last executing test programs:

1m37.512449719s ago: executing program 3 (id=303):
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$CDROMMULTISESSION(r1, 0x5310, &(0x7f0000000080)={@lba=0x5, 0x0, 0x2})
write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

1m37.512154059s ago: executing program 3 (id=304):
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x400)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setfsuid(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x81000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r3}}, {@directio}], [{@audit}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}})
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x402, &(0x7f0000000200)={'trans=virtio,', {[{@afid={'afid', 0x3d, 0xffffffffffffff00}}]}})
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

1m37.440668943s ago: executing program 3 (id=306):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x21c0, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00')
read$FUSE(r3, &(0x7f0000003240)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x1b11)
setuid(r4) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r2, {<r6=>0x0, <r7=>0xee01}}, './file0\x00'})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@can_delroute={0x6c, 0x19, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@CGW_MOD_UID={0x8, 0xe, r4}, @CGW_MOD_UID={0x8, 0xe, r6}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x5, 0x1, 0x0, 0x0, "afc7bb3b0980332e"}, 0x1}}, @CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "f745d7d0e9cd576f"}, 0x5}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1}, 0x7, 0x2, 0x0, 0x0, "b91eb290a990191d"}, 0x8}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x5) (async)
madvise(&(0x7f00005cc000/0x1000)=nil, 0x1000, 0x66)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async)
close(r1) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
chown(&(0x7f0000000100)='./file0\x00', r6, r7) (async)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) (async)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r8) (async)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x9, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c0}, 0x404a8d0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000eb00000001410000001c001700000007000000006574683a73797a6b616c6c65723000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000300)={'team_slave_0\x00', @local}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))

1m37.382086082s ago: executing program 3 (id=309):
syz_io_uring_submit(0x0, 0x0, 0x0) (async, rerun: 32)
r0 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async)
r1 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f00000001c0)=0x1)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
personality(0x1fffffc) (async)
io_setup(0x3, &(0x7f0000000000)) (async)
uname(&(0x7f0000000040)=""/44)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', <r2=>0x0}) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x67, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="a1ec615ec5222baacdda50000000"], 0x14}}, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x2dc80, 0x4) (async, rerun: 64)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xc, r2}, 0x10) (rerun: 64)
uname(&(0x7f0000000200)=""/21) (async)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
io_uring_enter(0xffffffffffffffff, 0x4cd4, 0x2124, 0x12, &(0x7f0000000000)={[0x3]}, 0x8) (async, rerun: 32)
syz_clone(0x68010000, 0x0, 0x42, &(0x7f0000000080), 0x0, 0x0) (rerun: 32)

1m37.229580654s ago: executing program 3 (id=314):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0xa2)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2b)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0500000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000000100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000100"/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018170000", @ANYRES32=r3, @ANYBLOB="100000000000000095000000000000007ecb0bdc48297ee6cdfb8d0cc87b5a47c9727bcd49ad95b8473343ad41a27bfc88a6fd5b44eff2b4f054b289e9017a8ce9b55687aa7e3fc883fc1a30f121e61dff5c7ece17a01d018a4602ff7d1b52ac07960b85183df6087231bdffc5864cd0c6b0cfbe5713762cdffea6ada94e89427126d8e879c8955b5cf80ab8cd6b741647"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1m37.182218324s ago: executing program 3 (id=317):
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000060000000300000000000000", @ANYRES32, @ANYBLOB="03000000000000000000000004f4000000000000bf6d1c2ac126c985e843a37c8f3c4b6abec838fba0e0a8053fc7281fb4d81ba3a6a40a3b20d2db2fefef3520b4a7fe40a0d15b833fb3300da243b3e8881c2906da2b9c81096fd4148f7ebe2990312c3d2ffa348ed7bf072a1a32bf3ea79479e4c69efa12710e2085a9b59b9167ebf2f1a4d311f4b18aa6b3cc7759ec0aa3963ec8b28110d99c14e13f6d157c18f43530aabb690fc14e616c0a3f7755473a58ec2a3980", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000240)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000080)=0x4})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4}, 0x10)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

1m22.201966757s ago: executing program 32 (id=317):
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000060000000300000000000000", @ANYRES32, @ANYBLOB="03000000000000000000000004f4000000000000bf6d1c2ac126c985e843a37c8f3c4b6abec838fba0e0a8053fc7281fb4d81ba3a6a40a3b20d2db2fefef3520b4a7fe40a0d15b833fb3300da243b3e8881c2906da2b9c81096fd4148f7ebe2990312c3d2ffa348ed7bf072a1a32bf3ea79479e4c69efa12710e2085a9b59b9167ebf2f1a4d311f4b18aa6b3cc7759ec0aa3963ec8b28110d99c14e13f6d157c18f43530aabb690fc14e616c0a3f7755473a58ec2a3980", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000240)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000080)=0x4})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4}, 0x10)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

1m5.871830895s ago: executing program 1 (id=820):
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async)
listen(r3, 0x0) (async)
syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x4c, @broadcast, 0xfffc, "5de98aee83331412"}]}}}}}}}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2], 0x3c}}, 0x0)

1m5.809431145s ago: executing program 1 (id=822):
r0 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$mixer_OSS_ALSAEMULVER(r1, 0x80044df9, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

1m5.807458543s ago: executing program 1 (id=823):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'macvlan1\x00', @multicast})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0)
write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e)

1m5.617983696s ago: executing program 1 (id=827):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
getpid() (async)
r0 = getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x199100a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x9) (async)
umount2(&(0x7f00000001c0)='./file0\x00', 0x9)
r2 = syz_pidfd_open(r0, 0x0)
mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xc, 0x0)
setns(r2, 0x24020000)
syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0)

1m5.614723947s ago: executing program 1 (id=829):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1f, &(0x7f0000000040), 0x4)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getpid()
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
listen(r4, 0x0)
accept4$rose(r4, 0x0, 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000180)={[{0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="660f72d4013e440f09de3ec4e1fa16c9b9c80258000f322e65400f01c20f300f07460f30c4c1316c0e", 0x29}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4)
getsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, &(0x7f0000000080))

1m5.378096881s ago: executing program 1 (id=835):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket(0x10, 0x803, 0x0)
syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400120103e90000097c000000000000000705", @ANYRES32], 0x0)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
ioctl$FBIOBLANK(r1, 0x4611, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@multicast2, @dev}, &(0x7f0000000140)=0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r2, 0x0, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'vcan0\x00', <r5=>0x0})
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, r5, 0x40}, 0xc)
ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000100))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r8, 0x400455c8, 0x4)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x32)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

1m5.347776318s ago: executing program 33 (id=835):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket(0x10, 0x803, 0x0)
syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400120103e90000097c000000000000000705", @ANYRES32], 0x0)
r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
ioctl$FBIOBLANK(r1, 0x4611, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@multicast2, @dev}, &(0x7f0000000140)=0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r2, 0x0, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'vcan0\x00', <r5=>0x0})
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, r5, 0x40}, 0xc)
ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000100))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r8, 0x400455c8, 0x4)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x32)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

43.500472455s ago: executing program 0 (id=1251):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stack\x00')
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) (async, rerun: 64)
lseek(r0, 0x9, 0x0) (async, rerun: 64)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r2, 0x400caed0, &(0x7f0000000180)={[{0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x800000000}, {0x8, 0xb7f, 0x0, 0x3, 0x4, 0x7, 0x20, 0x0, 0x8, 0x40, 0x40}, {0x0, 0x0, 0x10, 0x2, 0x0, 0x1, 0xf, 0x0, 0x0, 0x2, 0x0, 0x1, 0x4}], 0x1}) (async)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)) (async)
fstat(r1, &(0x7f0000000080)) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x21}, 0x0)
syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) (async)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x8, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)

43.400180588s ago: executing program 0 (id=1254):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x23, &(0x7f0000000880)=@raw=[@generic={0xc2, 0x7, 0x6, 0x8, 0x4000}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0x4, 0xf, 0x1, 0x0, 0x80}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x3, 0x9, 0x8, 0xe}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f0000000100)='syzkaller\x00', 0x7, 0xa2, &(0x7f00000009c0)=""/162, 0x41000, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xb, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x0, 0x1, 0x9, 0x2}, {0x3, 0xffffffff, 0x1, 0x3}, {0x5, 0x4, 0x9, 0xa}, {0x3, 0x3, 0x5, 0xd}, {0x1, 0x1, 0x5, 0x7}, {0x3, 0x1, 0x7, 0x7}, {0x4, 0x5, 0x10, 0x2}, {0x5, 0x5, 0x10, 0x8}, {0x5, 0x5, 0x6, 0x6}], 0x10, 0x80000000, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04200000000000000002000000540004803c0001800a0001006c696d69740000002c0002800c000240000000000000000008000540000000000c00014000000000000000010800044000000001140001800b0001007470726f78790000040002800900010073797a30000000000900020073797a32", @ANYRESHEX, @ANYRES16=r0], 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x0)

43.331774716s ago: executing program 0 (id=1255):
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000000)='./file1\x00', 0x200, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00')
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

43.330013615s ago: executing program 0 (id=1257):
r0 = socket(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000007d000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r1, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r2 = gettid()
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004000000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newtaction={0x60, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0)
ioprio_set$pid(0x2, r2, 0x4007)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x10882, 0x80)
r6 = syz_open_procfs(0x0, &(0x7f0000000900)='stat\x00')
lseek(r6, 0x7, 0x1)
syz_clone(0x20000000, &(0x7f0000000300)="f50a11f535c2e29ea2657734f25182050b2722355ab27f5754b6dc60b03b69f7b62ba7b1abc5fc57b01ae7133fadc4e35fb2f2d53977c309783f09357917027d1bd698a3c500c395848c597ee5af610ba06d0f56310aebefa0e746efc7a62b994fd88884e6f2588491baebb331eee10780ca0928", 0x74, &(0x7f0000000240), &(0x7f0000000380), &(0x7f00000004c0)="bc5d53beb96d64340e2f73f446f0c92c97aef1ddb18450f76a08257158fd7e672f97ab432b520df6c5b54317ef3c0b37681f0192325c68ed175e00be1a9d469b2077634aaef7bf3856cda1b5b5b22785d5230fe683f8f0f21ee4d1c070ea493403f780349bb8603e9affc61185e0507d198fa8d007970fc7c02e9984deb2b9f180a9bdea5a62b938fb0d28216972d2dc3076cdcee02bb08c3f1f3e8ba319b06abd3b0ea0a60250acd34296c1deacc1760f53517fdf15244507baee826b397018e09a57833c5a")
syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r9 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000480)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x18, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r7)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f00000005c0)=ANY=[@ANYBLOB="a8de00860f84850c00000000000000000075a8092d830d2123a5a9a5904539313ec328e25e79a8b58fe1cd094600d3d73ca6db83605595c28a0a51aeadfda1827bf7f8a58d927d11cf6fb6cf2568e424c32bc75367018de82a6729701e11af0e0105290552bbf235603b5059123cbd4f62eb5dbc765098d196f085ae35d4aff5b4c3a15ba9b10af755fbcfa014ce98a15d4bc21555dd1328a51d60bc4eeb305d6ead518ce573a83064305bb2f0536908d8a893a2b7f7be8ee593e594e568586cecf2b1cb57e6fe912448eed8711b968f22d2d1314f0ad629dca7177658a908"])

43.160495257s ago: executing program 0 (id=1262):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000780)={'dvmrp1\x00', 0x1}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000780)={'dvmrp1\x00', 0x1})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {}, 0xfd}, 0x18)
sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
capset(0xffffffffffffffff, 0x0)
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10e) (async)
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x9)
ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) (async)
ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000140)={'bond0\x00'})
r6 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
sendto$inet6(r6, &(0x7f00000009c0)="c7", 0x1, 0x400c001, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r9, &(0x7f000000c3c0)={0x2020}, 0x2020) (async)
read$FUSE(r9, &(0x7f000000c3c0)={0x2020, 0x0, <r10=>0x0}, 0x2020)
write$FUSE_INIT(r9, &(0x7f0000000300)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x7ab78c4493c12f93}}, 0x50)
creat(&(0x7f0000000180)='./file0\x00', 0x0)
syz_fuse_handle_req(r9, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(r9, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(r9, 0xffffffffffffffff, 0x0)

43.022243132s ago: executing program 0 (id=1264):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0x4000}, 0xc)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0)

43.004237447s ago: executing program 34 (id=1264):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0x4000}, 0xc)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0)

8.295532391s ago: executing program 4 (id=1714):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x501800, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000004800000000000000000850000005300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.381657478s ago: executing program 4 (id=1721):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) (async)
creat(&(0x7f0000000080)='./bus\x00', 0xa) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
close(0x3) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7, 0x7, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300020d0000000000000000000000030006000b0a000002000000ac141436000000000000000002000100000000000000090000000000030005000000000002000000ac1414aa0000000000000000020008000800000034"], 0x68}, 0x1, 0x7}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = inotify_init()
keyctl$set_reqkey_keyring(0xe, 0x6) (async)
inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0xa000032a)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) (async)
sendmmsg(r5, &(0x7f0000000180), 0x40000000000007b, 0x4004) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
readv(r4, &(0x7f0000000100), 0x0)

7.373858816s ago: executing program 4 (id=1723):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f00000000c0)=[{0x20, 0x1, 0x9}, {0x9584, 0x7, 0xfa, 0x9}, {0x0, 0xf6, 0x40, 0x1fd}, {0x5, 0x4, 0x9, 0x3}, {0x6, 0x70, 0x9, 0x16d2}, {0x7, 0x8, 0xa, 0x6}]})
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'xfrm0\x00', <r1=>0x0})
r2 = socket(0x11, 0x3, 0x0)
sendto$packet(r2, &(0x7f0000000380)="6fa4bf90aa8a2fa38a8f6c8fa168f069adfc79fefab38d472b35afef1abf5976aa851156780bb0fe", 0x28, 0x0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="0786dbd848f5"}, 0x14)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet(0x2, 0x800, 0x30869a3)
read(r0, &(0x7f00000001c0)=""/241, 0xf1)
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140))
syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')

6.508862206s ago: executing program 4 (id=1729):
r0 = dup(0xffffffffffffffff)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x7, 0x4, "75429effa66f00"}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0xffffffffffffffa7) (async)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x2004020, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0xee00, @ANYBLOB=',smackfsdef=--},\'),smackfstransmute=syz,\x00']) (async)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000bc0)=@ethtool_perm_addr={0x20, 0x10, "f87eb99b81ab90adf61e87b2fa219156"}})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async, rerun: 32)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async, rerun: 32)
sendmmsg$inet6(r7, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)='\a', 0x1}], 0x1}}], 0x2, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000200)) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6)
shutdown(r7, 0x2) (async)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) (async, rerun: 32)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async, rerun: 32)
add_key(&(0x7f00000002c0)='encrypted\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000380)="d137010000000100000a0857", 0xc, r5) (async, rerun: 32)
ioctl$KVM_CAP_MSR_PLATFORM_INFO(r4, 0x4068aea3, &(0x7f0000000240)={0x9f, 0x0, 0x1}) (async, rerun: 32)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async)
read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2100) (async)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000))
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xff)

6.431813153s ago: executing program 4 (id=1731):
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) (async)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) (async)
keyctl$KEYCTL_WATCH_KEY(0x15, r3, r4, 0xfffffffdffffffff) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0x5}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008020}, 0x0) (async)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x3fa, 0x20, 0x70bd27, 0x25dfdbff, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x4) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0], 0x58}}, 0x0)

6.379700274s ago: executing program 4 (id=1733):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0xff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18004c9ed872b6b82e39bc455a6ec6af4487d3e9762873ad1c768bd42dab0832ef80f65427cde7833283c7fb952e2d81ee5d6d0402bbd84b9e2cd2de6319dcb28fa0234756d9fadf200c62214028b5ac35e86a8b3fc28ba50f3a5f"], 0x18}}, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x26, 0x6, 0x0, 0x9, 0x7d, 0x4, 0x97, 0x81, 0x3, 0x4, 0x9, 0x75, 0x6, 0x6, 0x0, 0x1f76, [0x8f, 0x7b0]}})
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x19)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000007000000008000300", @ANYRES32=r7], 0x34}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @random="2ac7fd5d244d", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3f00e7", 0x10, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@routing={0x3b}], {0x0, 0x0, 0x7}}}}}}, 0x0)

809.222535ms ago: executing program 2 (id=1789):
syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') (async)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00')
preadv(r0, &(0x7f0000000200), 0x0, 0xfffffffd, 0xfffffffd) (async)
preadv(r0, &(0x7f0000000200), 0x0, 0xfffffffd, 0xfffffffd)
ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f0000000200)=@disckey={0x2, 0x1, "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"})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
shutdown(r3, 0x0) (async)
shutdown(r3, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000a80)={<r4=>0x0, 0x3c, &(0x7f0000000a40)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e1d, @broadcast}, @in6={0xa, 0x4e24, 0x0, @empty, 0xff}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f00000000c0)=0x8)
listen(r3, 0x9)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) (async)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"])
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"]) (async)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009004"])
epoll_pwait2(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x9]}, 0x8)
write(0xffffffffffffffff, &(0x7f0000000000)="2700000014000707", 0x8) (async)
write(0xffffffffffffffff, &(0x7f0000000000)="2700000014000707", 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x1, 0x803, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fea000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bbba00"/400], 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0)
r8 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000b40))
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x9000, 0x6}, [], {0x14, 0x11, 0xf, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x9000, 0x6}, [], {0x14, 0x11, 0xf, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0)

