047ff5b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  383.428928][T16626]  ffff888047ff5b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  383.432258][T16626] >ffff888047ff5c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  383.434883][T16626]                                      ^
[  383.436645][T16626]  ffff888047ff5c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  383.439507][T16626]  ffff888047ff5d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  383.442943][T16626] ==================================================================
[  383.448086][T16626] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  383.450418][T16626] CPU: 0 UID: 0 PID: 16626 Comm: syz.5.3170 Not tainted syzkaller #0 PREEMPT(full) 
[  383.453373][T16626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  383.456755][T16626] Call Trace:
[  383.457859][T16626]  <TASK>
[  383.458831][T16626]  dump_stack_lvl+0x3d/0x1f0
[  383.460323][T16626]  vpanic+0x640/0x6f0
[  383.461632][T16626]  panic+0xca/0xd0
[  383.462872][T16626]  ? __pfx_panic+0x10/0x10
[  383.464293][T16626]  ? sysfs_remove_file_ns+0x63/0x70
[  383.465956][T16626]  ? preempt_schedule_common+0x44/0xc0
[  383.468124][T16626]  ? preempt_schedule_thunk+0x16/0x30
[  383.470273][T16626]  check_panic_on_warn+0xab/0xb0
[  383.472175][T16626]  end_report+0x107/0x170
[  383.473807][T16626]  kasan_report+0xee/0x110
[  383.475247][T16626]  ? sysfs_remove_file_ns+0x63/0x70
[  383.476938][T16626]  sysfs_remove_file_ns+0x63/0x70
[  383.478563][T16626]  driver_remove_file+0x4a/0x60
[  383.480097][T16626]  bus_remove_driver+0x224/0x2c0
[  383.481684][T16626]  driver_unregister+0x76/0xb0
[  383.483344][T16626]  comedi_device_detach_locked+0x12f/0xa50
[  383.485415][T16626]  do_devconfig_ioctl+0x555/0x710
[  383.487324][T16626]  ? __mutex_lock+0x1c5/0x1060
[  383.489209][T16626]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[  383.491412][T16626]  ? find_held_lock+0x2b/0x80
[  383.493278][T16626]  comedi_unlocked_ioctl+0x165d/0x2f00
[  383.495449][T16626]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  383.502274][T16626]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  383.504698][T16626]  ? do_vfs_ioctl+0x128/0x14f0
[  383.506650][T16626]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  383.508666][T16626]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  383.511452][T16626]  ? hook_file_ioctl_common+0x145/0x410
[  383.513763][T16626]  ? selinux_file_ioctl+0x180/0x270
[  383.515996][T16626]  ? selinux_file_ioctl+0xb4/0x270
[  383.518155][T16626]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  383.520623][T16626]  __x64_sys_ioctl+0x18e/0x210
[  383.522650][T16626]  do_syscall_64+0xcd/0xfa0
[  383.524548][T16626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.527013][T16626] RIP: 0033:0x7fc18618eec9
[  383.528879][T16626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  383.536772][T16626] RSP: 002b:00007fc186fcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  383.540228][T16626] RAX: ffffffffffffffda RBX: 00007fc1863e6090 RCX: 00007fc18618eec9
[  383.543268][T16626] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000008
[  383.546406][T16626] RBP: 00007fc186211f91 R08: 0000000000000000 R09: 0000000000000000
[  383.549590][T16626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  383.552295][T16626] R13: 00007fc1863e6128 R14: 00007fc1863e6090 R15: 00007ffc41566608
[  383.555039][T16626]  </TASK>
[  383.556971][T16626] Kernel Offset: disabled
[  383.558708][T16626] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:28:09  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffff88806a43a380 RCX=0000000000000100 RDX=0000000000000001
RSI=0000000000000002 RDI=ffff88806a43a382 RBP=dffffc0000000000 RSP=ffffffff8e007930
R8 =0000000000000001 R9 =ffff88806a43b2d4 R10=ffff88806a43a383 R11=0000000000000001
R12=0000000000007fd9 R13=0000000000000000 R14=ffff88806a43b2c0 R15=ffffed100d487470
RIP=ffffffff8b68e1dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d69d9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fc186fcdd58 CR3=0000000039f50000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd75b33950 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd67fe12fbe
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd67fe12fcb
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd67fe12fc5
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd67fe12fd9
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd67fe1305f
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd67fe1313d
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000004647 RBX=ffff88802d370000 RCX=ffffffff81c5398f RDX=0000000000000000
RSI=ffffffff8db032ec RDI=ffffffff8bf1e3c0 RBP=ffffc90003d2f718 RSP=ffffc90003d2f6d0
R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90832dd7 R11=0000000000000001
R12=ffff88806a53a380 R13=ffff888024cac900 R14=ffff88806a43a380 R15=ffff88806a53b1b0
RIP=ffffffff818a683a RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc186fee6c0 ffffffff 00c00000
GS =0000 ffff8880d6ad9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000200000004000 CR3=000000003ec7f000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000feffffd0 Opmask01=0000000000000003 Opmask02=00000000ffff7fdf Opmask03=0000000020400004
Opmask04=00000000ffffffdf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560f23f1fce0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7fb41f1b20
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373257c50823483 73732579304c8659
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d499ce509b59af0 7373737613814c6c
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00346963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ee3aef967ac6e983 0000560a43032bea 0000000000000251 0000000000000031
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000121 6c2f0073656c7572 0000347400347400 317761726469682f
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3139312c3039312c 4638312c4538312c 4238312c3938312c 3838312c3538312c
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3438312c3138312c 3937312c3737312c 3437312c4436312c 4336312c3636312c
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85308595 RDI=ffffffff9ae077e0 RBP=ffffffff9ae077a0 RSP=ffffc90004037430
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666
R12=0000000000000000 R13=0000000000000073 R14=ffffffff9ae077a0 R15=ffffffff85308530
RIP=ffffffff853085bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc186fcd6c0 ffffffff 00c00000
GS =0000 ffff8880d6bd9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000110c2467f5 CR3=000000003ec7f000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc186212fbe
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc186212fcb
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc186212fc5
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc186212fd9
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc18621305f
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc18621313d
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1863b74a8 00007fc1863b74a0 00007fc1863b7498 00007fc1863b7470
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc186f1d100 00007fc1863b7460 00007fc1863b7478 00007fc1863b74c0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc1863b74b8 00007fc1863b74b0 00007fc1863b74a8 00007fc1863b74a0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=dffffc0000000000 RBX=ffffc900027df0e0 RCX=ffffc900027df034 RDX=1ffff920004fbe25
RSI=ffffffff8dadd930 RDI=ffffc900027df0e0 RBP=ffffc900027df128 RSP=ffffc900027df0c8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000010a89
R12=ffffffff81a83070 R13=ffffc900027df1a0 R14=0000000000000000 R15=ffff888036cca480
RIP=ffffffff816c3fbe RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d6cd9000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f1435117d60 CR3=00000000250fa000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14345b76c3 00007f14345b76c3
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1ac0e470 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555580c2c24a 0000555580c2c170
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555580c27224 0000555580c27220
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555580c32551 0000555580c321b0
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555580c26f54 0000555580c26f50
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00100005b8820800 010800060a1e9a00 1000001000001000 0c10000100000808
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010004000408000f ffffffffffff0401 00000c0806080149 a802841000001000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010000080806060c 07b000100005b982 08000100000a0806 06011e9800100005
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b882080001080006 0a1e9a0010000010 000010000c100001 00000808060a0106
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc00100000040408 07b4003270756f72 676301ffffffffff ffffffef08000300
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000