671.511071ms ago: executing program 2 (id=1793):
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000000"], 0x0)
sendto$inet(r0, &(0x7f0000000040)="8b", 0x1, 0x200080d1, &(0x7f0000000240)={0x2, 0x1, @empty}, 0x10)

670.625459ms ago: executing program 2 (id=1794):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001b00000000000000000037000100ffffffff9500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

607.784391ms ago: executing program 2 (id=1796):
r0 = socket$inet(0x2, 0x3, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @rand_addr=0x64010102, @remote}, 0x1)
r1 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0xfffffffffffffcf2, r3, 0x1, 0x0, 0x0, {0x4f}}, 0x4c}}, 0x8851)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0xa, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r5=>0x0})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r6 = socket(0x28, 0x5, 0x0)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r5}, 0x18)
sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
poll(&(0x7f0000000440)=[{r7, 0xc}], 0x1, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0)
socket$inet(0x2, 0x3, 0x2) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) (async)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @rand_addr=0x64010102, @remote}, 0x1) (async)
accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0xfffffffffffffcf2, r3, 0x1, 0x0, 0x0, {0x4f}}, 0x4c}}, 0x8851) (async)
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0xa, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
socket(0x28, 0x5, 0x0) (async)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r5}, 0x18) (async)
sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async)
poll(&(0x7f0000000440)=[{r7, 0xc}], 0x1, 0x4) (async)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) (async)

538.949206ms ago: executing program 6 (id=1801):
r0 = socket(0x28, 0x5, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@empty}, {@broadcast}, {@empty, 0xfffff4bb}, {@multicast1}, {@private}]}, @rr={0x7, 0x23, 0x0, [@remote, @empty, @empty, @multicast1, @remote, @dev, @loopback, @rand_addr]}, @noop, @lsrr={0x83, 0x3}, @generic={0x0, 0x2}]}}}}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/168], 0x1dc}}, 0x0)
r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10)

432.321967ms ago: executing program 2 (id=1802):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)=""/214, 0xd6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00'], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000008000ca748018200000", @ANYRES32, @ANYBLOB="00000000000000001820", @ANYRES32, @ANYBLOB="000000000000000000000000fcffffff95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="55ce2bfea22f"})

432.027663ms ago: executing program 5 (id=1803):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnetconf={0x2c, 0x52, 0x400, 0x70bd26, 0x0, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x1}, @NETCONFA_FORWARDING={0x8, 0x2, 0xff}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
write$cgroup_pressure(r0, &(0x7f0000000100)={'some', 0x20, 0x6, 0x20, 0x2}, 0x2f)
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={<r2=>0x0, 0x1, 0x4383, 0x2, 0x10000000, 0x7}, &(0x7f00000001c0)=0x14)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r2, 0x6, 0x5, [0x1, 0x400, 0x200, 0x2, 0x4]}, 0x12)
setxattr$incfs_id(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
writev(r3, &(0x7f0000000580)=[{&(0x7f0000000380)="d365f2c44c999f3b544663f3910c7491a64f49fd7453b815e72d532d7b13e347d3a8f89489f36b141a864d864d47e10f3d1d69b02239c6adbf67863758318e94683ff1e49db2e698cb58fd239aa056f86b8ab39aa09bcb59958fc2479210e35aa9432d9c604d3039f5be48c45cb557fb68d6495918a3edd2ec5e4425f1fc90f74b12407cb30f109cfecb6a22e694bc242d1eebd1b80360c96bd6e20f1b48a2", 0x9f}, {&(0x7f0000000440)="13d79d0d80eea403b0deddf3122788e858389fa9ef05f0a02de919fb2f9aba367d4577a9e219940982b720bd460cbb72ddb7872d9392fa942d93a836f6ff23101109b23e85d6aee8a1e1bace0211773f82dd46a42e367c6c311f421eeda7832cf06180709133a1d6356fda0f1ebf5f3167e2a551c823f51bb9d72d4069d0f028505a3f99d900d5caa7", 0x89}, {&(0x7f0000000500)="d98c6482fc98d92005d1e95da0fffd1dd87499e24a64556fe7ed0ecb9d8a86b9aaf0ec26b8a9e27f82ef4e863ddc589e62bc6bae56e0558a84bf4a5338d78bb2486903a9fb98130f71cd74a318e794a5115bd592d27198109b64e477cf54674ecedbe54a281c79faaa48746cf9", 0x6d}], 0x3)
r4 = fspick(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000600)='%\\!\x00', &(0x7f0000000640)='./file0\x00', r0)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000680)=<r5=>0x0)
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000740)={<r6=>0x0, 0x3, 0x40})
ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000b40)={{r3}, r5, 0xa, @inherit={0x58, &(0x7f00000006c0)={0x0, 0x2, 0x3, 0x5, {0x14, 0x6, 0x7fff, 0x6, 0x8}, [0x7fe, 0x3]}}, @devid=r6})
execveat(r0, &(0x7f0000001b40)='./file0\x00', &(0x7f0000001c40)={[&(0x7f0000001b80)='(@$\'l&/#\x00', &(0x7f0000001bc0)='\x00', &(0x7f0000001c00)='/v(\x00']}, &(0x7f0000001d40)={[&(0x7f0000001c80)='%\\!\x00', &(0x7f0000001cc0)='\x00', &(0x7f0000001d00)='@%\x00']}, 0x100)
ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000001d80)={0x0, 0x4})
r7 = fsmount(r0, 0x0, 0x70)
ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000001dc0))
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001ec0)={r0, &(0x7f0000001e00), &(0x7f0000001e40)=""/84}, 0x20)
r8 = accept4$rose(r0, &(0x7f0000001f00)=@full={0xb, @dev, @rose, 0x0, [@bcast, @bcast, @default, @null, @rose, @null]}, &(0x7f0000001f40)=0x40, 0x800)
write(r8, &(0x7f0000001f80)="e719c56a0f7a5d16bb89c0629938782ed0113c8345a844dc14e290d1dd103c5a719131da783367f3bc2ed362286147f611f2fd7a8eab79661e3cec016121011a8166b6b0bff941cf7a4261d48d679709e0e976b9aebcc18f570ba6b0f2ef89a710529d20315c0feb640e0f75369452a522c4fb5e9e0e9417a5914f0de9f5c1288307ea4e31c3a49765914ccc2569f536e130e5ce5cd3801145514ee0fcdd4ee832a16c0217f523422d7f9f861f4b8649244c8f66e9500cc351abe02c98130b213d309c29d0e799ae451555c5a9b20655b2ee1ba66c", 0xd5)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000002080)={r7, r0})
sendmsg$nl_route(r7, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)=@ipmr_getroute={0x1c, 0x1a, 0x8, 0x70bd2b, 0x25dfdbfc, {0x80, 0x0, 0x20, 0x4, 0xfe, 0x2, 0xfe, 0xa}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000021c0)='cdg\x00', 0x4)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000003240)={&(0x7f0000002200), &(0x7f0000002240)=""/4096, 0x1000})
close_range(r4, r3, 0x2)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000003280), 0x2, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r9, 0x4008af14, &(0x7f00000032c0)={0x2, 0x2})

431.852305ms ago: executing program 2 (id=1804):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f10"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x10)
r3 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ppoll(&(0x7f0000000080)=[{r4, 0xad0}], 0x1, 0x0, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
read$hiddev(0xffffffffffffffff, 0x0, 0x0)

431.528661ms ago: executing program 5 (id=1805):
r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r2}, 0x20)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r5=>0x0, 0x2}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={r5, @in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x2, 0x989, 0x0, 0x10}, 0x9c)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
sendto$inet6(r4, &(0x7f0000000240)="1ee763e864b12312aa93bd505527b8d861cacff7626e64f1466b2d913592f9ac83a3a1ddb684aa8db3adf1e939377646e57ab3417cff3c60d32a57616351a04a8866ea3dece6163bef3e59ef54c26e57e43637b8d6551b1eabc3aad5bdc566a020a12ed5a41fb0d2e57aec05473b25200c791d30ba267e0ce776e93f6a720a4ad846a4761d1058f6dbb86633bc36f23acadf20ffc1e474ae5f0e444a731f9edd1789cd0c7539d533f2208364a720d141b092", 0xb2, 0x200488d1, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @remote, 0x1}, 0x1c)

430.491128ms ago: executing program 6 (id=1806):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/cgroup', 0x0, 0x0)
getdents64(r0, &(0x7f0000000080)=""/43, 0x2b)
getdents(r0, &(0x7f0000000000)=""/50, 0x32)
r1 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x1, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}]}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x0)
preadv2(r1, &(0x7f0000000400)=[{&(0x7f0000000180)=""/250, 0xfffffe18}, {&(0x7f0000000340)=""/85, 0x4e}, {&(0x7f0000000440)=""/118, 0x77}], 0x3, 0x2, 0x55f, 0x16)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000000))

361.471842ms ago: executing program 5 (id=1807):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r0 = socket(0x2, 0x1, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000000080)="a80b8637e9543c2a87d0904fa189476738bebc185e20b6044b2196e51ba20e4998b36b400e316a4378f211f8c0706cd4fda0a5ac51ec31ab422b9bcc51e60a0c026c34197d2513cf734090c4cf6beac682812540d6b7998391688808ecae05991eff55d749931cbeda7e47229452fd588d4ab6ab1187c08655519820d1ac3733b06c05d5d843b9b329a9eec94347fffb98e324caf26c02331af67d6a9f00d79df8c56c713b977083b516ff314578dca72088d83176358611e2e965bf5d42fd21b74cd3ff42ea419639b16a770363446511f30c8eebadd5c2b871d38889268e81a304a0a82ff5061df2", 0xe9}], 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0)

360.581534ms ago: executing program 6 (id=1808):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mq_open(&(0x7f0000000a80)='\'\xf5@$*\x00', 0x40, 0xb, &(0x7f0000000ac0)={0x8, 0xffff, 0x1, 0x6})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000780)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=<r5=>r3, @ANYBLOB="010b00000000000000000c00000008000300", @ANYRES32=<r6=>r4], 0x1c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x88, 0x1, [@m_mpls={0x84, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x29, 0x4, "b2d4395d039579bd7f09cbd721e033ccd64ba7a309b4b69760c225cf31178018d2ebb56a9c"}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000400)={0x9, 0x0, 0x4, {0x1, @pix_mp={0x8, 0x5828a49, 0x32314d48, 0x6, 0x6, [{0xa, 0x4}, {0x7, 0x5}, {0x80, 0x6}, {0x5, 0x9}, {0xc, 0x3ed}, {0x160, 0x3}, {0x1, 0xff}, {0x3, 0x3}], 0x38, 0x2, 0x7, 0x1, 0x4}}, 0x675})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r9=>0x0})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r5, @ANYRESDEC=r6, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x800)
r11 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000014006b00c84e21000af32c6e020675f8002500024001080000000000000024eab582949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9081139343d0189594c952e805fffa1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010029bd7000fedbdf2500000000", @ANYRES32=r9, @ANYBLOB="008500000200bdd0"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)

357.655362ms ago: executing program 5 (id=1809):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x86)
acct(&(0x7f0000000240)='./file0\x00')
acct(&(0x7f0000000480)='./file0\x00')
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}], {0x14}}, 0x78}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000c40)="af", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x54, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x36, 0x33, @action={{{}, {}, @device_b}, @vht_group_id={0x15, 0x1, {0x0, "5584d2f515d56c029a92908b231c387c"}}}}]}, 0x54}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan1\x00'})
io_setup(0x6, &(0x7f0000000280))
splice(r4, 0x0, r3, 0x0, 0x80, 0x0)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000180)={0x10})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001440), r9)
sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000500)={0x70, r10, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x53, 0xa8, @random="ead7a14c37b31207472339d33dc33a7a4b8d294253d73d1c45f020a5626fbbf38e03a98854a89e8f36803aa8e6ca0468c829dc73a1bdd30241ca7392775a96150c2cf55d26b912df2e12bde2fb1495"}]}, 0x70}, 0x1, 0x0, 0x0, 0x48}, 0x20040840)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x188, r10, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x7ff}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xb3b7}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xd}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x7}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x632}, {0x5}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

150.855846ms ago: executing program 5 (id=1810):
r0 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x101)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x31)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x7fff7ffc}]}) (async)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x630000, 0x0)
fchdir(r2)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
r3 = fsopen(&(0x7f0000000380)='nfsd\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0)

150.574165ms ago: executing program 5 (id=1811):
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x8}, 0x18) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0) (async, rerun: 32)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (rerun: 32)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002000020d3"]) (async, rerun: 64)
close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64)

90.195697ms ago: executing program 6 (id=1812):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x400, 0x0, [], [0xff, 0x0, 0x39a], [], [0x100000001]}) (async)
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x400, 0x0, [<r4=>0x0], [0xff, 0x0, 0x39a], [], [0x100000001]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4}) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x0, [<r5=>0x0]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r5})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x0, "9123dbf1aea4ad9484b2cbf5fef9149d2965e642f2557f836662bdd2be1f755f", 0x32314d4e}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x0, "9123dbf1aea4ad9484b2cbf5fef9149d2965e642f2557f836662bdd2be1f755f", 0x32314d4e})

89.907023ms ago: executing program 6 (id=1813):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = dup(r0)
ioctl$KVM_SET_MSRS(r1, 0x4018aee3, &(0x7f0000000040)=ANY=[])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0)
fchdir(r2)
fchmod(0xffffffffffffffff, 0x504)
openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0)
getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, <r3=>0xee00])
setresgid(0x0, r3, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
syz_open_procfs(r5, &(0x7f00000000c0)='timers\x00')
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x81, 0x0, 0x56555958, 0x3, 0x3, [{0x9, 0x7}, {0x2, 0x64b0a44e}, {0x1, 0x3ff}, {0x0, 0x9}, {0x56, 0x10000}, {0x1001, 0x1}, {0x7, 0x9}, {0x6, 0x2}], 0xf2, 0x8, 0x1, 0x0, 0x6}})
mkdir(&(0x7f0000000080)='./file0\x00', 0x947b11af446114d9)

0s ago: executing program 6 (id=1814):
r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, &(0x7f0000001600))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000440)={0xa, 0x4e22, 0xc6, @remote, 0x5}, 0x1c)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000000))
r3 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="0000020100000000e6ff622bd01a36ff68ece94fa1709bfae7c8675e8d95b81a1141e9c35e1288e3fe124dab914bf8d0ee245a867fc1495be180085eb33fe6a40e3ee432d32d4360294b8b0584db904a6c2768987fc7a4371352bfe94c3caeaf13b9b21c12c572e35c8461bdc7757362cc4aac77844b6fa6065b0e2b182e110f716e3879"], 0x8)
dup2(r3, r2)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x170)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x8)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000040))
read$FUSE(r0, &(0x7f0000012400)={0x2020}, 0x2020)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='si\\e=%,\x00'])

kernel console output (not intermixed with test programs):

th.
[  100.322090][ T9156] netlink: 128 bytes leftover after parsing attributes in process `syz.5.895'.
[  100.324592][ T9156] netlink: 'syz.5.895': attribute type 5 has an invalid length.
[  100.326538][ T9156] netlink: 'syz.5.895': attribute type 6 has an invalid length.
[  100.328483][ T9156] netlink: 3 bytes leftover after parsing attributes in process `syz.5.895'.
[  100.466448][ T9159] syz.4.896[9159] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.466522][ T9159] syz.4.896[9159] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.470538][ T9159] syz.4.896[9159] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  100.483089][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'.
[  100.505873][ T9171] ALSA: mixer_oss: invalid OSS volume ''
[  101.109267][   T39] kauditd_printk_skb: 19 callbacks suppressed
[  101.109284][   T39] audit: type=1400 audit(1734193603.261:736): avc:  denied  { connect } for  pid=9192 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  101.116139][   T39] audit: type=1400 audit(1734193603.271:737): avc:  denied  { read } for  pid=9192 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  101.190260][ T9200] loop2: detected capacity change from 0 to 7
[  101.194316][ T9200] Dev loop2: unable to read RDB block 7
[  101.196293][ T9200]  loop2: AHDI p1 p2
[  101.197701][ T9200] loop2: partition table partially beyond EOD, truncated
[  101.201412][ T9200] loop2: p1 size 150995200 extends beyond EOD, truncated
[  101.257513][ T9204] netlink: 'syz.0.910': attribute type 10 has an invalid length.
[  101.622968][ T5944] Bluetooth: hci1: command tx timeout
[  101.635026][ T9212] mkiss: ax0: crc mode is auto.
[  101.655322][ T9212] IPv6: syztnl0: Disabled Multicast RS
[  101.722428][   T39] audit: type=1400 audit(1734193603.871:738): avc:  denied  { connect } for  pid=9217 comm="syz.5.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  101.722920][ T9218] ax25_connect(): syz.5.915 uses autobind, please contact jreuter@yaina.de
[  101.975607][   T39] audit: type=1400 audit(1734193604.131:739): avc:  denied  { block_suspend } for  pid=9229 comm="syz.5.918" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  102.068177][ T9230] netlink: 16 bytes leftover after parsing attributes in process `syz.5.918'.
[  102.172710][ T5936] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  102.172806][ T5944] Bluetooth: hci2: command 0x1003 tx timeout
[  102.343537][ T9252] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  102.346261][ T9252] macsec1: entered promiscuous mode
[  102.348342][ T9252] macsec1: entered allmulticast mode
[  102.349719][ T9252] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  102.399663][ T9255] overlayfs: failed to resolve './bus': -2
[  102.408153][ T9262] Cannot find del_set index 85 as target
[  102.445140][   T39] audit: type=1400 audit(1734193604.601:740): avc:  denied  { read } for  pid=9266 comm="syz.2.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  102.470955][ T9269] Cannot find del_set index 85 as target
[  102.790936][ T9302] netlink: 'syz.0.940': attribute type 4 has an invalid length.
[  102.799355][ T9302] netlink: 'syz.0.940': attribute type 4 has an invalid length.
[  102.832457][ T9308] program syz.0.941 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  102.907438][   T39] audit: type=1400 audit(1734193605.061:741): avc:  denied  { bind } for  pid=9318 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  103.048125][ T9328] overlay: ./bus is not a directory
[  103.052353][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.946'.
[  103.176192][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'.
[  103.208694][ T9342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3116 sclass=netlink_route_socket pid=9342 comm=syz.4.952
[  103.335794][ T9357] mmap: syz.4.958 (9357): VmData 37593088 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data.
[  103.364750][   T39] audit: type=1400 audit(1734193605.521:742): avc:  denied  { listen } for  pid=9359 comm="syz.4.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  103.393831][   T39] audit: type=1400 audit(1734193605.541:743): avc:  denied  { bind } for  pid=9364 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  103.398682][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'.
[  103.398848][   T39] audit: type=1400 audit(1734193605.551:744): avc:  denied  { connect } for  pid=9367 comm="syz.4.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  103.401356][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'.
[  103.408822][   T39] audit: type=1400 audit(1734193605.551:745): avc:  denied  { ioctl } for  pid=9367 comm="syz.4.961" path="socket:[30297]" dev="sockfs" ino=30297 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  103.423753][ T9369] 8021q: adding VLAN 0 to HW filter on device team1
[  103.486696][ T9374] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.962' sets config #0
[  103.693097][ T5944] Bluetooth: hci1: command tx timeout
[  103.759517][ T9389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.762264][ T9389] IPv6: NLM_F_CREATE should be set when creating new route
[  103.764499][ T9389] IPv6: NLM_F_CREATE should be set when creating new route
[  103.778328][ T9389] sit0: entered promiscuous mode
[  103.789970][ T9389] netlink: 'syz.2.966': attribute type 1 has an invalid length.
[  103.795645][ T9389] netlink: 1 bytes leftover after parsing attributes in process `syz.2.966'.
[  103.843772][ T9394] netlink: 24 bytes leftover after parsing attributes in process `syz.5.967'.
[  103.893401][ T9399] netlink: 'syz.5.970': attribute type 6 has an invalid length.
[  103.921852][ T9401] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  103.933377][ T9401] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  103.935999][ T9401] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  103.941738][ T9401] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  103.999127][ T9403] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  104.005059][ T9403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.048953][ T9414] x_tables: duplicate underflow at hook 1
[  104.053481][ T9414] xt_hashlimit: size too large, truncated to 1048576
[  104.143019][ T9422] cgroup: No subsys list or none specified
[  104.164065][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'.
[  104.227096][ T9422] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  104.309398][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'.
[  104.311705][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'.
[  104.315069][ T9424] xt_ipcomp: unknown flags 12
[  104.386760][ T9429] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.982'.
[  104.523470][ T9434] tipc: Started in network mode
[  104.524800][ T9434] tipc: Node identity 080211, cluster identity 4711
[  104.526616][ T9434] tipc: Enabled bearer <eth:syzkaller0>, priority 7
[  104.528596][ T9434] mac80211_hwsim hwsim12 ������: renamed from syzkaller0
[  104.533927][ T9434] tipc: Disabling bearer <eth:syzkaller0>
[  104.584505][ T9438] syz.4.985: attempt to access beyond end of device
[  104.584505][ T9438] sr0: rw=0, sector=64, nr_sectors = 4 limit=0
[  104.587809][ T9438] isofs_fill_super: bread failed, dev=sr0, iso_blknum=16, block=16
[  104.624898][ T9445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.988'.
[  104.627490][ T9445] netem: incorrect ge model size
[  104.629022][ T9445] netem: change failed
[  104.642102][ T9447] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.644670][ T9447] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.646965][ T9447] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.649210][ T9447] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.654483][ T9447] validate_nla: 1 callbacks suppressed
[  104.654492][ T9447] netlink: 'syz.4.989': attribute type 4 has an invalid length.
[  104.732453][ T9455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9455 comm=syz.4.992
[  104.732819][ T9457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9457 comm=syz.4.992
[  105.056147][ T9500] xt_hashlimit: max too large, truncated to 1048576
[  105.058279][ T9500] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
Dec 14 16:26:47 syzkaller kern.info kernel: imit: max too large, truncated to 1048576
Dec 14 16:26:47 syzkaller kern.info kernel: [  105.058279][ T9500] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
Dec 14 16:26:47 syzkaller daemon.err dhcpcd[5648]: ps_root_recvmsg: Invalid argument
Dec 14 16:26:47 syzkaller daemon.err dhcpcd[5648]: ps_root_recvmsg: Invalid argument
[  105.641065][ T9592] netlink: 'syz.2.1039': attribute type 5 has an invalid length.
Dec 14 16:26:47 syzkaller kern.warn kernel: [  105.641065][ T9592] netlink: 'syz.2.1039': attribute type 5 has an invalid length.
[  105.772935][ T5944] Bluetooth: hci1: command tx timeout
Dec 14 16:26:47 syzkaller kern.err kernel: [  105.772935][ T5944] Bluetooth: hci1: command tx timeout
[  105.864251][ T9627] ip6t_REJECT: ECHOREPLY is not supported
[  105.866209][ T9628] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  105.867964][ T9628] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  105.870743][ T9628] vhci_hcd vhci_hcd.0: Device attached
[  105.872915][ T9630] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[  105.874843][ T1209] vhci_hcd: stop threads
[  105.876016][ T1209] vhci_hcd: release socket
[  105.877554][ T1209] vhci_hcd: disconnect device
Dec 14 16:26:48 syzkaller kern.info kernel: [  105.864251][ T9627] ip6t_REJECT: ECHOREPLY is not supported
Dec 14 16:26:48 syzkaller kern.info kernel: [  105.866209][ T9628] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
Dec 14 16:26:48 syzkaller kern.info kernel: [  105.867964][ T9628] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
Dec 14 16:26:48 syzkaller kern.info kernel: [  105.870743][ T9628] vhci_hcd vhci_hcd.0: Device attached
Dec 14 16:26:48 syzkaller kern.err kernel: [  105.872915][ T9630] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
Dec 14 16:26:48 syzkaller kern.info kernel: [  105.874843][ T1209] vhci_hcd: stop threads
Dec 14 16:26:48 syzkaller kern.info kernel: [  105.876016][ T1209] vhci_hcd: release socket
Dec 14 16:26:48 syzkaller kern.info kernel: [  105.877554][ T1209] vhci_hcd: disconnect device
[  106.033748][ T9645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9645 comm=syz.4.1057
Dec 14 16:26:48 syzkaller kern.warn kernel: [  106.033748][ T9645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9645 comm=syz.4.1057
[  106.156316][   T39] kauditd_printk_skb: 310 callbacks suppressed
[  106.156335][   T39] audit: type=1400 audit(1734193608.311:1056): avc:  denied  { read write } for  pid=5931 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  106.166880][   T39] audit: type=1400 audit(1734193608.321:1057): avc:  denied  { read } for  pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
Dec 14 16:26:48 [  106.175409][   T39] audit: type=1400 audit(1734193608.321:1058): avc:  denied  { create } for  pid=9646 comm="syz.2.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=0
syzkaller kern.w[  106.183108][   T39] audit: type=1400 audit(1734193608.321:1059): avc:  denied  { create } for  pid=9646 comm="syz.2.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0
arn kernel: [  106.156316][   T39] kauditd_printk_skb: 310 callbacks suppressed[  106.191963][   T39] audit: type=1400 audit(1734193608.341:1060): avc:  denied  { read write } for  pid=5931 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0

[  106.199026][   T39] audit: type=1400 audit(1734193608.361:1061): avc:  denied  { read } for  pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
Dec 14 16:26:48 syzkaller kern.notice kernel: [ [  106.205989][   T39] audit: type=1400 audit(1734193608.361:1062): avc:  denied  { read write } for  pid=9648 comm="syz.2.1059" name="swradio4" dev="devtmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
 106.156335][   T39] audit: type[  106.213580][   T39] audit: type=1400 audit(1734193608.371:1063): avc:  denied  { create } for  pid=9648 comm="syz.2.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
=1400 audit(1734193608.311:1056): avc:  denied  { read write } for  pid=5931 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fi
[  106.229481][   T39] audit: type=1400 audit(1734193608.381:1064): avc:  denied  { read } for  pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
Dec 14 16:26:48 syzkaller kern.notice kernel: [  106.166880][   T39] audit: type=1400 audit(1734193608.321:1057): avc:  denied  { read } for  pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=
[  106.243924][   T39] audit: type=1400 audit(1734193608.391:1065): avc:  denied  { read } for  pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
Dec 14 16:26:48 syzkaller kern.notice kernel: [  106.175409][   T39] audit: type=1400 audit(1734193608.321:1058): avc:  denied  { create } for  pid=9646 comm="syz.2.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissiv
Dec 14 16:26:48 syzkaller kern.notice kernel: [  106.183108][   T39] audit: type=1400 audit(1734193608.321:1059): avc:  denied  { create } for  pid=9646 comm="syz.2.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0
Dec 14 16:26:48 syzkaller kern.notice kernel: [  106.191963][   T39] audit: type=1400 audit(1734193608.341:1060): avc:  denied  { read write } for  pid=5931 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fi
Dec 14 16:26:48 syzkaller kern.notice kernel: [  106.199026][   T39] audit: type=1400 audit(1734193608.361:1061): avc:  denied  { read } for  pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=
Dec 14 16:26:48 syzkaller kern.notice kernel: [  106.205989][   T39] audit: type=1400 audit(1734193608.361:1062): avc:  denied  { read write } for  pid=9648 comm="syz.2.1059" name="swradio4" dev="devtmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:
Dec 14 16:26:48 syzkaller kern.notice kernel: [  106.213580][   T39] audit: type=1400 audit(1734193608.371:1063): avc:  denied  { create } for  pid=9648 comm="syz.2.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
Dec 14 16:26:48 syzkaller kern.notice kernel: [  106.229481][   T39] audit: type=1400 audit(1734193608.381:1064): avc:  denied  { read } for  pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=
Dec 14 16:26:48 syzkaller kern.notice kernel: [  106.243924][   T39] audit: type=1400 audit(1734193608.391:1065): avc:  denied  { read } for  pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=
Dec 14 16:26:48 syzkaller kern.debug kernel: [  106.531080][ T9673] PM: Image not found (code -22)
[  107.426670][ T5944] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
Dec 14 16:26:49 syzkaller kern.err kernel: [  107.426670][ T5944] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[  107.520798][ T9747] Process accounting resumed
[  107.522459][ T9747] kernel write not supported for file /asound/timers (pid: 9747 comm: syz.0.1093)
Dec 14 16:26:49 syzkaller kern.info kernel: [  107.520798][ T9747] Process accounting resumed
Dec 14 16:26:49 syzkaller kern.warn kernel: [  107.522459][ T9747] kernel write not supported for file /asound/timers (pid: 9747 comm: syz.0.1093)
Dec 14 16:26:49 syzkaller daemon.info dhcpcd[5648]: lapb8: using IPv4LL address 169.254.221.105
Dec 14 16:26:49 syzkaller daemon.info dhcpcd[5648]: lapb8: adding route to 169.254.0.0/16
Dec 14 16:26:49 syzkaller daemon.err dhcpcd[5648]: ps_root_recvmsg: Invalid argument
Dec 14 16:26:49 syzkaller daemon.info dhcpcd[5648]: lapb9: using IPv4LL address 169.254.221.105
Dec 14 16:26:49 syzkaller daemon.info dhcpcd[5648]: lapb9: adding route to 169.254.0.0/16
Dec 14 16:26:49 syzkaller daemon.err dhcpcd[5648]: ps_root_recvmsg: Invalid argument
[  108.501345][ T9834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=9834 comm=syz.4.1116
[  108.509726][ T9834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=9834 comm=syz.4.1116
[  108.514876][ T9834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=9834 comm=syz.4.1116
[  108.519376][ T9834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=9834 comm=syz.4.1116
[  108.525514][ T9834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=9834 comm=syz.4.1116
[  108.531748][ T9835] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  108.531826][ T9834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=9834 comm=syz.4.1116
[  108.541876][ T9834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=9834 comm=syz.4.1116
[  108.546549][ T9834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=9834 comm=syz.4.1116
[  108.554730][ T9834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=9834 comm=syz.4.1116
[  108.564673][ T9841] netlink: 'syz.5.1117': attribute type 5 has an invalid length.
[  108.577107][ T9841] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  108.678448][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'.
[  108.717746][    C2] IPv4: Oversized IP packet from 172.20.20.24
[  108.746477][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  108.943089][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1124'.
[  109.002722][ T5977] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  109.152629][ T5977] usb 9-1: Using ep0 maxpacket: 8
[  109.155890][ T5977] usb 9-1: config index 0 descriptor too short (expected 28277, got 45)
[  109.158167][ T5977] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.161470][ T5977] usb 9-1: config 0 has no interfaces?
[  109.163386][ T5977] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  109.165786][ T5977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.168695][ T5977] usb 9-1: config 0 descriptor??
[  109.418080][  T831] usb 9-1: USB disconnect, device number 6
[  109.760386][ T9887] xt_hashlimit: size too large, truncated to 1048576
[  109.978134][ T9895] program syz.0.1127 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  109.982111][ T9895] overlayfs: disabling nfs_export due to verity=on
[  110.019238][ T9897] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20003
[  110.034343][ T9897] qnx6: unable to set blocksize
[  110.494347][ T9941] netlink: 'syz.2.1142': attribute type 21 has an invalid length.
[  111.028623][ T9949] netlink: 'syz.5.1145': attribute type 10 has an invalid length.
[  111.033462][ T9949] syz_tun: entered promiscuous mode
[  111.037170][ T9949] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  111.043427][ T9952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1146'.
[  111.100501][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'.
[  111.155849][ T9970] 9pnet_fd: p9_fd_create_unix (9970): problem connecting socket: �q�Y�3aK: -111
[  111.158596][ T9971] 9pnet_fd: p9_fd_create_unix (9971): problem connecting socket: �q�Y�3aK: -111
[  111.164652][   T39] kauditd_printk_skb: 675 callbacks suppressed
[  111.164661][   T39] audit: type=1400 audit(1734219347.322:1741): avc:  denied  { connect } for  pid=9967 comm="syz.4.1151" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  111.181567][   T39] audit: type=1400 audit(1734219347.332:1742): avc:  denied  { unmount } for  pid=7809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  111.197888][ T9974] 9pnet: Found fid 0 not clunked
[  111.246482][ T9971] overlayfs: conflicting options: userxattr,verity=on
[  111.254559][   T39] audit: type=1400 audit(1734219347.412:1743): avc:  denied  { create } for  pid=9968 comm="syz.5.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  111.352958][   T39] audit: type=1400 audit(1734219347.512:1744): avc:  denied  { read } for  pid=9982 comm="syz.5.1155" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  111.361557][   T39] audit: type=1400 audit(1734219347.512:1745): avc:  denied  { open } for  pid=9982 comm="syz.5.1155" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  111.368798][   T39] audit: type=1400 audit(1734219347.512:1746): avc:  denied  { ioctl } for  pid=9982 comm="syz.5.1155" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  111.370620][ T9983] vlan0: entered allmulticast mode
[  111.375639][   T39] audit: type=1400 audit(1734219347.522:1747): avc:  denied  { write } for  pid=9982 comm="syz.5.1155" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  111.405176][   T39] audit: type=1400 audit(1734219347.562:1748): avc:  denied  { unmount } for  pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  111.427016][   T39] audit: type=1400 audit(1734219347.582:1749): avc:  denied  { bind } for  pid=9986 comm="syz.2.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  111.432173][   T39] audit: type=1400 audit(1734219347.582:1750): avc:  denied  { setopt } for  pid=9986 comm="syz.2.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  111.502656][    T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  111.571468][T10007] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1161'.
[  111.662644][    T8] usb 9-1: Using ep0 maxpacket: 8
[  111.667594][    T8] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  111.670356][    T8] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  111.673415][    T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  111.676673][    T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  111.679919][    T8] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  111.684217][    T8] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  111.687112][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.895380][    T8] usb 9-1: GET_CAPABILITIES returned 0
[  111.896922][    T8] usbtmc 9-1:16.0: can't read capabilities
[  112.098415][ T9978] Mount JFS Failure: -22
[  112.099715][ T9978] jfs_mount failed w/return code = -22
[  112.102867][ T9978] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1153'.
[  112.106388][  T830] usb 9-1: USB disconnect, device number 7
[  112.430378][T10021] team0: Port device vlan2 added
[  112.458369][T10023] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  112.462043][T10023] nbd: must specify a device to reconfigure
[  112.488429][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'.
[  112.912740][   T56] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  113.074738][   T56] usb 9-1: Using ep0 maxpacket: 16
[  113.089907][   T56] usb 9-1: config 7 has an invalid interface number: 14 but max is 2
[  113.092096][   T56] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  113.094834][   T56] usb 9-1: config 7 has 1 interface, different from the descriptor's value: 3
[  113.098235][   T56] usb 9-1: config 7 has no interface number 0
[  113.099875][   T56] usb 9-1: config 7 interface 14 altsetting 7 endpoint 0xF has invalid maxpacket 544, setting to 64
[  113.102915][   T56] usb 9-1: config 7 interface 14 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  113.106461][   T56] usb 9-1: config 7 interface 14 has no altsetting 0
[  113.111507][   T56] usb 9-1: New USB device found, idVendor=0856, idProduct=ac18, bcdDevice= 7.55
[  113.113966][   T56] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.116050][   T56] usb 9-1: Product: syz
[  113.117138][   T56] usb 9-1: Manufacturer: ꬳᣒ㿯r緊㗽쉴瞔Ⰷ
[  113.118979][   T56] usb 9-1: SerialNumber: syz
[  113.337077][   T56] ftdi_sio 9-1:7.14: FTDI USB Serial Device converter detected
[  113.339376][   T56] ftdi_sio ttyUSB0: unknown device type: 0x755
[  113.343414][   T56] usb 9-1: USB disconnect, device number 8
[  113.352057][   T56] ftdi_sio 9-1:7.14: device disconnected
[  113.886365][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1182'.
[  113.889269][T10081] hsr_slave_0: left promiscuous mode
[  113.891805][T10081] hsr_slave_1: left promiscuous mode
[  114.242671][   T25] usb 10-1: new low-speed USB device number 2 using dummy_hcd
[  114.422788][   T25] usb 10-1: Invalid ep0 maxpacket: 64
[  114.562620][   T25] usb 10-1: new low-speed USB device number 3 using dummy_hcd
[  114.697581][T10097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1186'.
[  114.712619][   T25] usb 10-1: Invalid ep0 maxpacket: 64
[  114.714251][   T25] usb usb10-port1: attempt power cycle
[  114.975417][T10110] cdrom: dropping to single frame dma
[  114.984558][T10116] sp0: Synchronizing with TNC
[  115.002478][T10116] sp0: Found TNC
[  115.052685][   T25] usb 10-1: new low-speed USB device number 4 using dummy_hcd
[  115.073143][   T25] usb 10-1: Invalid ep0 maxpacket: 64
[  115.105824][T10118] netlink: 1788 bytes leftover after parsing attributes in process `syz.4.1194'.
[  115.212731][   T25] usb 10-1: new low-speed USB device number 5 using dummy_hcd
[  115.243112][   T25] usb 10-1: Invalid ep0 maxpacket: 64
[  115.244976][   T25] usb usb10-port1: unable to enumerate USB device
[  115.764947][T10140] delete_channel: no stack
[  115.896556][T10143] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  116.172806][ T5936] Bluetooth: hci1: command 0x0405 tx timeout
[  116.182650][   T56] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  116.312627][   T56] usb 5-1: device descriptor read/64, error -71
[  116.503229][ T5940] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  116.562892][   T56] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  116.672897][ T5940] usb 7-1: Using ep0 maxpacket: 32
[  116.675610][ T5940] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.678219][ T5940] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  116.680459][ T5940] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  116.685244][ T5940] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  116.687543][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.689560][ T5940] usb 7-1: Product: 铂濌훿呚窓뭏ꞣ碍㦆゜ළꄶⰀ윦赾ﺒઽਦ蜫৤蔅聰ꭠ珡났謤痰㑄䅙鴡⎽塲ᒚ◸ꁯ牺랂判ᴂ祀诡ꀷ唁續࿀쎲⎰烀캗趾﵏韇투鏚懟倈◓劕Ἃ킉엦鳵냺洄亭ｦ西鲝⯊晐樢﶑쇭ꇳ몟⎶깩聧䧼䶻彨袀蜎⨅鈽럏
[  116.696884][ T5940] usb 7-1: Manufacturer: 㠊
[  116.698094][ T5940] usb 7-1: SerialNumber: П
[  116.712904][   T56] usb 5-1: device descriptor read/64, error -71
[  116.824851][   T56] usb usb5-port1: attempt power cycle
[  117.077155][   T39] kauditd_printk_skb: 119 callbacks suppressed
[  117.077166][   T39] audit: type=1400 audit(1734219353.232:1870): avc:  denied  { write } for  pid=10155 comm="syz.5.1207" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  117.083844][ T5944] Bluetooth: hci1: unknown advertising packet type: 0x73
[  117.083932][T10157] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1207'.
[  117.084385][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1207'.
[  117.091667][ T5944] Bluetooth: hci1: Malformed LE Event: 0x02
[  117.162621][   T56] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  117.183383][   T56] usb 5-1: device descriptor read/8, error -71
[  117.187903][ T5940] usb 7-1: 0:2 : does not exist
[  117.200901][ T5940] usb 7-1: USB disconnect, device number 7
[  117.364418][T10066] udevd[10066]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  117.409358][   T39] audit: type=1326 audit(1734219353.562:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10173 comm="syz.2.1211" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd99d385d19 code=0x0
[  117.422894][   T56] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  117.443500][   T56] usb 5-1: device descriptor read/8, error -71
[  117.555257][   T56] usb usb5-port1: unable to enumerate USB device
[  117.849803][   T39] audit: type=1400 audit(1734219354.002:1872): avc:  denied  { read write } for  pid=10184 comm="syz.5.1214" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  117.856791][   T39] audit: type=1400 audit(1734219354.002:1873): avc:  denied  { open } for  pid=10184 comm="syz.5.1214" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  117.862810][   T39] audit: type=1400 audit(1734219354.002:1874): avc:  denied  { getopt } for  pid=10184 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  117.867963][   T39] audit: type=1400 audit(1734219354.022:1875): avc:  denied  { sys_module } for  pid=10184 comm="syz.5.1214" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  117.885329][   T39] audit: type=1400 audit(1734219354.042:1876): avc:  denied  { ioctl } for  pid=10184 comm="syz.5.1214" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  118.036613][   T39] audit: type=1400 audit(1734219354.192:1877): avc:  denied  { setopt } for  pid=10188 comm="syz.5.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  118.041487][   T39] audit: type=1400 audit(1734219354.192:1878): avc:  denied  { bind } for  pid=10188 comm="syz.5.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  118.079803][   T39] audit: type=1400 audit(1734219354.232:1879): avc:  denied  { set_context_mgr } for  pid=10193 comm="syz.5.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  118.222353][T10204] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1219'.
[  118.224685][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1219'.
[  118.228047][T10204] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1219'.
[  118.302657][T10212] selinux_netlink_send: 56 callbacks suppressed
[  118.302668][T10212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10212 comm=syz.2.1223
[  118.307605][T10212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10212 comm=syz.2.1223
[  118.310938][T10212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10212 comm=syz.2.1223
[  118.317836][T10212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10212 comm=syz.2.1223
[  118.321173][T10212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10212 comm=syz.2.1223
[  118.324496][T10212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10212 comm=syz.2.1223
[  118.327652][T10212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10212 comm=syz.2.1223
[  118.330860][T10212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10212 comm=syz.2.1223
[  118.336140][T10212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10212 comm=syz.2.1223
[  118.339529][T10212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10212 comm=syz.2.1223
[  118.378278][T10224] input input7: cannot allocate more than FF_MAX_EFFECTS effects
[  118.421482][T10229] netlink: 'syz.2.1228': attribute type 4 has an invalid length.
[  118.456372][T10234] netlink: 'syz.4.1230': attribute type 4 has an invalid length.
[  118.458475][T10234] netlink: 'syz.4.1230': attribute type 4 has an invalid length.
[  118.683663][T10256] kvm: kvm [10255]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xfe00000000
[  118.700344][T10256] kvm: kvm [10255]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x27e00000080
[  118.715492][T10256] kvm: kvm [10255]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x3ef00000000
[  118.852847][    T8] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  118.974524][T10283] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1245'.
[  119.022679][T10280] syz.4.1244 (10280): drop_caches: 2
[  119.034272][    T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.037807][    T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.041013][    T8] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  119.044742][    T8] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  119.047340][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.050381][    T8] usb 10-1: config 0 descriptor??
[  119.158334][T10298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1249'.
[  119.348692][T10312] xt_cgroup: xt_cgroup: no path or classid specified
[  119.445666][T10324] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  119.455980][    T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  119.457931][    T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  119.459836][    T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  119.461724][    T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  119.465563][    T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  119.467384][    T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  119.469438][    T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  119.471330][    T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  119.473699][    T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  119.475879][    T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  119.477789][    T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  119.479638][    T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  119.481501][    T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  119.489341][    T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  119.491334][    T8] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  119.493608][    T8] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  119.497759][    T8] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  119.598028][ T7287] syz_tun (unregistering): left allmulticast mode
[  119.600290][ T7287] bond0: (slave syz_tun): Releasing backup interface
[  119.777051][ T5944] Bluetooth: hci1: ACL packet for unknown connection handle 1
[  119.822888][   T56] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  119.833052][ T5936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  119.837180][ T5936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  119.839591][ T5936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  119.845563][ T5936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  119.849988][ T5936] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  119.851938][ T5936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.983020][T10340] chnl_net:caif_netlink_parms(): no params data found
[  120.007606][   T56] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  120.009832][   T56] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.011798][   T56] usb 9-1: Product: syz
[  120.012912][   T56] usb 9-1: Manufacturer: syz
[  120.014055][   T56] usb 9-1: SerialNumber: syz
[  120.018029][   T56] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  120.039857][T10340] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.041890][T10340] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.042612][   T30] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  120.044357][T10340] bridge_slave_0: entered allmulticast mode
[  120.048411][T10340] bridge_slave_0: entered promiscuous mode
[  120.052166][T10340] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.054516][T10340] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.056479][T10340] bridge_slave_1: entered allmulticast mode
[  120.058420][T10340] bridge_slave_1: entered promiscuous mode
[  120.088178][T10340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.093066][T10340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.121714][T10340] team0: Port device team_slave_0 added
[  120.125061][T10340] team0: Port device team_slave_1 added
[  120.148663][T10340] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.150495][T10340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.156970][T10340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.160479][T10340] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.162224][T10340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.168893][T10340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.198683][T10340] hsr_slave_0: entered promiscuous mode
[  120.200946][T10340] hsr_slave_1: entered promiscuous mode
[  120.203397][T10340] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  120.205369][T10340] Cannot create hsr debugfs directory
[  120.281447][T10340] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  120.285029][T10340] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  120.288474][T10340] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  120.292496][T10340] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  120.302890][T10340] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.304755][T10340] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.306710][T10340] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.308525][T10340] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.331838][T10340] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.339815][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.344787][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.360267][T10340] 8021q: adding VLAN 0 to HW filter on device team0
[  120.375796][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.377652][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.379872][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.381703][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.440494][T10355] netlink: 'syz.2.1267': attribute type 10 has an invalid length.
[  120.447289][T10355] team0: Device ipvlan1 failed to register rx_handler
[  120.465333][ T5940] usb 9-1: USB disconnect, device number 9
[  120.477177][T10340] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.505471][T10361] Bluetooth: (null): Invalid header checksum
[  120.508512][T10361] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  120.583292][T10340] veth0_vlan: entered promiscuous mode
[  120.588042][T10340] veth1_vlan: entered promiscuous mode
[  120.602750][T10340] veth0_macvtap: entered promiscuous mode
[  120.607271][T10340] veth1_macvtap: entered promiscuous mode
[  120.615133][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.617788][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.620243][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.623023][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.625494][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.628092][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.630540][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.633691][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.636120][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.638701][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.641095][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.644343][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.648543][T10340] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.655828][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.658471][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.660858][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.663824][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.666672][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.669212][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.671618][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.674669][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.677186][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.679858][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.682369][T10340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.685172][T10340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.688675][T10340] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.692157][T10340] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.694415][T10340] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.696564][T10340] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.698764][T10340] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.735536][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.737707][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.740795][T10376] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1271'.
[  120.743435][T10376] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1271'.
[  120.746424][T10376] netlink: 'syz.2.1271': attribute type 6 has an invalid length.
[  120.747190][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.748732][T10376] netlink: 'syz.2.1271': attribute type 5 has an invalid length.
[  120.750892][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.753648][T10376] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1271'.
[  120.787363][T10213] usb 10-1: string descriptor 0 read error: -71
[  120.806061][T10384] sp0: Synchronizing with TNC
[  120.816035][T10384] sp0: Found TNC
[  120.906793][T10386] Device name cannot be null; rc = [-22]
[  120.909049][T10386] sg_write: process 5 (syz.6.1273) changed security contexts after opening file descriptor, this is not allowed.
[  120.912224][T10386] program syz.6.1273 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  121.048934][T10394] overlayfs: failed to resolve './file0/file0': -2
[  121.052931][   T30] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  121.055088][   T30] ath9k_htc: Failed to initialize the device
[  121.059833][ T5940] usb 9-1: ath9k_htc: USB layer deinitialized
[  121.081270][T10400] program syz.6.1279 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  121.152240][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'.
[  121.155156][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'.
[  121.265546][T10430] usb usb8: usbfs: process 10430 (syz.2.1287) did not claim interface 0 before use
[  121.268488][T10430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1287'.
[  121.318588][T10436] usb usb4: usbfs: process 10436 (syz.2.1288) did not claim interface 0 before use
[  121.363138][ T5940] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  121.512964][ T5940] usb 9-1: Using ep0 maxpacket: 8
[  121.515452][ T5940] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  121.517360][ T5940] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  121.520208][ T5940] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  121.523607][ T5940] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  121.527004][ T5940] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  121.530681][ T5940] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  121.532911][ T5940] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  121.535805][ T5940] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  121.539014][ T5940] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  121.542174][ T5940] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  121.546220][ T5940] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[  121.548142][ T5940] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  121.551282][ T5940] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  121.554665][ T5940] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  121.557626][ T5940] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  121.564694][ T5940] usb 9-1: string descriptor 0 read error: -22
[  121.566401][ T5940] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  121.568710][ T5940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.579501][ T5940] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  121.829498][ T1464] usb 9-1: USB disconnect, device number 10
[  121.857391][ T5995] usb 10-1: USB disconnect, device number 6
[  121.872834][   T25] usb 7-1: new low-speed USB device number 8 using dummy_hcd
[  121.942672][ T5936] Bluetooth: hci2: command tx timeout
[  122.012714][ T5995] usb 10-1: new low-speed USB device number 7 using dummy_hcd
[  122.024130][   T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.026795][   T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  122.029446][   T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  122.030451][T10390] random: crng reseeded on system resumption
[  122.037146][   T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.040706][   T25] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  122.049686][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.058803][   T25] hub 7-1:1.0: bad descriptor, ignoring hub
[  122.060961][   T25] hub 7-1:1.0: probe with driver hub failed with error -5
[  122.066236][   T25] cdc_wdm 7-1:1.0: skipping garbage
[  122.067702][   T25] cdc_wdm 7-1:1.0: skipping garbage
[  122.070294][   T25] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  122.071875][   T25] cdc_wdm 7-1:1.0: Unknown control protocol
[  122.177862][ T5995] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.181431][ T5995] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  122.184758][ T5995] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  122.188314][ T5995] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.190939][ T5995] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  122.194543][ T5995] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.198667][ T5995] hub 10-1:1.0: bad descriptor, ignoring hub
[  122.200144][ T5995] hub 10-1:1.0: probe with driver hub failed with error -5
[  122.202089][ T5995] cdc_wdm 10-1:1.0: skipping garbage
[  122.203497][ T5995] cdc_wdm 10-1:1.0: skipping garbage
[  122.205316][ T5995] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device
[  122.206891][ T5995] cdc_wdm 10-1:1.0: Unknown control protocol
[  122.561396][   T39] kauditd_printk_skb: 75 callbacks suppressed
[  122.561407][   T39] audit: type=1326 audit(1734219358.712:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10472 comm="syz.6.1298" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0d5185d19 code=0x0
[  122.572975][ T7995] usb 10-1: USB disconnect, device number 7
[  122.824895][T10463] usb 7-1: reset low-speed USB device number 8 using dummy_hcd
[  122.860391][   T39] audit: type=1400 audit(1734219359.012:1956): avc:  denied  { ioctl } for  pid=10482 comm="syz.4.1300" path="socket:[37285]" dev="sockfs" ino=37285 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  123.126836][T10463] cdc_wdm 7-1:1.0: Error submitting int urb - -90
[  123.223439][T10447] cdc_wdm 7-1:1.0: Error submitting int urb - -90
[  123.240162][T10497] netlink: 'syz.4.1305': attribute type 1 has an invalid length.
[  123.242228][T10497] netlink: 15446 bytes leftover after parsing attributes in process `syz.4.1305'.
[  123.303656][   T39] audit: type=1400 audit(1734219359.462:1957): avc:  denied  { create } for  pid=10504 comm="syz.4.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  123.493088][ T5993] usb 7-1: USB disconnect, device number 8
[  123.511936][   T39] audit: type=1400 audit(1734219359.662:1958): avc:  denied  { watch } for  pid=10513 comm="syz.6.1310" path="pipe:[36264]" dev="pipefs" ino=36264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  123.532995][ T7995] usb 10-1: new low-speed USB device number 8 using dummy_hcd
[  123.589041][T10517] sctp: [Deprecated]: syz.6.1311 (pid 10517) Use of struct sctp_assoc_value in delayed_ack socket option.
[  123.589041][T10517] Use struct sctp_sack_info instead
[  123.650386][   T39] audit: type=1400 audit(1734219359.802:1959): avc:  denied  { bind } for  pid=10516 comm="syz.6.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  123.688481][ T7995] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  123.691196][ T7995] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  123.692197][T10520] netlink: 'syz.6.1312': attribute type 1 has an invalid length.
[  123.693633][ T7995] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  123.699070][ T7995] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  123.701461][ T7995] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.713078][ T7995] hub 10-1:1.0: bad descriptor, ignoring hub
[  123.714651][ T7995] hub 10-1:1.0: probe with driver hub failed with error -5
[  123.716640][ T7995] cdc_wdm 10-1:1.0: skipping garbage
[  123.718040][ T7995] cdc_wdm 10-1:1.0: skipping garbage
[  123.719426][ T7995] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22
[  123.731664][T10522] Bluetooth: MGMT ver 1.23
[  123.734530][T10522] xt_time: unknown flags 0xc
[  123.758070][   T39] audit: type=1400 audit(1734219359.912:1960): avc:  denied  { remount } for  pid=10523 comm="syz.6.1314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  123.811521][T10528] Cannot find set identified by id 1 to match
[  123.860286][   T39] audit: type=1400 audit(1734219360.012:1961): avc:  denied  { create } for  pid=10534 comm="syz.6.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  123.868307][   T39] audit: type=1400 audit(1734219360.022:1962): avc:  denied  { connect } for  pid=10534 comm="syz.6.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  123.874137][T10535] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1317'.
[  123.907600][T10447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.912061][   T39] audit: type=1400 audit(1734219360.062:1963): avc:  denied  { map } for  pid=10538 comm="syz.2.1319" path="socket:[39287]" dev="sockfs" ino=39287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  123.912134][T10447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.918314][   T39] audit: type=1400 audit(1734219360.062:1964): avc:  denied  { read accept } for  pid=10538 comm="syz.2.1319" path="socket:[39287]" dev="sockfs" ino=39287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  123.958888][T10548] netlink: 'syz.5.1320': attribute type 26 has an invalid length.
[  124.023051][ T5936] Bluetooth: hci2: command tx timeout
[  124.024053][   T25] usb 10-1: USB disconnect, device number 8
[  124.104816][T10557] __nla_validate_parse: 3 callbacks suppressed
[  124.104828][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1324'.
[  124.109397][T10557] bridge_slave_1: left allmulticast mode
[  124.110762][T10557] bridge_slave_1: left promiscuous mode
[  124.112944][T10557] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.117551][T10557] bridge_slave_0: left allmulticast mode
[  124.118994][T10557] bridge_slave_0: left promiscuous mode
[  124.120419][T10557] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.228063][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  124.261902][T10576] fuse: Unknown parameter 'fd
0x0000000000000003'
[  124.270290][    C2] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  124.302143][T10586] fuse: Bad value for 'fd'
[  124.382950][T10604] netlink: 512 bytes leftover after parsing attributes in process `syz.5.1337'.
[  124.413811][T10608] syz.5.1338: attempt to access beyond end of device
[  124.413811][T10608] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0
[  124.417492][T10608] syz.5.1338: attempt to access beyond end of device
[  124.417492][T10608] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0
[  124.421077][T10608] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  124.424858][T10608] syz.5.1338: attempt to access beyond end of device
[  124.424858][T10608] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0
[  124.428310][T10608] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  124.430769][T10608] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found
[  124.433681][T10608] UDF-fs: Scanning with blocksize 512 failed
[  124.437311][T10608] syz.5.1338: attempt to access beyond end of device
[  124.437311][T10608] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0
[  124.441428][T10608] syz.5.1338: attempt to access beyond end of device
[  124.441428][T10608] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0
[  124.445740][T10608] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  124.449012][T10608] syz.5.1338: attempt to access beyond end of device
[  124.449012][T10608] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0
[  124.453990][T10608] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  124.457198][T10608] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found
[  124.459774][T10608] UDF-fs: Scanning with blocksize 1024 failed
[  124.462234][T10608] syz.5.1338: attempt to access beyond end of device
[  124.462234][T10608] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0
[  124.466939][T10608] syz.5.1338: attempt to access beyond end of device
[  124.466939][T10608] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0
[  124.471293][T10608] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  124.474878][T10608] syz.5.1338: attempt to access beyond end of device
[  124.474878][T10608] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0
[  124.479299][T10608] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  124.482475][T10608] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found
[  124.485421][T10608] UDF-fs: Scanning with blocksize 2048 failed
[  124.487655][T10608] syz.5.1338: attempt to access beyond end of device
[  124.487655][T10608] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[  124.491622][T10608] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  124.496338][T10608] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  124.499341][T10608] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found
[  124.501266][T10608] UDF-fs: Scanning with blocksize 4096 failed
[  124.503630][T10608] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[  124.568567][T10616] netlink: 'syz.4.1340': attribute type 4 has an invalid length.
[  124.577114][T10616] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1340'.
[  124.586296][T10616] netlink: 'syz.4.1340': attribute type 2 has an invalid length.
[  124.588365][T10616] netlink: 'syz.4.1340': attribute type 9 has an invalid length.
[  124.590403][T10616] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1340'.
[  124.630397][T10625] netlink: 'syz.4.1342': attribute type 1 has an invalid length.
[  124.889436][T10635] netlink: 'syz.5.1346': attribute type 10 has an invalid length.
[  124.891517][T10635] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1346'.
[  124.895091][T10635] ipvlan1: entered promiscuous mode
[  124.896468][T10635] ipvlan1: entered allmulticast mode
[  124.897846][T10635] veth0_vlan: entered allmulticast mode
[  124.900468][T10635] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  124.910091][T10635] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1346'.
[  124.959565][T10637] SELinux:  policydb string  does not match my string SE Linux
[  124.961847][T10637] SELinux: failed to load policy
[  125.234403][T10642] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  125.564335][T10649] fuse: blksize only supported for fuseblk
[  125.697259][T10654] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1352'.
[  125.699734][T10655] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1352'.
[  125.729446][T10657] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  125.812529][T10657] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.827234][T10657] netlink: 'syz.4.1353': attribute type 4 has an invalid length.
[  126.102643][ T5936] Bluetooth: hci2: command tx timeout
[  126.167528][T10697] program syz.6.1362 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  126.372138][T10706] smc: net device wg0 applied user defined pnetid SYZ0
[  126.374189][T10706] netlink: 'syz.4.1365': attribute type 39 has an invalid length.
[  126.396361][T10706] smc: removing net device wg0 with user defined pnetid SYZ0
[  126.633946][T10716] netlink: 'syz.4.1368': attribute type 21 has an invalid length.
[  126.635951][T10716] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1368'.
[  126.639066][T10716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1368'.
[  126.643796][   T25] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  126.713899][T10720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.808972][   T25] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 213, changing to 11
[  126.813145][   T25] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42971, setting to 1024
[  126.816972][   T25] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  126.821357][   T25] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  126.823884][   T25] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.831740][   T25] usb 11-1: config 0 descriptor??
[  126.833756][T10713] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  127.242695][   T25] usbhid 11-1:0.0: can't add hid device: -71
[  127.244544][   T25] usbhid 11-1:0.0: probe with driver usbhid failed with error -71
[  127.247669][   T25] usb 11-1: USB disconnect, device number 2
[  127.326809][T10751] xt_ecn: cannot match TCP bits for non-tcp packets
[  127.378749][T10759] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  127.386565][T10747] block nbd5: shutting down sockets
[  127.428014][T10765] syz.5.1381[10765] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.428093][T10765] syz.5.1381[10765] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.435210][T10765] syz.5.1381[10765] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  127.772665][ T5936] Bluetooth: hci0: command tx timeout
[  128.056696][T10794] ufs: You didn't specify the type of your ufs filesystem
[  128.056696][T10794] 
[  128.056696][T10794] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  128.056696][T10794] 
[  128.056696][T10794] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  128.065730][T10794] ufs: ufstype=old is supported read-only
[  128.173067][ T5936] Bluetooth: hci2: command tx timeout
[  130.655907][T10814] binder: BC_ACQUIRE_RESULT not supported
[  130.658002][T10814] binder: 10813:10814 ioctl c0306201 20000600 returned -22
[  130.791253][T10820] netlink: 'syz.2.1397': attribute type 10 has an invalid length.
[  130.793536][T10820] __nla_validate_parse: 6 callbacks suppressed
[  130.793545][T10820] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1397'.
[  130.797720][T10820] team0: entered promiscuous mode
[  130.799052][T10820] team_slave_0: entered promiscuous mode
[  130.800629][T10820] team_slave_1: entered promiscuous mode
[  130.802169][T10820] vlan2: entered promiscuous mode
[  130.805963][T10820] vlan1: entered promiscuous mode
[  130.808540][T10820] bridge0: port 3(team0) entered blocking state
[  130.810494][T10820] bridge0: port 3(team0) entered disabled state
[  130.812228][T10820] team0: entered allmulticast mode
[  130.814155][T10820] team_slave_0: entered allmulticast mode
[  130.815671][T10820] team_slave_1: entered allmulticast mode
[  130.817288][T10820] vlan2: entered allmulticast mode
[  130.818740][T10820] vlan1: entered allmulticast mode
[  130.820167][T10820] veth0_vlan: entered allmulticast mode
[  130.825968][T10820] bridge0: port 3(team0) entered blocking state
[  130.827753][T10820] bridge0: port 3(team0) entered forwarding state
[  130.847658][T10822] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1398'.
[  130.852702][   T39] kauditd_printk_skb: 22 callbacks suppressed
[  130.852713][   T39] audit: type=1400 audit(1734219367.040:1987): avc:  denied  { read } for  pid=10821 comm="syz.5.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  130.852718][T10822] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1398'.
[  130.861868][T10822] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1398'.
[  130.864801][T10822] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1398'.
[  130.946711][T10834] input: syz1 as /devices/virtual/input/input8
[  130.952519][   T39] audit: type=1400 audit(1734219367.140:1988): avc:  denied  { read } for  pid=5333 comm="acpid" name="js0" dev="devtmpfs" ino=3047 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  130.965324][   T39] audit: type=1400 audit(1734219367.140:1989): avc:  denied  { open } for  pid=5333 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3047 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  130.971545][   T39] audit: type=1400 audit(1734219367.140:1990): avc:  denied  { ioctl } for  pid=5333 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3047 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  131.010461][   T39] audit: type=1400 audit(1734219367.200:1991): avc:  denied  { name_bind } for  pid=10837 comm="syz.2.1404" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  131.104628][T10842] tmpfs: Bad value for 'mpol'
[  131.106045][   T39] audit: type=1400 audit(1734219367.300:1992): avc:  denied  { mounton } for  pid=10837 comm="syz.2.1404" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  131.241595][T10849] mkiss: ax0: crc mode is auto.
[  131.251557][   T39] audit: type=1400 audit(1734219367.440:1993): avc:  denied  { getopt } for  pid=10848 comm="syz.5.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  131.309749][   T39] audit: type=1400 audit(1734219367.500:1994): avc:  denied  { read } for  pid=10853 comm="syz.4.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  131.317665][T10854] netlink: 528 bytes leftover after parsing attributes in process `syz.4.1409'.
[  131.528957][   T39] audit: type=1400 audit(1734219367.720:1995): avc:  denied  { write } for  pid=10869 comm="syz.4.1414" name="/" dev="9p" ino=40372907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  131.535719][   T39] audit: type=1400 audit(1734219367.720:1996): avc:  denied  { add_name } for  pid=10869 comm="syz.4.1414" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  131.620192][T10872] bridge3: entered promiscuous mode
[  131.621614][T10872] bridge3: entered allmulticast mode
[  131.633144][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1416'.
[  131.635642][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1416'.
[  132.131106][T10899] syz_tun: entered allmulticast mode
[  132.298667][T10906] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1424'.
[  132.298669][T10907] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1424'.
[  132.306202][T10906] bridge0: port 3(vlan2) entered blocking state
[  132.308593][T10906] bridge0: port 3(vlan2) entered disabled state
[  132.310967][T10906] vlan2: entered allmulticast mode
[  132.315293][T10906] vlan2: left allmulticast mode
[  132.323788][T10907] bridge0: port 3(vlan2) entered blocking state
[  132.325579][T10907] bridge0: port 3(vlan2) entered disabled state
[  132.327340][T10907] vlan2: entered allmulticast mode
[  132.329349][T10907] vlan2: left allmulticast mode
[  132.414864][ T1415] ieee802154 phy0 wpan0: encryption failed: -22
[  132.416609][ T1415] ieee802154 phy1 wpan1: encryption failed: -22
[  132.432118][T10911] 9pnet_fd: Insufficient options for proto=fd
[  132.681959][T10927] SELinux: syz.2.1432 (10927) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  132.689564][T10930] kernel read not supported for file /policy (pid: 10930 comm: syz.6.1433)
[  132.718474][T10927] xt_hashlimit: invalid interval
[  132.777780][T10942] sit0: mtu less than device minimum
[  132.805201][T10948] trusted_key: encrypted_key: insufficient parameters specified
[  132.966415][T10966] gretap1: entered allmulticast mode
[  132.966989][T10966] bridge0: port 4(gretap1) entered blocking state
[  132.967045][T10966] bridge0: port 4(gretap1) entered disabled state
[  132.967553][T10966] gretap1: entered promiscuous mode
[  132.967758][T10966] bridge0: port 4(gretap1) entered blocking state
[  132.967804][T10966] bridge0: port 4(gretap1) entered forwarding state
[  133.172717][T10982] ceph: No mds server is up or the cluster is laggy
[  133.185936][T10994] overlayfs: missing 'lowerdir'
[  133.241014][T10998] bridge1: entered promiscuous mode
[  133.242836][T10998] bridge1: entered allmulticast mode
[  133.273851][   T56] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  133.433014][   T56] usb 9-1: Using ep0 maxpacket: 8
[  133.435670][   T56] usb 9-1: config 0 has an invalid interface number: 52 but max is 0
[  133.437882][   T56] usb 9-1: config 0 has an invalid descriptor of length 247, skipping remainder of the config
[  133.440685][   T56] usb 9-1: config 0 has no interface number 0
[  133.442367][   T56] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 243, changing to 7
[  133.445648][   T56] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 18349, setting to 1024
[  133.448613][   T56] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  133.451998][   T56] usb 9-1: config 0 interface 52 has no altsetting 0
[  133.455036][   T56] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  133.457515][   T56] usb 9-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  133.459696][   T56] usb 9-1: Product: syz
[  133.460845][   T56] usb 9-1: SerialNumber: syz
[  133.463502][   T56] usb 9-1: config 0 descriptor??
[  133.921676][T10969] vlan0: entered allmulticast mode
[  133.923701][T10969] veth0_vlan: entered allmulticast mode
[  134.265433][T11022] netlink: 'syz.5.1461': attribute type 1 has an invalid length.
[  134.299449][T11022] Mount JFS Failure: -22
[  134.301053][T11022] jfs_mount failed w/return code = -22
[  134.358570][T11029] Bluetooth: hci0: Opcode 0x080f failed: -22
[  135.359109][T11063] syzkaller1: entered promiscuous mode
[  135.360875][T11063] syzkaller1: entered allmulticast mode
[  135.432687][   T56] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  135.582783][   T56] usb 10-1: Using ep0 maxpacket: 8
[  135.586129][   T56] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  135.598005][   T56] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  135.606080][   T56] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  135.609740][   T56] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  135.614752][   T56] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  135.617885][   T56] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.829872][T11060] netlink: 'syz.5.1474': attribute type 11 has an invalid length.
[  135.834750][   T56] usb 10-1: usb_control_msg returned -71
[  135.836247][   T56] usbtmc 10-1:16.0: can't read capabilities
[  135.841084][   T56] usb 10-1: USB disconnect, device number 9
[  135.881735][ T5995] usb 9-1: USB disconnect, device number 11
[  135.885029][T10969] vlan0: left allmulticast mode
[  135.887170][T10969] veth0_vlan: left allmulticast mode
[  135.912460][T11074] ubi0: attaching mtd0
[  135.917865][T11074] ubi0: scanning is finished
[  135.919205][T11074] ubi0: empty MTD device detected
[  136.012170][T11074] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  136.014872][T11074] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  136.017437][T11074] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  136.019816][T11074] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  136.022501][T11074] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  136.025140][T11074] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  136.027933][T11074] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3873777918
[  136.031386][T11074] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  136.035158][T11075] ubi0: background thread "ubi_bgt0d" started, PID 11075
[  136.071674][T11077] __nla_validate_parse: 10 callbacks suppressed
[  136.071685][T11077] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.1480'.
[  136.072881][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'.
[  136.074153][T11077] netlink: zone id is out of range
[  136.081206][T11077] netlink: zone id is out of range
[  136.232709][   T39] kauditd_printk_skb: 32 callbacks suppressed
[  136.232726][   T39] audit: type=1400 audit(1734219372.420:2029): avc:  denied  { ioctl } for  pid=11083 comm="syz.4.1482" path="socket:[41264]" dev="sockfs" ino=41264 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  136.234940][T11084] selinux_netlink_send: 55 callbacks suppressed
[  136.234951][T11084] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11084 comm=syz.4.1482
[  136.332668][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'.
[  136.413448][ T5936] Bluetooth: hci0: command tx timeout
[  136.586982][   T39] audit: type=1400 audit(1734219372.780:2030): avc:  denied  { append } for  pid=11107 comm="syz.6.1487" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  136.622680][   T25] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  136.626408][   T39] audit: type=1400 audit(1734219372.820:2031): avc:  denied  { mounton } for  pid=11112 comm="syz.4.1489" path="/proc/711/task" dev="proc" ino=42256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  136.772670][   T25] usb 10-1: Using ep0 maxpacket: 16
[  136.776018][   T25] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  136.779685][   T25] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  136.782056][   T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.786586][   T25] usb 10-1: config 0 descriptor??
[  136.792308][   T25] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input9
[  136.992083][   T39] audit: type=1400 audit(1734219373.180:2032): avc:  denied  { ioctl } for  pid=11104 comm="syz.5.1486" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  136.996984][ T5333] bcm5974 10-1:0.0: could not read from device
[  137.001198][ T5333] bcm5974 10-1:0.0: could not read from device
[  137.006073][ T5333] bcm5974 10-1:0.0: could not read from device
[  137.010324][   T25] usb 10-1: USB disconnect, device number 10
[  137.010443][ T5333] bcm5974 10-1:0.0: could not read from device
[  137.514679][   T39] audit: type=1400 audit(1734219373.710:2033): avc:  denied  { watch watch_reads } for  pid=11127 comm="syz.4.1494" path="/233/file0" dev="9p" ino=40372907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  137.528281][T11116] orangefs_mount: mount request failed with -4
[  137.578657][   T39] audit: type=1400 audit(1734219373.770:2034): avc:  denied  { create } for  pid=11131 comm="syz.5.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  137.579030][   T39] audit: type=1400 audit(1734219373.770:2035): avc:  denied  { ioctl } for  pid=11131 comm="syz.5.1497" path="socket:[42282]" dev="sockfs" ino=42282 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  137.732955][T11149] ptm ptm1: ldisc open failed (-12), clearing slot 1
[  137.762213][   T39] audit: type=1400 audit(1734219373.950:2036): avc:  denied  { getopt } for  pid=11152 comm="syz.5.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  137.782218][   T39] audit: type=1400 audit(1734219373.970:2037): avc:  denied  { read write } for  pid=11155 comm="syz.6.1504" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  137.792780][   T39] audit: type=1400 audit(1734219373.970:2038): avc:  denied  { ioctl open } for  pid=11155 comm="syz.6.1504" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  137.832695][   T25] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  137.909601][T11160] cgroup: No subsys list or none specified
[  137.911243][T11161] cgroup: No subsys list or none specified
[  137.984916][   T25] usb 7-1: config index 0 descriptor too short (expected 30244, got 36)
[  137.987123][   T25] usb 7-1: config 152 has too many interfaces: 160, using maximum allowed: 32
[  137.989527][   T25] usb 7-1: config 152 has an invalid descriptor of length 0, skipping remainder of the config
[  137.992195][   T25] usb 7-1: config 152 has 0 interfaces, different from the descriptor's value: 160
[  137.995364][   T25] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  137.997712][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.062894][   T56] usb 11-1: new high-speed USB device number 3 using dummy_hcd
[  138.202910][   T56] usb 11-1: device descriptor read/64, error -71
[  138.227349][   T25] usb 7-1: string descriptor 0 read error: -71
[  138.232310][   T25] usb 7-1: USB disconnect, device number 9
[  138.388633][T11167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1507'.
[  138.435192][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'.
[  138.452702][   T56] usb 11-1: new high-speed USB device number 4 using dummy_hcd
[  138.592771][   T56] usb 11-1: device descriptor read/64, error -71
[  138.702810][   T56] usb usb11-port1: attempt power cycle
[  138.842622][ T5993] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  138.985308][ T5993] usb 10-1: device descriptor read/64, error -71
[  139.050619][   T56] usb 11-1: new high-speed USB device number 5 using dummy_hcd
[  139.075627][   T56] usb 11-1: device descriptor read/8, error -71
[  139.232835][ T5993] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  139.312665][   T56] usb 11-1: new high-speed USB device number 6 using dummy_hcd
[  139.323969][T11175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1510'.
[  139.335152][   T56] usb 11-1: device descriptor read/8, error -71
[  139.349177][T11177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1511'.
[  139.376135][ T5993] usb 10-1: device descriptor read/64, error -71
[  139.463799][   T56] usb usb11-port1: unable to enumerate USB device
[  139.493050][ T5993] usb usb10-port1: attempt power cycle
[  139.541355][T11183] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1514'.
[  139.620383][T11187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.625201][T11187] random: crng reseeded on system resumption
[  139.842685][ T5993] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  139.872653][ T5993] usb 10-1: device descriptor read/8, error -71
[  140.132856][ T5993] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  140.153393][ T5993] usb 10-1: device descriptor read/8, error -71
[  140.263619][ T5993] usb usb10-port1: unable to enumerate USB device
[  140.770377][T11195] openvswitch: netlink: Message has 8 unknown bytes.
[  140.813049][T11200] program syz.6.1520 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  140.816650][T11199] bio_check_eod: 3 callbacks suppressed
[  140.816660][T11199] syz.4.1519: attempt to access beyond end of device
[  140.816660][T11199] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  140.822006][T11199] (syz.4.1519,11199,2):ocfs2_get_sector:1769 ERROR: status = -5
[  140.822888][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1520'.
[  140.824764][T11199] (syz.4.1519,11199,2):ocfs2_sb_probe:749 ERROR: status = -5
[  140.826454][T11200] openvswitch: netlink: Key type 8224 is out of range max 32
[  140.828407][T11199] (syz.4.1519,11199,2):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  140.833575][T11199] (syz.4.1519,11199,2):ocfs2_fill_super:1178 ERROR: status = -5
[  140.923045][T11205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1521'.
[  140.926805][T11206] netlink: 'syz.6.1522': attribute type 3 has an invalid length.
[  140.928851][T11206] netlink: 'syz.6.1522': attribute type 2 has an invalid length.
[  141.634441][T11221] smc: net device bond0 applied user defined pnetid SYZ0
[  141.720271][   T39] kauditd_printk_skb: 6 callbacks suppressed
[  141.720284][   T39] audit: type=1400 audit(1734219377.910:2045): avc:  denied  { read } for  pid=11218 comm="syz.2.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  141.776156][   T39] audit: type=1400 audit(1734219377.970:2046): avc:  denied  { getopt } for  pid=11218 comm="syz.2.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  141.808928][T11225] __nla_validate_parse: 3 callbacks suppressed
[  141.808938][T11225] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1528'.
[  142.259646][T11260] ubi0: detaching mtd0
[  142.266500][T11260] ubi0: mtd0 is detached
[  142.299199][   T39] audit: type=1400 audit(1734219378.490:2047): avc:  denied  { wake_alarm } for  pid=11261 comm="syz.6.1537" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  142.311279][   T39] audit: type=1400 audit(1734219378.500:2048): avc:  denied  { ioctl } for  pid=11261 comm="syz.6.1537" path="socket:[43732]" dev="sockfs" ino=43732 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  142.352540][T11265] Driver unsupported XDP return value 0 on prog  (id 327) dev N/A, expect packet loss!
[  143.032539][   T39] audit: type=1400 audit(1734219379.220:2049): avc:  denied  { map } for  pid=11280 comm="syz.5.1541" path="/dev/vsock" dev="devtmpfs" ino=1332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  143.327289][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1546'.
[  143.330282][T11295] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.339452][T11295] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.342355][T11295] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.345214][T11295] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.433333][   T56] usb 10-1: new low-speed USB device number 15 using dummy_hcd
[  143.584077][   T56] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.586905][   T56] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  143.589306][   T56] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  143.592188][   T56] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.594977][   T56] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  143.597452][   T56] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.607824][   T56] hub 10-1:1.0: bad descriptor, ignoring hub
[  143.609460][   T56] hub 10-1:1.0: probe with driver hub failed with error -5
[  143.611879][   T56] cdc_wdm 10-1:1.0: skipping garbage
[  143.613676][   T56] cdc_wdm 10-1:1.0: skipping garbage
[  143.616886][   T56] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  143.618487][   T56] cdc_wdm 10-1:1.0: Unknown control protocol
[  144.016784][   T39] audit: type=1804 audit(1734219380.210:2050): pid=11310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1549" name="/newroot/239/file0/file0" dev="9p" ino=40372909 res=1 errno=0
[  144.089917][T11315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1549'.
[  144.363073][T11289] usb 10-1: reset low-speed USB device number 15 using dummy_hcd
[  144.386358][   T39] audit: type=1400 audit(1734219380.580:2051): avc:  denied  { ioctl } for  pid=11318 comm="syz.6.1551" path="socket:[42553]" dev="sockfs" ino=42553 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  144.660426][T11289] cdc_wdm 10-1:1.0: Error submitting int urb - -90
[  144.963624][   T56] usb 10-1: USB disconnect, device number 15
[  145.139555][   T39] audit: type=1400 audit(1734219381.330:2052): avc:  denied  { write } for  pid=11336 comm="syz.4.1556" path="socket:[43917]" dev="sockfs" ino=43917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  145.145934][   T39] audit: type=1400 audit(1734219381.330:2053): avc:  denied  { write } for  pid=11336 comm="syz.4.1556" name="net" dev="proc" ino=41772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  145.151404][   T39] audit: type=1400 audit(1734219381.330:2054): avc:  denied  { add_name } for  pid=11336 comm="syz.4.1556" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  145.182232][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1557'.
[  145.185878][T11340] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1557'.
[  145.206858][T11342] binder: 11341:11342 ioctl c0306201 20000080 returned -11
[  145.521578][T11352] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  145.570449][T11361] netlink: 'syz.5.1563': attribute type 5 has an invalid length.
[  145.780612][T11371] binder_alloc: 11370: pid 11370 spamming oneway? 1 buffers allocated for a total size of 1792
[  145.951488][T11381] netlink: 'syz.5.1569': attribute type 10 has an invalid length.
[  145.958253][T11381] 8021q: adding VLAN 0 to HW filter on device team0
[  145.961572][T11381] bond0: (slave team0): Enslaving as an active interface with an up link
[  146.047558][T11400] xt_hashlimit: overflow, try lower: 0/0
[  146.051452][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1574'.
[  146.054325][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1574'.
[  146.091601][T11402] netlink: 'syz.2.1577': attribute type 5 has an invalid length.
[  146.098088][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1578'.
[  146.166657][T11412] trusted_key: encrypted_key: keyword 'new0default' not recognized
[  146.232971][T11427] syz.6.1584: attempt to access beyond end of device
[  146.232971][T11427] loop6: rw=0, sector=6, nr_sectors = 2 limit=0
[  146.241180][T11427] ADFS-fs (loop6): error: unable to read block 3, try 0
[  146.262505][T11422] 8021q: adding VLAN 0 to HW filter on device bond3
[  146.265668][T11422] bond0: (slave bond3): Enslaving as an active interface with an up link
[  146.358875][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1588'.
[  146.387892][T11446] cgroup: Need name or subsystem set
[  146.485715][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1592'.
[  147.235932][T11458] IPVS: Error joining to the multicast group
[  147.311111][T11476] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1596'.
[  147.336134][   T39] kauditd_printk_skb: 75 callbacks suppressed
[  147.336144][   T39] audit: type=1400 audit(1734219383.530:2130): avc:  denied  { ioctl } for  pid=11477 comm="syz.2.1599" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  147.353743][T11480] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1600'.
[  147.499846][T11505] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1605'.
[  147.502245][T11505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1605'.
[  147.505735][T11505] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1605'.
[  147.507922][   T39] audit: type=1400 audit(1734219383.700:2131): avc:  denied  { listen } for  pid=11502 comm="syz.2.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  147.508082][T11505] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1605'.
[  147.513434][   T39] audit: type=1400 audit(1734219383.700:2132): avc:  denied  { accept } for  pid=11502 comm="syz.2.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  147.524056][ T5993] usb 10-1: new low-speed USB device number 16 using dummy_hcd
[  147.527821][   T39] audit: type=1400 audit(1734219383.720:2133): avc:  denied  { append } for  pid=11503 comm="syz.4.1605" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  147.549066][   T39] audit: type=1400 audit(1734219383.740:2134): avc:  denied  { bind } for  pid=11506 comm="syz.2.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  147.560415][   T39] audit: type=1400 audit(1734219383.740:2135): avc:  denied  { listen } for  pid=11506 comm="syz.2.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  147.566135][   T39] audit: type=1400 audit(1734219383.740:2136): avc:  denied  { accept } for  pid=11506 comm="syz.2.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  147.685078][ T5993] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.687839][ T5993] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  147.690310][ T5993] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  147.694490][ T5993] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.697280][ T5993] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  147.699708][ T5993] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.704658][ T5993] hub 10-1:1.0: bad descriptor, ignoring hub
[  147.706336][ T5993] hub 10-1:1.0: probe with driver hub failed with error -5
[  147.708501][ T5993] cdc_wdm 10-1:1.0: skipping garbage
[  147.709988][ T5993] cdc_wdm 10-1:1.0: skipping garbage
[  147.712031][ T5993] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  147.713965][ T5993] cdc_wdm 10-1:1.0: Unknown control protocol
[  148.118176][T11534] block nbd6: not configured, cannot reconfigure
[  148.184828][T11535] binder: 11533:11535 unknown command 1
[  148.186852][T11535] binder: 11533:11535 ioctl c0306201 20000500 returned -22
[  148.469795][T11473] usb 10-1: reset low-speed USB device number 16 using dummy_hcd
[  148.587246][   T39] audit: type=1400 audit(1734219384.780:2137): avc:  denied  { nlmsg_read } for  pid=11538 comm="syz.2.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  148.737613][T11543] program syz.4.1618 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  148.783581][T11473] usb 10-1: device firmware changed
[  148.791573][T11473] cdc_wdm 10-1:1.0: Error autopm - -16
[  148.791677][ T7995] usb 10-1: USB disconnect, device number 16
[  148.809652][T11547] xt_time: unknown flags 0xc
[  148.811288][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'.
[  148.923653][ T7995] usb 10-1: new low-speed USB device number 17 using dummy_hcd
[  149.073998][ T7995] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  149.076794][ T7995] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  149.079146][ T7995] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  149.082814][ T7995] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  149.085263][ T7995] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.085733][   T39] audit: type=1400 audit(1734219385.280:2138): avc:  denied  { connect } for  pid=11558 comm="syz.4.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  149.091022][ T7995] hub 10-1:1.0: bad descriptor, ignoring hub
[  149.094800][ T7995] hub 10-1:1.0: probe with driver hub failed with error -5
[  149.096890][ T7995] cdc_wdm 10-1:1.0: skipping garbage
[  149.098484][ T7995] cdc_wdm 10-1:1.0: skipping garbage
[  149.099897][ T7995] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22
[  149.135314][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'.
[  149.232695][    T8] usb 11-1: new high-speed USB device number 7 using dummy_hcd
[  149.240439][T11561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.269176][   T39] audit: type=1400 audit(1734219385.460:2139): avc:  denied  { mount } for  pid=11564 comm="syz.4.1626" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  149.272863][T11565] devtmpfs: Cannot change global quota limit on remount
[  149.367071][T11572] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.1627'.
[  149.369596][T11572] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  149.382678][    T8] usb 11-1: Using ep0 maxpacket: 8
[  149.393831][    T8] usb 11-1: config index 0 descriptor too short (expected 301, got 45)
[  149.396791][    T8] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  149.400195][    T8] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  149.402873][ T7995] usb 10-1: USB disconnect, device number 17
[  149.404090][    T8] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  149.409066][    T8] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  149.413551][    T8] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  149.416799][    T8] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.623918][T11594] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  149.630368][    T8] usb 11-1: usb_control_msg returned -32
[  149.631879][    T8] usbtmc 11-1:16.0: can't read capabilities
[  149.661259][T11596] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1633'.
[  149.729887][T11603] program syz.4.1635 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  149.733582][T11603] 9pnet_fd: Insufficient options for proto=fd
[  149.946336][T11625] 8021q: adding VLAN 0 to HW filter on device bond1
[  149.948790][T11625] bond0: (slave bond1): Enslaving as an active interface with a down link
[  150.211034][T11644] smc: net device bond0 erased user defined pnetid SYZ0
[  150.231757][T11648] xt_hashlimit: size too large, truncated to 1048576
[  150.288121][T11655] overlayfs: failed to resolve './file0': -2
[  150.288293][T11656] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  150.407840][T11669] syzkaller0: entered promiscuous mode
[  150.409393][T11669] syzkaller0: entered allmulticast mode
[  151.146442][T11675] openvswitch: netlink: Flow actions attr not present in new flow.
[  151.917383][T11687] =======================================================
[  151.917383][T11687] WARNING: The mand mount option has been deprecated and
[  151.917383][T11687]          and is ignored by this kernel. Remove the mand
[  151.917383][T11687]          option from the mount to silence this warning.
[  151.917383][T11687] =======================================================
[  151.989510][T11689] netlink: 'syz.5.1660': attribute type 3 has an invalid length.
[  151.992436][T11664] usbtmc 11-1:16.0: stb usb_control_msg returned -71
[  151.994503][   T56] usb 11-1: USB disconnect, device number 7
[  152.318364][T11710] cgroup2: Unknown parameter 'memoryglocalevents'
[  152.374223][T11712] netlink: 'syz.4.1668': attribute type 10 has an invalid length.
[  152.380527][T11712] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  152.440197][   T39] kauditd_printk_skb: 75 callbacks suppressed
[  152.440208][   T39] audit: type=1400 audit(1734219388.630:2215): avc:  denied  { lock } for  pid=11718 comm="syz.4.1671" path="socket:[44415]" dev="sockfs" ino=44415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  152.531348][   T39] audit: type=1400 audit(1734219388.720:2216): avc:  denied  { map } for  pid=11728 comm="syz.4.1674" path="socket:[44422]" dev="sockfs" ino=44422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  152.539211][   T39] audit: type=1400 audit(1734219388.720:2217): avc:  denied  { read } for  pid=11728 comm="syz.4.1674" path="socket:[44422]" dev="sockfs" ino=44422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  152.555796][   T39] audit: type=1400 audit(1734219388.750:2218): avc:  denied  { setopt } for  pid=11731 comm="syz.4.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  152.581204][   T39] audit: type=1326 audit(1734219388.770:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.5.1676" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f918dd85d19 code=0x0
[  152.669014][T11737] overlayfs: overlapping lowerdir path
[  152.674114][T11737] __nla_validate_parse: 66 callbacks suppressed
[  152.674128][T11737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1677'.
[  152.859686][   T39] audit: type=1326 audit(1734219389.050:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.5.1681" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918dd85d19 code=0x7ffc0000
[  152.880285][   T39] audit: type=1326 audit(1734219389.050:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.5.1681" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918dd85d19 code=0x7ffc0000
[  152.892697][   T39] audit: type=1326 audit(1734219389.050:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.5.1681" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f918dd85d19 code=0x7ffc0000
[  152.900082][   T39] audit: type=1326 audit(1734219389.050:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.5.1681" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918dd85d19 code=0x7ffc0000
[  152.910198][   T39] audit: type=1326 audit(1734219389.050:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.5.1681" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918dd85d19 code=0x7ffc0000
[  153.089638][T11766] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.1686'.
[  153.092250][T11766] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048)
[  153.098158][T11766] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  153.116849][T11766] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1686'.
[  153.132939][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'.
[  153.135777][T11766] tipc: MTU too low for tipc bearer
[  153.210269][T11781] overlayfs: overlapping lowerdir path
[  153.219684][T11776] sctp: [Deprecated]: syz.5.1690 (pid 11776) Use of int in max_burst socket option.
[  153.219684][T11776] Use struct sctp_assoc_value instead
[  153.345403][T11802] No control pipe specified
[  153.387181][T11802] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  153.389722][T11802] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  153.455713][T11805] hsr0�b�: renamed from team0 (while UP)
[  153.458636][T11805] hsr0�b�: entered promiscuous mode
[  153.460122][T11805] team_slave_0: entered promiscuous mode
[  153.461609][T11805] team_slave_1: entered promiscuous mode
[  153.465787][T11805] A link change request failed with some changes committed already. Interface hsr0�b� may have been left with an inconsistent configuration, please check.
[  153.545948][T11807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1699'.
[  153.617082][T11814] ebt_among: src integrity fail: 100
[  153.712780][T11828] netlink: 'syz.5.1704': attribute type 10 has an invalid length.
[  153.714826][T11828] netlink: 'syz.5.1704': attribute type 19 has an invalid length.
[  153.716716][T11828] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1704'.
[  154.040796][   T56] IPVS: starting estimator thread 0...
[  154.043015][T11832] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  154.142750][T11833] IPVS: using max 18 ests per chain, 43200 per kthread
[  154.211729][T11836] No source specified
[  154.213787][T11836] netlink: 'syz.4.1705': attribute type 10 has an invalid length.
[  154.220965][T11836] hsr0�b�: Device hsr_slave_0 failed to register rx_handler
[  154.263170][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1706'.
[  154.303873][T11845] vivid-000: =================  START STATUS  =================
[  154.305907][T11845] vivid-000: Test Pattern: 100% White
[  154.307324][T11845] vivid-000: Fill Percentage of Frame: 0
[  154.308796][T11845] vivid-000: Horizontal Movement: No Movement
[  154.310419][T11845] vivid-000: Vertical Movement: No Movement
[  154.312006][T11845] vivid-000: OSD Text Mode: All
[  154.313716][T11845] vivid-000: Show Border: false
[  154.315055][T11845] vivid-000: Show Square: true
[  154.316327][T11845] vivid-000: Sensor Flipped Horizontally: false
[  154.317994][T11845] vivid-000: Sensor Flipped Vertically: false
[  154.319600][T11845] vivid-000: Insert SAV Code in Image: false
[  154.321220][T11845] vivid-000: Insert EAV Code in Image: false
[  154.324407][T11845] vivid-000: Insert Video Guard Band: false
[  154.327110][T11845] vivid-000: Reduced Framerate: false
[  154.328592][T11845] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  154.330546][T11845] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  154.331607][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1709'.
[  154.333321][T11845] vivid-000: Enable Capture Cropping: true
[  154.337332][T11845] vivid-000: Enable Capture Composing: true
[  154.338880][T11845] vivid-000: Enable Capture Scaler: true
[  154.340356][T11845] vivid-000: Timestamp Source: End of Frame
[  154.341939][T11845] vivid-000: Colorspace: sRGB
[  154.343768][T11845] vivid-000: Transfer Function: Default
[  154.345255][T11845] vivid-000: Y'CbCr Encoding: Default
[  154.346655][T11845] vivid-000: HSV Encoding: Hue 0-179
[  154.348051][T11845] vivid-000: Quantization: Default
[  154.349416][T11845] vivid-000: Apply Alpha To Red Only: false
[  154.350804][T11845] vivid-000: Standard Aspect Ratio: 4x3
[  154.352131][T11845] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  154.354637][T11845] vivid-000: DV Timings: 640x480p59 inactive
[  154.356235][T11845] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  154.358167][T11845] vivid-000: Maximum EDID Blocks: 2
[  154.359395][T11845] vivid-000: Limited RGB Range (16-235): false
[  154.362038][T11845] vivid-000: Rx RGB Quantization Range: Automatic
[  154.366893][T11845] vivid-000: Power Present: 0x00000001
[  154.368822][T11845] tpg source WxH: 320x180 (Y'CbCr)
[  154.371022][T11845] tpg field: 1
[  154.372261][T11845] tpg crop: 320x180@0x0
[  154.373930][T11845] tpg compose: 320x180@0x0
[  154.375539][T11845] tpg colorspace: 8
[  154.376888][T11845] tpg transfer function: 0/0
[  154.378602][T11845] tpg Y'CbCr encoding: 0/0
[  154.380169][T11845] tpg quantization: 0/0
[  154.381641][T11845] tpg RGB range: 0/2
[  154.383138][T11845] vivid-000: ==================  END STATUS  ==================
[  154.490994][T11874] pimreg4: entered allmulticast mode
[  154.654885][T11882] netlink: 'syz.2.1719': attribute type 13 has an invalid length.
[  154.658846][T11882] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  154.932756][  T831] usb 11-1: new high-speed USB device number 8 using dummy_hcd
[  155.093975][  T831] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.096853][  T831] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.099461][  T831] usb 11-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  155.101981][  T831] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.105029][  T831] usb 11-1: config 0 descriptor??
[  155.293284][T11882] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  155.295648][T11882] gretap2: entered promiscuous mode
[  155.297214][T11882] gretap2: entered allmulticast mode
[  155.328131][T11896] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  155.378307][T11900] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1724'.
[  155.380785][T11900] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1724'.
[  155.383798][T11900] netlink: 'syz.5.1724': attribute type 6 has an invalid length.
[  155.386047][T11900] netlink: 'syz.5.1724': attribute type 5 has an invalid length.
[  155.518233][  T831] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  155.520161][  T831] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  155.522960][  T831] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0D8C:0022.0005/input/input10
[  155.531415][  T831] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0
[  155.726094][T11889] tipc: Started in network mode
[  155.727646][T11889] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  155.731366][T11889] tipc: New replicast peer: b02d:0000:0000:0000:0000:0000:0000:0000
[  155.734997][T11889] tipc: Enabled bearer <udp:syz0>, priority 10
[  155.766709][ T7995] usb 11-1: USB disconnect, device number 8
[  155.997660][T11912] sctp: [Deprecated]: syz.5.1727 (pid 11912) Use of int in maxseg socket option.
[  155.997660][T11912] Use struct sctp_assoc_value instead
[  156.019621][T11912] ext4: Unknown parameter 'grpquotZ'
[  156.334470][T11934] input: syz0 as /devices/virtual/input/input11
[  156.477019][T11938] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  156.503052][ T5944] Bluetooth: hci2: command tx timeout
[  156.574034][T11943] sctp: [Deprecated]: syz.6.1736 (pid 11943) Use of int in maxseg socket option.
[  156.574034][T11943] Use struct sctp_assoc_value instead
[  156.826318][ T5944] Bluetooth: hci1: unexpected event for opcode 0x080b
[  156.864851][ T5993] tipc: Node number set to 1
[  156.894160][T11967] binder: 11966:11967 ioctl c018620c 20000100 returned -22
[  156.898094][T11967] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  156.900282][T11967] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  157.369251][T11988] usb usb9: usbfs: interface 0 claimed by hub while 'syz.6.1748' sets config #5
[  157.457911][   T39] kauditd_printk_skb: 36 callbacks suppressed
[  157.457923][   T39] audit: type=1400 audit(1734219393.650:2261): avc:  denied  { connect } for  pid=11997 comm="syz.6.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  157.465340][   T39] audit: type=1400 audit(1734219393.650:2262): avc:  denied  { write } for  pid=11997 comm="syz.6.1750" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  157.582188][   T39] audit: type=1400 audit(1734219393.770:2263): avc:  denied  { read } for  pid=12000 comm="syz.6.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  157.909535][   T39] audit: type=1400 audit(1734219394.100:2264): avc:  denied  { setopt } for  pid=12013 comm="syz.6.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  157.918817][   T39] audit: type=1400 audit(1734219394.100:2265): avc:  denied  { connect } for  pid=12013 comm="syz.6.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  158.152726][ T5977] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  158.282735][ T5977] usb 10-1: device descriptor read/64, error -71
[  158.544989][ T5977] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  158.572720][  T831] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  158.572830][ T5944] Bluetooth: hci4: command 0x0c1a tx timeout
[  158.574711][  T831] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  158.672676][ T5977] usb 10-1: device descriptor read/64, error -71
[  158.782981][ T5977] usb usb10-port1: attempt power cycle
[  159.132707][ T5977] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  159.153290][ T5977] usb 10-1: device descriptor read/8, error -71
[  159.412688][ T5977] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  159.433488][ T5977] usb 10-1: device descriptor read/8, error -71
[  159.463575][T12050] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  159.463575][T12050] The task syz.2.1760 (12050) triggered the difference, watch for misbehavior.
[  159.542929][ T5977] usb usb10-port1: unable to enumerate USB device
[  160.075126][    T8] usb 11-1: new high-speed USB device number 9 using dummy_hcd
[  160.222665][    T8] usb 11-1: Using ep0 maxpacket: 16
[  160.225252][    T8] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.227971][    T8] usb 11-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  160.230319][    T8] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.233653][    T8] usb 11-1: config 0 descriptor??
[  160.237446][    T8] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input12
[  160.287023][T12054] __nla_validate_parse: 3 callbacks suppressed
[  160.287038][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1762'.
[  160.292305][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1762'.
[  160.295922][T12054] netlink: 'syz.2.1762': attribute type 20 has an invalid length.
[  160.452908][ T5333] bcm5974 11-1:0.0: could not read from device
[  160.457524][ T5333] bcm5974 11-1:0.0: could not read from device
[  160.461161][    T8] usb 11-1: USB disconnect, device number 9
[  160.461614][ T5333] bcm5974 11-1:0.0: could not read from device
[  160.466072][ T5333] bcm5974 11-1:0.0: could not read from device
[  160.490590][T12063] macvlan1: entered promiscuous mode
[  160.507140][T12063] macvlan1 (unregistering): left promiscuous mode
[  160.652783][  T831] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  160.654721][ T5944] Bluetooth: hci1: command 0x0405 tx timeout
[  160.655016][  T831] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  160.950720][T12081] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  160.953404][T12081] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  160.955697][T12081] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  160.957947][T12081] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  160.960272][T12081] vxlan0: entered promiscuous mode
[  160.961618][T12081] vxlan0: entered allmulticast mode
[  160.966524][T12081] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.968992][T12081] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.971382][T12081] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.973789][T12081] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.245049][T12092] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.248833][T12093] kvm: kvm [12086]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x1560000cd56
[  161.259672][T12093] kvm: kvm [12086]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x1de0000ae3c
[  161.418787][   T39] audit: type=1400 audit(1734219397.610:2266): avc:  denied  { write } for  pid=12105 comm="syz.6.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  161.451162][T12108] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  161.456962][T12108] qnx6: wrong signature (magic) in superblock #1.
[  161.459164][T12108] qnx6: unable to read the first superblock
[  161.468471][T12110] netlink: 'syz.2.1781': attribute type 9 has an invalid length.
[  161.470760][T12110] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1781'.
[  161.517187][   T39] audit: type=1400 audit(1734219397.710:2267): avc:  denied  { append } for  pid=12114 comm="syz.2.1782" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  161.562281][   T39] audit: type=1400 audit(1734219397.750:2268): avc:  denied  { mount } for  pid=12124 comm="syz.6.1784" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  161.568886][   T39] audit: type=1400 audit(1734219397.760:2269): avc:  denied  { remount } for  pid=12124 comm="syz.6.1784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  161.657363][T12129] wg2: entered promiscuous mode
[  161.775494][T12137] 9pnet: Could not find request transport: xen
[  161.779405][T12137] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  162.001057][T12157] xt_ipcomp: unknown flags 12
[  162.007724][T12157] vivid-007: =================  START STATUS  =================
[  162.009904][T12157] vivid-007: Enable Output Cropping: true
[  162.011934][T12157] vivid-007: Enable Output Composing: true
[  162.015490][T12157] vivid-007: Enable Output Scaler: true
[  162.017075][T12157] vivid-007: Tx RGB Quantization Range: Automatic
[  162.018891][T12157] vivid-007: Transmit Mode: HDMI
[  162.020249][T12157] vivid-007: Hotplug Present: 0x00000000
[  162.021861][T12157] vivid-007: RxSense Present: 0x00000000
[  162.024027][T12157] vivid-007: EDID Present: 0x00000000
[  162.025664][T12157] vivid-007: ==================  END STATUS  ==================
[  162.100351][T12171] netlink: 'syz.6.1797': attribute type 3 has an invalid length.
[  162.104365][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1797'.
[  162.121655][T12175] binfmt_misc: register: failed to install interpreter file ./file0
[  162.142390][   T39] audit: type=1400 audit(1734219398.330:2270): avc:  denied  { setopt } for  pid=12168 comm="syz.2.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  162.197873][T12191] macsec1: entered promiscuous mode
[  162.199859][T12191] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[  162.202433][T12191] macsec1: entered allmulticast mode
[  162.205989][T12191] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[  162.253297][T12202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12202 comm=syz.5.1803
[  162.352164][T12213] ebt_among: src integrity fail: 100
[  162.400599][T12216] Process accounting resumed
[  162.536654][T12216] Process accounting resumed
[  162.566161][   T39] audit: type=1400 audit(1734219398.760:2271): avc:  denied  { mount } for  pid=12218 comm="syz.5.1810" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  162.599628][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.610551][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.614204][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.617159][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.620129][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.625650][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.628573][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.631512][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.634866][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.637654][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.640596][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.646148][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.650613][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.653551][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.656545][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.659649][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.662643][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.665526][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.668460][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.671416][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.674629][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.676827][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.679038][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.681254][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.684137][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.687787][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.690046][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.692162][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.694347][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.696555][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.698674][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.701370][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.704048][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.706915][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.709829][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.712838][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.715713][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.718623][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.720820][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.723038][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.725204][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.727377][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.729513][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.731599][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.732731][  T831] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  162.735432][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.736090][  T831] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  162.738397][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout
[  162.741374][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.744382][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.746989][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.751289][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.753719][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.755953][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.758115][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.760292][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.763080][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.767369][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.769597][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.770120][  T831] ------------[ cut here ]------------
[  162.771758][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.774044][  T831] refcount_t: underflow; use-after-free.
[  162.774408][  T831] WARNING: CPU: 2 PID: 831 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210
[  162.776768][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.778438][  T831] Modules linked in:
[  162.778466][  T831] CPU: 2 UID: 0 PID: 831 Comm: kworker/2:2 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0
[  162.781123][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.785096][  T831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  162.785115][  T831] Workqueue: events rfkill_op_handler
[  162.785159][  T831] RIP: 0010:refcount_warn_saturate+0x14a/0x210
[  162.785192][  T831] Code: ff 89 de e8 98 25 fa fc 84 db 0f 85 66 ff ff ff e8 ab 23 fa fc c6 05 46 ea a7 0b 01 90 48 c7 c7 e0 80 d1 8b e8 f7 6e ba fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 88 23 fa fc 0f b6 1d 21 ea a7 0b 31
[  162.785212][  T831] RSP: 0018:ffffc900055c7828 EFLAGS: 00010286
[  162.785231][  T831] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff815a5079
[  162.785245][  T831] RDX: ffff8880255ba440 RSI: ffffffff815a5086 RDI: 0000000000000001
[  162.785260][  T831] RBP: ffff888037e81878 R08: 0000000000000001 R09: 0000000000000000
[  162.785274][  T831] R10: 0000000000000000 R11: 0000000000000007 R12: ffff88804dd05800
[  162.785288][  T831] R13: ffff888037e81878 R14: ffffffff85c49f30 R15: dffffc0000000000
[  162.785302][  T831] FS:  0000000000000000(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000
[  162.785334][  T831] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  162.785351][  T831] CR2: 00007fb0d5f8cf98 CR3: 000000004517c000 CR4: 0000000000352ef0
[  162.785365][  T831] DR0: fffffffffffffffb DR1: 0000000000000000 DR2: 0000000000000002
[  162.785378][  T831] DR3: 0000000000000800 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  162.785393][  T831] Call Trace:
[  162.785401][  T831]  <TASK>
[  162.785411][  T831]  ? __warn+0xea/0x3c0
[  162.785433][  T831]  ? refcount_warn_saturate+0x14a/0x210
[  162.785463][  T831]  ? report_bug+0x3c0/0x580
[  162.785492][  T831]  ? handle_bug+0x54/0xa0
[  162.785517][  T831]  ? exc_invalid_op+0x17/0x50
[  162.785543][  T831]  ? asm_exc_invalid_op+0x1a/0x20
[  162.785568][  T831]  ? __pfx_klist_children_put+0x10/0x10
[  162.785605][  T831]  ? __warn_printk+0x199/0x350
[  162.785634][  T831]  ? __warn_printk+0x1a6/0x350
[  162.785662][  T831]  ? refcount_warn_saturate+0x14a/0x210
[  162.785691][  T831]  ? refcount_warn_saturate+0x149/0x210
[  162.785720][  T831]  klist_put+0x11b/0x1b0
[  162.785752][  T831]  klist_remove+0x140/0x2b0
[  162.785777][  T831]  ? __pfx_klist_remove+0x10/0x10
[  162.785811][  T831]  ? get_device_parent+0x1ed/0x4e0
[  162.785841][  T831]  device_move+0x12d/0x10b0
[  162.790333][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.790886][  T831]  hci_conn_del_sysfs+0x81/0x170
[  162.790920][  T831]  hci_conn_del+0x54e/0xdb0
[  162.793305][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.796830][  T831]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  162.796859][  T831]  hci_conn_hash_flush+0x4bf/0x790
[  162.798503][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.800580][  T831]  ? __pfx_hci_conn_hash_flush+0x10/0x10
[  162.806853][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.808107][  T831]  ? 0xffffffff81000000
[  162.808129][  T831]  ? hci_inquiry_cache_flush+0x176/0x2f0
[  162.810439][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.813371][  T831]  hci_dev_close_sync+0x603/0x11a0
[  162.815187][   T39] audit: type=1400 audit(1734219399.010:2272): avc:  denied  { ioctl } for  pid=12231 comm="syz.6.1814" path="socket:[48609]" dev="sockfs" ino=48609 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  162.816704][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.818191][  T831]  ? __pfx_bt_err+0x10/0x10
[  162.818222][  T831]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  162.870779][T12235] tmpfs: Unknown parameter 'si\e'
[  162.871367][  T831]  ? __pfx_lock_release+0x10/0x10
[  162.871407][  T831]  hci_dev_do_close+0x2e/0x90
[  162.913074][  T831]  hci_rfkill_set_block+0x225/0x360
[  162.914978][  T831]  ? lockdep_hardirqs_on+0x7c/0x110
[  162.916874][  T831]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  162.918883][  T831]  rfkill_set_block+0x203/0x560
[  162.920621][  T831]  rfkill_epo+0x8e/0x1d0
[  162.922169][  T831]  rfkill_op_handler+0x262/0x280
[  162.924000][  T831]  process_one_work+0x9c5/0x1ba0
[  162.925773][  T831]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  162.927720][  T831]  ? __pfx_process_one_work+0x10/0x10
[  162.929555][  T831]  ? rcu_is_watching+0x12/0xc0
[  162.931169][  T831]  ? assign_work+0x1a0/0x250
[  162.932876][  T831]  worker_thread+0x6c8/0xf00
[  162.934574][  T831]  ? __kthread_parkme+0x148/0x220
[  162.936269][  T831]  ? __pfx_worker_thread+0x10/0x10
[  162.938012][  T831]  kthread+0x2c1/0x3a0
[  162.939406][  T831]  ? _raw_spin_unlock_irq+0x23/0x50
[  162.941228][  T831]  ? __pfx_kthread+0x10/0x10
[  162.942948][  T831]  ret_from_fork+0x45/0x80
[  162.944491][  T831]  ? __pfx_kthread+0x10/0x10
[  162.946078][  T831]  ret_from_fork_asm+0x1a/0x30
[  162.947795][  T831]  </TASK>
[  162.948947][  T831] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  162.951542][  T831] CPU: 2 UID: 0 PID: 831 Comm: kworker/2:2 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0
[  162.955297][  T831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  162.959116][  T831] Workqueue: events rfkill_op_handler
[  162.961075][  T831] Call Trace:
[  162.962302][  T831]  <TASK>
[  162.963369][  T831]  dump_stack_lvl+0x3d/0x1f0
[  162.965089][  T831]  panic+0x71d/0x800
[  162.966528][  T831]  ? __pfx_panic+0x10/0x10
[  162.968161][  T831]  ? show_trace_log_lvl+0x29d/0x3d0
[  162.970007][  T831]  ? check_panic_on_warn+0x1f/0xb0
[  162.971761][  T831]  ? refcount_warn_saturate+0x14a/0x210
[  162.973760][  T831]  check_panic_on_warn+0xab/0xb0
[  162.975596][  T831]  __warn+0xf6/0x3c0
[  162.977058][  T831]  ? refcount_warn_saturate+0x14a/0x210
[  162.978997][  T831]  report_bug+0x3c0/0x580
[  162.980574][  T831]  handle_bug+0x54/0xa0
[  162.982063][  T831]  exc_invalid_op+0x17/0x50
[  162.983627][  T831]  asm_exc_invalid_op+0x1a/0x20
[  162.985288][  T831] RIP: 0010:refcount_warn_saturate+0x14a/0x210
[  162.987452][  T831] Code: ff 89 de e8 98 25 fa fc 84 db 0f 85 66 ff ff ff e8 ab 23 fa fc c6 05 46 ea a7 0b 01 90 48 c7 c7 e0 80 d1 8b e8 f7 6e ba fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 88 23 fa fc 0f b6 1d 21 ea a7 0b 31
[  162.994061][  T831] RSP: 0018:ffffc900055c7828 EFLAGS: 00010286
[  162.996242][  T831] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff815a5079
[  162.999072][  T831] RDX: ffff8880255ba440 RSI: ffffffff815a5086 RDI: 0000000000000001
[  163.001936][  T831] RBP: ffff888037e81878 R08: 0000000000000001 R09: 0000000000000000
[  163.004765][  T831] R10: 0000000000000000 R11: 0000000000000007 R12: ffff88804dd05800
[  163.007575][  T831] R13: ffff888037e81878 R14: ffffffff85c49f30 R15: dffffc0000000000
[  163.010414][  T831]  ? __pfx_klist_children_put+0x10/0x10
[  163.012426][  T831]  ? __warn_printk+0x199/0x350
[  163.014183][  T831]  ? __warn_printk+0x1a6/0x350
[  163.015977][  T831]  ? refcount_warn_saturate+0x149/0x210
[  163.017998][  T831]  klist_put+0x11b/0x1b0
[  163.019553][  T831]  klist_remove+0x140/0x2b0
[  163.021239][  T831]  ? __pfx_klist_remove+0x10/0x10
[  163.023054][  T831]  ? get_device_parent+0x1ed/0x4e0
[  163.024926][  T831]  device_move+0x12d/0x10b0
[  163.026571][  T831]  hci_conn_del_sysfs+0x81/0x170
[  163.028372][  T831]  hci_conn_del+0x54e/0xdb0
[  163.030071][  T831]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  163.032042][  T831]  hci_conn_hash_flush+0x4bf/0x790
[  163.033891][  T831]  ? __pfx_hci_conn_hash_flush+0x10/0x10
[  163.035968][  T831]  ? 0xffffffff81000000
[  163.037442][  T831]  ? hci_inquiry_cache_flush+0x176/0x2f0
[  163.039520][  T831]  hci_dev_close_sync+0x603/0x11a0
[  163.041386][  T831]  ? __pfx_bt_err+0x10/0x10
[  163.043024][  T831]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  163.045022][  T831]  ? __pfx_lock_release+0x10/0x10
[  163.046857][  T831]  hci_dev_do_close+0x2e/0x90
[  163.048580][  T831]  hci_rfkill_set_block+0x225/0x360
[  163.050471][  T831]  ? lockdep_hardirqs_on+0x7c/0x110
[  163.052347][  T831]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  163.054417][  T831]  rfkill_set_block+0x203/0x560
[  163.056212][  T831]  rfkill_epo+0x8e/0x1d0
[  163.057780][  T831]  rfkill_op_handler+0x262/0x280
[  163.059588][  T831]  process_one_work+0x9c5/0x1ba0
[  163.061404][  T831]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  163.063420][  T831]  ? __pfx_process_one_work+0x10/0x10
[  163.065385][  T831]  ? rcu_is_watching+0x12/0xc0
[  163.067116][  T831]  ? assign_work+0x1a0/0x250
[  163.068800][  T831]  worker_thread+0x6c8/0xf00
[  163.070512][  T831]  ? __kthread_parkme+0x148/0x220
[  163.072306][  T831]  ? __pfx_worker_thread+0x10/0x10
[  163.074157][  T831]  kthread+0x2c1/0x3a0
[  163.075644][  T831]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.077533][  T831]  ? __pfx_kthread+0x10/0x10
[  163.079230][  T831]  ret_from_fork+0x45/0x80
[  163.080877][  T831]  ? __pfx_kthread+0x10/0x10
[  163.082573][  T831]  ret_from_fork_asm+0x1a/0x30
[  163.084332][  T831]  </TASK>
[  163.086109][  T831] Kernel Offset: disabled
[  163.087947][  T831] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:27:39  Registers:
info registers vcpu 0

CPU#0
RAX=dffffc0000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=1ffff92000998f3d RDI=ffffffff8e1bb500 RBP=0000000000000000 RSP=ffffc90004cc7958
R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff905f1a17 R11=0000000000000002
R12=ffffffff8e1bb500 R13=ffffffff8e1bb500 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff817668c2 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fb0d5fadf98 CR3=000000005d02a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000080000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc83b501e0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f918de029b2
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f918de029bf
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f918de029b9
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f918de029cd
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f918de02a53
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f918de02b31
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000039 RCX=ffffffff8179b36a RDX=ffff88802316a440
RSI=0000000000000001 RDI=0000000000000000 RBP=1ffff9200073cf09 RSP=ffffc900039e7830
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000001 R13=0000000000000200 R14=ffff8880255ba440 R15=ffffc900039e7900
RIP=ffffffff819a0568 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f918dbf96c0 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f918dd69ae0 CR3=000000003357a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f918de029b2
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f918de029bf
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f918de029b9
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f918de029cd
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f918de02a53
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f918de02b31
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f918df4b488 00007f918df4b480 00007f918df4b478 00007f918df4b450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f918eaad100 00007f918df4b440 00007f918df4b458 00007f918df4b4a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f918df4b498 00007f918df4b490 00007f918df4b488 00007f918df4b480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff851b94a5 RDI=ffffffff9ab0cc20 RBP=ffffffff9ab0cbe0 RSP=ffffc900055c7188
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000000000000b
R12=0000000000000000 R13=000000000000000a R14=ffffffff851b9440 R15=0000000000000000
RIP=ffffffff851b94cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fb0d5f8cf98 CR3=000000004517c000 CR4=00352ef0
DR0=fffffffffffffffb DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fcfefe00 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed32e7710 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000ff0000 ffff000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 19694645585e4445 4905194e584b4905
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e445f4559051a04 1b101b071d051b07
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726f662027732527 20656c6966207325 2064657461657263 000a73253a47000a
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 574a430502560002 0540494c43055600 0541405144405746 000a56001f47000a
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000051 0000000000000000 36706f6f6c2f6b63 6f6c622f6c617574
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d3d4d4554535953 42555300362d3834 3132312f6d766b2f 3d485441505f5354
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 28794d011d060f16 06556e447f786e71 7532746b223b3d6a 794819141e0e1607
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f7f7f5f767f7f 7f777f5d7f7b7f7f 7f7f7c7f7f7f7f6b 7f597f7e7f7f763f
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 414e490000303131 323d4a414d003236 003834313131313d 4445003233323d52
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000380000303131 3136310036003234 0032312f3131312f 3d45003200323d52
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
info registers vcpu 3

CPU#3
RAX=00000000001657ef RBX=0000000000000003 RCX=ffffffff8b293679 RDX=0000000000000000
RSI=ffffffff8b6cd860 RDI=ffffffff8bd1d3e0 RBP=ffffed1003ad3488 RSP=ffffc900001a7e08
R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000
R12=0000000000000003 R13=ffff88801d69a440 R14=ffffffff905f1a10 R15=0000000000000000
RIP=ffffffff8b294a5f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007fb0d5f8dd58 CR3=0000000028d08000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000004080 Opmask01=0000000040000000 Opmask02=000000000000ffdf Opmask03=8200002010820020
Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed32e8120 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00ff0000 00ff000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373262552303323 7373262552317bf3
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 75d1fee36afdf7d8 7373262007536b07
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 78742f7365756575 712f792f74656e2f 6c6175747269762f 736563697665642f
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d1 0000302d78742f73 65756575712f792f 74656e2f6c617574
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06a28d90198e84ab 000055537422b865 0000000000000201 0000000000000032
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4001040603571d 2a90bebc28bda89b 332c4637792122c3 38312c312c3061f3
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c7e7f7f3f7fff7d 7efcfeff6dfffffb 7f6f77777b7fe7ff 7f7f7e7f7f7fffff
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383a3a263d383a3a 263c383a3a263f38 3a3a263e383a3a26 39383a3a2638383a
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c4634302c453431 2c3000312c003030 4720323052203030 5500523330495230
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c332c302c2c3331 2c30002c2c002c30 332032002c20302c 38002c312c30332c
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020